156-215.81 : Check Point Certified Security Administrator R81 Exam

Avaya
156-215.81
Check Point Certified Security Administrator R81
https://killexams.com/pass4sure/exam-detail/156-215.81
Question: 87
What are the two types of NAT supported by the Security Gateway?
A. Destination and Hide
B. Hide and Static
C. Static and Source
D. Source and Destination
Answer: B
Explanation:
A Security Gateway can use these procedures to translate IP addresses in your network:
Question: 88
You are the Check Point administrator for Alpha Corp with an R80 Check Point estate. You have received a call by one of the
management users stating that they are unable to browse the Internet with their new tablet connected to the company Wireless. The
Wireless system goes through the Check Point Gateway.
How do you review the logs to see what the problem may be?
A. Open SmartLog and connect remotely to the IP of the wireless controller
B. Open SmartView Tracker and filter the logs for the IP address of the tablet
C. Open SmartView Tracker and check all the IP logs for the tablet
D. Open SmartLog and query for the IP address of the Manager’s tablet
Answer: B
Question: 89
What type of NAT is a one-to-one relationship where each host is translated to a unique address?
A. Source
B. Static
C. Hide
D. Destination
Answer: B
Question: 90
Can you use the same layer in multiple policies or rulebases?
A. Yes – a layer can be shared with multiple policies and rules.
B. No – each layer must be unique.
C. No – layers cannot be shared or reused, but an identical one can be created.
D. Yes – but it must be copied and pasted with a different name.
Answer: A
Explanation:
https://community.checkpoint.com/t5/Management/Sharing-a-layer-across-different-policies/td-p/1660
Question: 91
What is the purpose of the CPCA process?
A. Monitoring the status of processes
B. Sending and receiving logs
C. Communication between GUI clients and the SmartCenter server
D. Generating and modifying certificates
Answer: D
Question: 92
A SAM rule Is implemented to provide what function or benefit?
A. Allow security audits.
B. Handle traffic as defined in the policy.
C. Monitor sequence activity.
D. Block suspicious activity.
Answer: D
Explanation:
https://sc1.checkpoint.com/documents/R81/WebAdminGuides/EN/CP_R81_LoggingAndMonitoring_AdminGuide/Topics-
LMG/Monitoring-Suspicious-Activity-Rules.htm
Question: 93
What is the purpose of Captive Portal?
A. It manages user permission in SmartConsole
B. It provides remote access to SmartConsole
C. It authenticates users, allowing them access to the Internet and corporate resources
D. It authenticates users, allowing them access to the Gaia OS
Answer: C
Explanation:
Captive Portal is a simple method that authenticates users with a web interface. When users try to access a protected web resource, they
enter authentication information in a form that shows in their web browser.
https://sc1.checkpoint.com/documents/R80.30/WebAdminGuides/EN/CP_R80.30_IdentityAwareness_AdminGuide/html_frameset.htm?
topic=documents/R80.30/WebAdminGuides/EN/CP_R80.30_IdentityAwareness_AdminGuide/148468
Question: 94
Which Threat Prevention profile uses sanitization technology?
A. Cloud/data Center
B. perimeter
C. Sandbox
D. Guest Network
Answer: B
Explanation:
Strict Security for Perimeter Profile & Perimeter Profile use sanitization as a technology in Threat prevention profile
Question: 95
Choose what BEST describes the reason why querying logs now is very fast.
A. New Smart-1 appliances double the physical memory install
B. Indexing Engine indexes logs for faster search results
C. SmartConsole now queries results directly from the Security Gateway
D. The amount of logs been store is less than the usual in older versions
Answer: B
Explanation:
Ref:
https://sc1.checkpoint.com/documents/R80.40/WebAdminGuides/EN/CP_R80.40_LoggingAndMonitoring_AdminGuide/Topics-
LMG/Enabling-log-indexing.htm
Question: 96
What is the Transport layer of the TCP/IP model responsible for?
A. It transports packets as datagrams along different routes to reach their destination.
B. It manages the flow of data between two hosts to ensure that the packets are correctly assembled and delivered to the target
application.
C. It defines the protocols that are used to exchange data between networks and how host programs interact with the Application layer.
D. It deals with all aspects of the physical components of network connectivity and connects with different network types.
Answer: B
Question: 97
Stateful Inspection compiles and registers connections where?
A. Connection Cache
B. State Cache
C. State Table
D. Network Table
Answer: C
Question: 98
What kind of NAT enables Source Port Address Translation by default?
A. Automatic Static NAT
B. Manual Hide NAT
C. Automatic Hide NAT
D. Manual Static NAT
Answer: C
Explanation:
https://sc1.checkpoint.com/documents/R81/WebAdminGuides/EN/CP_R81_SecurityManagement_AdminGuide/Topics-SECMG/NAT-
Rules.htm
Question: 99
Which tool is used to enable cluster membership on a Gateway?
A. SmartUpdate
B. cpconfig
C. SmartConsole
D. sysconfig
Answer: B
Explanation:
References:
Question: 100
When an encrypted packet is decrypted, where does this happen?
A. Security policy
B. Inbound chain
C. Outbound chain
D. Decryption is not supported
Answer: A
For More exams visit https://killexams.com/vendors-exam-list

User: Viktoria***** Thanks to Killexams.com’s comprehensive Questions and Answers package and exam simulator, I successfully passed the challenging 156-215.81 exam. The framework questions were particularly difficult, but practicing extensively with their simulator helped me master these concepts. I am proud to share that I have now received my certification, all thanks to these excellent resources.

User: Jackson***** Weeks of coaching with killexams.com’s accurate testprep materials led to a higher-than-expected score on my 156-215.81 exam. Their questions mirrored the actual test, ensuring thorough preparation, and I am relieved and grateful for their assistance.

User: Luda***** Do you feel that sweet sense of victory? I sure do, and it is a pleasant feeling. If you want to experience the same, head over to Killexams.com to prepare for your 156-215.81 exam. I did just that and was thrilled with the quality of the practice tests provided. The facilities offered by Killexams.com are perfect, and there is no need to worry about failing. I passed the exam with flying colors, and so can you!

User: Mack***** I have been using Killexams.com for years to study for IT exams, and they consistently provide reliable materials. The 156-215.81 exam was no exception. I used their questions/answers and exam simulator, and they were both authentic and valid. I have only heard good things about their customer service, although I have never personally needed to contact them.

User: Yasha***** With limited time to prepare for the 156-215.81 exam, Killexams.com’s practice tests were a lifesaver. Their extensive question bank enabled me to plan effectively and breeze through the exam stages. The well-organized materials made my preparation efficient, and I am thrilled with the results.

---