CCSA Certified Official Practice Test 156-215.81.20 - Jan-2025
Ace CheckPoint 156-215.81.20 Certification with Actual Questions Jan 09, 2025 Updated
NEW QUESTION # 86
Which icon in the WebUI indicates that read/write access is enabled?
- A. Book
- B. Eyeglasses
- C. Pencil
- D. Padlock
Answer: C
NEW QUESTION # 87
After trust has been established between the Check Point components, what is TRUE about name and IP-address changes?
- A. The Security Gateway name cannot be changed in command line without re-establishing trust
- B. The Security Management Server name cannot be changed in SmartConsole without re-establishing trust
- C. The Security Management Server IP-address cannot be changed without re-establishing the trust
- D. Security Gateway IP-address cannot be changed without re-establishing the trust
Answer: D
NEW QUESTION # 88
You noticed that CPU cores on the Security Gateway are usually 100% utilized and many packets were dropped. You don't have a budget to perform a hardware upgrade at this time. To optimize drops you decide to use Priority Queues and fully enable Dynamic Dispatcher.
How can you enable them?
- A. fw ctl multik dynamic_dispatching set_mode 9
- B. fw ctl miltik pq enable
- C. fw ctl multik set_mode 9
- D. fw ctl multik dynamic_dispatching on
Answer: C
NEW QUESTION # 89
R80.10 management server can manage gateways with which versions installed?
- A. Versions R77 and higher
- B. Versions R76 and higher
- C. Version R75 and higher
- D. Versions R75.20 and higher
Answer: B
NEW QUESTION # 90
What is true about the IPS-Blade?
- A. in R80, in the IPS Layer, the only three possible actions are Basic, Optimized and Strict
- B. in R80, the GeoPolicy Exceptions and the Threat Prevention Exceptions are the same
- C. in R80, IPS Exceptions cannot be attached to "all rules"
- D. in R80, IPS is managed by the Threat Prevention Policy
Answer: D
NEW QUESTION # 91
What protocol is specifically used for clustered environments?
- A. Synchronized Cluster Protocol
- B. Cluster Control Protocol
- C. Control Cluster Protocol
- D. Clustered Protocol
Answer: B
NEW QUESTION # 92
What are the two elements of address translation rules?
- A. Manipulated packet and original packet
- B. Untranslated packet and manipulated packet
- C. Original packet and translated packet
- D. Translated packet and untranslated packet
Answer: C
NEW QUESTION # 93
What is the difference between SSL VPN and IPSec VPN?
- A. SSL VPN requires installation of a resident VPN client
- B. IPSec VPN requires installation of a resident VPN client and SSL VPN requires only an installed Browser
- C. IPSec VPN does not require installation of a resident VPN client
- D. SSL VPN and IPSec VPN are the same
Answer: B
NEW QUESTION # 94
True or False: In R80, more than one administrator can login to the Security Management Server with write permission at the same time.
- A. False, this feature has to be enabled in the Global Properties.
- B. False, only one administrator can login with write permission.
- C. True, every administrator works in a session that is independent of the other administrators.
- D. True, every administrator works on a different database that is independent of the other administrators.
Answer: C
NEW QUESTION # 95
One of major features in R80.x SmartConsole is concurrent administration.
Which of the following is NOT possible considering that AdminA, AdminB, and AdminC are editing the same Security Policy?
- A. AdminA and AdminB are editing the same rule at the same time.
- B. AdminB sees a pencil icon next the rule that AdminB is currently editing.
- C. AdminC sees a lock icon which indicates that the rule is locked for editing by another administrator.
- D. AdminA, AdminB and AdminC are editing three different rules at the same time.
Answer: A
NEW QUESTION # 96
You are going to perform a major upgrade.
Which back up solution should you use to ensure your database can be restored on that device?
- A. snapshot
- B. backup
- C. Database Revision
- D. logswitch
Answer: A
NEW QUESTION # 97
Fill in the blank: Service blades must be attached to a ______________.
- A. Security Gateway
- B. Management container
- C. Security Gateway container
- D. Management server
Answer: A
NEW QUESTION # 98
In which scenario is it a valid option to transfer a license from one hardware device to another?
- A. From an IBM Open Server to a 2200 Appliance
- B. From an IBM Open Server to an HP Open Server
- C. From a 4400 Appliance to a 2200 Appliance
- D. From a 4400 Appliance to an HP Open Server
Answer: C
NEW QUESTION # 99
A Check Point Software license consists of two components, the Software Blade and the Software Container. There are ______ types of Software Containers: ________.
- A. Three; Security Gateway, Endpoint Security, and Gateway Management
- B. Two; Endpoint Security and Security Gateway
- C. Three; Security Management, Security Gateway, and Endpoint Security
- D. Two; Security Management and Endpoint Security
Answer: C
NEW QUESTION # 100
An administrator is creating an IPsec site-to-site VPN between his corporate office and branch office. Both offices are protected by Check Point Security Gateway managed by the same Security Management Server (SMS). While configuring the VPN community to specify the pre-shared secret, the administrator did not find a box to input the pre-shared secret.
Why does it not allow him to specify the pre-shared secret?
- A. The Gateway is an SMB device
- B. The checkbox "Use only Shared Secret for all external members" is not checked
- C. Certificate based Authentication is the only authentication method available between two Security Gateway managed by the same SMS
- D. Pre-shared secret is already configured in Global Properties
Answer: C
NEW QUESTION # 101
Fill in the blanks: A Check Point software license consists of a__________ and _______.
- A. Software blade; software container
- B. Software container software package
- C. Software package: signature
- D. Signature; software blade
Answer: A
NEW QUESTION # 102
......
Try Free and Start Using Realistic Verified 156-215.81.20 Dumps Instantly.: https://www.prep4surereview.com/156-215.81.20-latest-braindumps.html
2025 The Most Effective 156-215.81.20 with 400 Questions Answers: https://drive.google.com/open?id=1E4jLtey62upBc1QSiEkLOkvIObkyOj6W
