156-915.80 Exam - Check Point Certified Security Expert Update - R80

Question No: 5

Which of the following items should be configured for the Security Management Server to authenticate using LDAP?

A. Check Point Password

B. WMI object

C. Domain Admin username

D. Windows logon password

View Answer

Question No: 6

Complete this statement from the options provided. Using Captive Portal, unidentified users may be either; blocked, allowed to enter required credentials, or required to download the .

A. Identity Awareness Agent

B. Full Endpoint Client

C. ICA Certificate

D. SecureClient

View Answer

Question No: 7

You cannot use SmartDashboardu2021s User Directory features to connect to the LDAP server. What should you investigate?

1) Verify you have read-only permissions as administrator for the operating system.

2) Verify there are no restrictions blocking SmartDashboard's User Manager from connecting to the LDAP server.

3) Check that the login Distinguished Name configured has root permission (or at least write permission Administrative access) in the LDAP Server's access control configuration.

A. 1, 2, and 3

B. 2 and 3

C. 1 and 2

D. 1 and 3

View Answer

Question No: 8

Which of the following authentication methods can be configured in the Identity Awareness setup wizard?

A. Check Point Password

B. TACACS

C. LDAP

D. Windows password

View Answer

Question No: 9

Before upgrading SecurePlatform to GAiA, you should create a backup. To save time, many administrators use the command backup. This creates a backup of the Check Point configuration as well as the system configuration.

An administrator has installed the latest HFA on the system for fixing traffic problem after creating a backup file. There is a mistake in the very complex static routing configuration. The Check Point configuration has not been changed. Can the administrator use a restore to fix the errors in static routing?

A. The restore is not possible because the backup file does not have the same build number (version).

B. The restore is done by selecting Snapshot Management from the boot menu of GAiA.

C. The restore can be done easily by the command restore and copying netconf.C from the production environment.

D. A backup cannot be restored, because the binary files are missing.

View Answer

Question No: 10

To run GAiA in 64bit mode, which of the following is true?

1) Run set edition default 64-bit.

2) Install more than 4 GB RAM.

3) Install more than 4 TB of Hard Disk.

A. 1 and 3

B. 1 and 2

C. 2 and 3

D. 1, 2, and 3

View Answer

Question No: 11

Many companies have defined more than one administrator. To increase security, only one administrator should be able to install a Rule Base on a specific Firewall. How do you configure this?

A. Define a permission profile in SmartDashboard with read/write privileges, but restrict it to all other firewalls by placing them in the Policy Targets field. Then, an administrator with this permission profile cannot install a policy on any Firewall not listed here.

B. Put the one administrator in an Administrator group and configure this group in the specific Firewall

object in Advanced > Permission to Install.

C. In the object General Properties representing the specific Firewall, go to the Software Blades product list and select Firewall. Right-click in the menu, select Administrator to Install to define only this administrator.

D. Right-click on the object representing the specific administrator, and select that Firewall in Policy Targets.

View Answer

Question No: 12

In a zero downtime firewall cluster environment, what command syntax do you run to avoid switching problems around the cluster for command cphaconf?

View Answer

Question No: 13

To qualify as an Identity Awareness enabled rule, which column MAY include an Access Role?

A. Action

B. Source

C. User

D. Track

View Answer

Question No: 14

You have a diskless appliance platform. How do you keep swap file wear to a minimum?

A. Issue FW-1 bases its package structure on the Security Management Server, dynamically loading when the firewall is booted.

B. The external PCMCIA-based flash extension has the swap file mapped to it, allowing easy replacement.

C. Use PRAM flash devices, eliminating the longevity.

D. A RAM drive reduces the swap file thrashing which causes fast wear on the device.

View Answer