156-215.81 Online Practice Questions and Answers

Correct Answer: A

This answer is correct because these are two valid methods for mutually authenticating the VPN gateways, which means that both sides of the communication verify each other's identity using a shared secret or a public key certificate. A preshared secret is a password or a passphrase that both gateways know and use to encrypt and decrypt the VPN traffic. A PKI certificate is a digital document that contains the public key and other information that helps identify the gateway, such as the issuer, the subject, and the expiration date. The certificate is signed by a trusted certificate authority (CA) that vouches for the authenticity of the gateway. The other answers are not correct because they either include invalid or irrelevant methods for mutual authentication. PKI certificates and Kerberos tickets are not compatible methods for mutual authentication, because Kerberos tickets are issued by a Kerberos server and not by a CA. Pre-shared secrets and Kerberos tickets are also not compatible methods for mutual authentication, because they use different protocols and encryption algorithms. PKI certificates and DynamiciD OTP are not valid methods for mutual authentication, because DynamiciD OTP is a one-time password that is used for user authentication, not for gateway authentication.

What is mutual authentication? | Two-way authentication Mutual authentication - AWS Client VPN VPN authentication options - Windows Security Mutual Authentication | Top 3 Methods of Mutual Authentication Authentication methods and features - Microsoft Entra

Correct Answer: B

R80 is supported by Gaia only, which is Check Point's unified security operating system for all Check Point appliances, open servers, and virtualized gateways, p. 14. Windows and SecurePlatform are not supported by R80. , [Check Point Learning and Training Frequently Asked Questions (FAQs)]

Correct Answer: C

The Accounting tracking option is used to monitor the amount of data that passes through a connection. When this option is enabled on a traffic rule, the involved traffic logs are updated every 10 minutes to show how much data has passed on the connection. This information can be used for billing or auditing purposes. References: Check Point R81 Logging and Monitoring Administration Guide

Correct Answer: A

The command that can be used to determine the software version from the CLI is fw ver. This command displays the version of the firewall module and the build number . fw stat, fw monitor, and cpinfo are not commands for software version identification. References: Check Point R81 Command Line Interface

Correct Answer: B

The Access Role object type is used to grant network access to an LDAP user group. It defines a set of users and machines that can access a specific network resource References: Access Role, LDAP User Group

Correct Answer: D

The command api status shows the API server status, including whether it is enabled or not, the port number, and the API version. References: Check Point R81 API Reference Guide

Correct Answer: D

The Advanced Networking Blade is NOT subscription-based and therefore does not have to be renewed on a regular basis. The Advanced Networking Blade provides advanced routing capabilities such as BGP, OSPF, VRRP, and multicast routing. The other blades are subscription-based and require annual renewal to receive updates and support from Check Point. References: Check Point License Guide, IPS Software Blade contracts, Product Catalog

Correct Answer: A

The purpose of the Clean-up Rule is to log all traffic that is not explicitly allowed or denied in the Rule Base. The Clean-up Rule is the last rule in the rulebase and is used to drop and log explicitly unmatched traffic. To improve the rulebase performance, noise traffic that is logged in the Clean-up rule should be included in the Noise rule so it is matched and dropped higher up in the rulebase. The other options are not valid purposes of the Clean- up Rule. References: Using Intune device cleanup rules, Security policy fundamentals, Support, Support Requests, Training, Documentation, and Knowledge base for Check Point products and services

Correct Answer: A

Browser-based Authentication sends users to a web page to acquire identities using Captive Portal and Transparent Kerberos Authentication. Captive Portal is a web page that prompts users to enter their credentials. Transparent Kerberos Authentication is a method that automatically authenticates users who have a valid Kerberos ticket from the Active Directory domain controller. UserCheck is a feature that allows users to interact with the security policy, not a method of authentication. User Directory is a component that integrates with external user databases, not a web page for authentication. Captive Portal alone is not enough to fill in the blank, as it is only one of the methods used by Browser-based Authentication.

Correct Answer: A

The Publish operation sends the modifications made via SmartConsole in the private session and makes them public is the correct answer. This is because publishing is the process of saving your changes to the database and making them

available to other administrators. Publishing also allows you to install policies on Security Gateways.

References: [Publishing Changes]