Online Access Free 156-215.81.20 Practice Test

You want to set up a VPN tunnel to a external gateway. You had to make sure that the IKE P2 SA will only be established between two subnets and not all subnets defined in the default VPN domain of your gateway.

• A.In the SmartConsole create a dedicated VPN Community for both Gateways. Selecting the local gateway in the Community you can set the VPN Domain to 'User defined' and put in the local network.
• B.In the SmartConsole create a dedicated VPN Community for both Gateways. On the Management add the following line to the $FWDIR/conf/user.def.FWI file subnet_for_range_and_peer = { <peerGW_IP,first_IP_in_range1,last_IP_in_the_range1; subnet_mask> );
• C.In the SmartConsole create a dedicated VPN Community for both Gateways. On the Gateway add the following line to the $FWDlR/cont/user.def.FW1 file subnet_for_range_and_peer = { <peerGW_lP,first_IP_in_range1,last_lP_in_the_range1;subnet_mask> };
• D.In the SmartConsole create a dedicated VPN Community for both Gateways. Go to Security Policies / Access Control and create an in-line layer rule with source and destination containing the two networks used for the IKE P2 SA. Put the name of the Community in the VPN column.

Which statement describes what Identity Sharing is in Identity Awareness?

• A.Management servers can acquire and share identities with Security Gateways
• B.Security Gateways can acquire and share identities with other Security Gateways
• C.Administrators can share identifies with other administrators
• D.Users can share identities with other users

For Automatic Hide NAT rules created by the administrator what is a TRUE statement?

• A.Automatic NAT rules are supported for Host objects only.
• B.Source Port Address Translation (PAT) is disabled by default
• C.Source Port Address Translation (PAT) is enabled by default
• D.Automate NAT rules are supported for Network objects only.

Due to high CPU workload on the Security Gateway, the security administrator decided to purchase a new multicore CPU to replace the existing single core CPU.
After installation, is the administrator required to perform any additional tasks?

• A.Go to clash-Run cpconfig | Configure CoreXL to make use of the additional Cores | Exit cpconfig | Reboot Security Gateway
• B.Go to clash-Run cpconfig | Configure CoreXL to make use of the additional Cores | Exit cpconfig | Reboot Security Gateway | Install Security Policy
• C.Go to clash-Run cpstop | Run cpstart
• D.Administrator does not need to perform any task. Check Point will make use of the newly installed CPU and Cores

Administrator Dave logs into R80 Management Server to review and makes some rule changes. He notices that there is a padlock sign next to the DNS rule in the Rule Base.

What is the possible explanation for this?

• A.Another administrator is logged into the Management and currently editing the DNS Rule.
• B.DNS Rule is a placeholder rule for a rule that existed in the past but was deleted.
• C.This is normal behavior in R80 when there are duplicate rules in the Rule Base.
• D.DNS Rule is using one of the new feature of R80 where an administrator can mark a rule with the padlock icon to let other administrators know it is important.