[Oct-2024 Newly Released] 156-215.81.20 Dumps for CCSA Certified
Updated Verified 156-215.81.20 dumps Q&As - 100% Pass
NEW QUESTION # 134
Which of the following is NOT a method used by Identity Awareness for acquiring identity?
- A. Remote Access
- B. Cloud IdP (Identity Provider)
- C. Active Directory Query
- D. RADIUS
Answer: B
NEW QUESTION # 135
Which type of attack can a firewall NOT prevent?
- A. SYN Flood
- B. Network Bandwidth Saturation
- C. Buffer Overflow
- D. SQL Injection
Answer: B
NEW QUESTION # 136
Which of the following blades is NOT subscription-based and therefore does not have to be renewed on a regular basis?
- A. Anti-Virus
- B. Advanced Networking Blade
- C. Threat Emulation
- D. Application Control
Answer: B
NEW QUESTION # 137
Where is the "Hit Count" feature enabled or disabled in SmartConsole?
- A. On the Policy layer
- B. On each Security Gateway
- C. In Global Properties for the Security Management Server
- D. On the Policy Package
Answer: A
NEW QUESTION # 138
What is the BEST method to deploy Identity Awareness for roaming users?
- A. Use identity agents
- B. Share user identities between gateways
- C. Use Office Mode
- D. Use captive portal
Answer: A
NEW QUESTION # 139
Which Threat Prevention Software Blade provides protection from malicious software that can infect your network computers? (Choose the best answer.)
- A. IPS
- B. Content Awareness
- C. Anti-Malware
- D. Anti-Virus
Answer: D
NEW QUESTION # 140
Which type of Check Point license is tied to the IP address of a specific Security Gateway and cannot be transferred to a gateway that has a different IP address?
- A. Corporate
- B. Central
- C. Local
- D. Formal
Answer: C
NEW QUESTION # 141
What Check Point technologies deny or permit network traffic?
- A. Packet Filtering, Stateful Inspection, Application Layer Firewall.
- B. IPS, Mobile Threat Protection
- C. ACL, SandBlast, MPT
- D. Application Control, DLP
Answer: A
NEW QUESTION # 142
Fill in the blank: Service blades must be attached to a ______________.
- A. Security Gateway
- B. Management container
- C. Security Gateway container
- D. Management server
Answer: A
NEW QUESTION # 143
Check Point ClusterXL Active/Active deployment is used when:
- A. There is High Availability solution set up
- B. Only when there is Multicast solution set up
- C. Only when there is Unicast solution set up
- D. There is Load Sharing solution set up
Answer: D
NEW QUESTION # 144
The purpose of the Communication Initialization process is to establish a trust between the Security Management Server and the Check Point gateways.
Which statement best describes this Secure Internal Communication (SIC)?
- A. New firewalls can easily establish the trust by using the expert password defined on the SMS and the SMS IP address.
- B. After successful initialization, the gateway can communicate with any Check Point node that possesses a SIC certificate signed by the same ICA.
- C. Secure Internal Communications authenticates the security gateway to the SMS before http communications are allowed.
- D. A SIC certificate is automatically generated on the gateway because the gateway hosts a subordinate CA to the SMS ICA.
Answer: B
NEW QUESTION # 145
What are valid authentication methods for mutual authenticating the VPN gateways?
- A. Pre-shared Secret and PKI Certificates
- B. PKI Certificates and DynamiciD OTP
- C. PKI Certificates and Kerberos Tickets
- D. Pre-Shared Secrets and Kerberos Ticket
Answer: A
NEW QUESTION # 146
Fill in the blank: To create policy for traffic to or from a particular location, use the _____________.
- A. Mobile Access software blade
- B. Geo policy shared policy
- C. DLP shared policy
- D. HTTPS inspection
Answer: B
NEW QUESTION # 147
Which one of the following is a way that the objects can be manipulated using the new API integration in R80 Management?
- A. Microsoft Publisher
- B. Microsoft Word
- C. JSON
- D. RC4 Encryption
Answer: C
NEW QUESTION # 148
Using ClusterXL, what statement is true about the Sticky Decision Function?
- A. All connections are processed and synchronized by the pivot
- B. Can only be changed for Load Sharing implementations
- C. Is configured using cpconfig
- D. Is only relevant when using SecureXL
Answer: B
NEW QUESTION # 149
Fill in the blank: In order to install a license, it must first be added to the ____________.
- A. Package repository
- B. License and Contract repository
- C. Download Center Web site
- D. User Center
Answer: B
NEW QUESTION # 150
When should you generate new licenses?
- A. Only when the license is upgraded.
- B. After a device upgrade.
- C. Before installing contract files.
- D. When the existing license expires, license is upgraded or the IP-address associated with the license changes.
Answer: D
NEW QUESTION # 151
Which Check Point supported authentication scheme typically requires a user to possess a token?
- A. TACACS
- B. SecurlD
- C. Check Point password
- D. RADIUS
Answer: B
NEW QUESTION # 152
Fill in the blanks: In _____ NAT, Only the ________ is translated.
- A. Hide; source
- B. Hide; destination
- C. Simple; source
- D. Static; source
Answer: A
NEW QUESTION # 153
Which of the following is NOT a type of Endpoint Identity Agent?
- A. Full
- B. Light
- C. Terminal
- D. Custom
Answer: D
NEW QUESTION # 154
When installing a dedicated R80 SmartEvent server, what is the recommended size of the root partition?
- A. Less than 20GB
- B. More than 10GB and less than 20 GB
- C. At least 20GB
- D. Any size
Answer: C
NEW QUESTION # 155
Choose what BEST describes the reason why querying logs now is very fast.
- A. Indexing Engine indexes logs for faster search results
- B. SmartConsole now queries results directly from the Security Gateway
- C. The amount of logs been store is less than the usual in older versions
- D. New Smart-1 appliances double the physical memory install
Answer: A
NEW QUESTION # 156
Which two Identity Awareness daemons are used to support identity sharing?
- A. Policy Manipulation Point (PMP) and Policy Activation Point (PAP)
- B. Policy Enforcement Point (PEP) and Policy Manipulation Point (PMP)
- C. Policy Decision Point (PDP) and Policy Enforcement Point (PEP)
- D. Policy Activation Point (PAP) and Policy Decision Point (PDP)
Answer: C
NEW QUESTION # 157
......
Latest 156-215.81.20 Exam Dumps CheckPoint Exam from Training: https://www.lead1pass.com/CheckPoint/156-215.81.20-practice-exam-dumps.html
New 2024 Latest Questions 156-215.81.20 Dumps - Use Updated CheckPoint Exam: https://drive.google.com/open?id=1amhbflZ9HO6lpgxExthBsgW_NyGQbdtP