156-215.81.20 Online Practice Questions and Answers

Correct Answer: C

Correct Answer: A

Reference: https://sc1.checkpoint.com/documents/R80/CP_R80_SecMGMT/html_frameset.htm?topic=documents/R80/CP_R80_SecMGMT/125443

Correct Answer: A

The users and user groups are arranged on the Account Unit in the tree structure of the LDAP server. User management in User Directory is external, not local. You can change the User Directory templates. Users associated with this template get the changes immediately. You can change user definitions manually in SmartDashboard, and the changes are immediate on the server. Reference: https://sc1.checkpoint.com/documents/R77/ CP_R77_SecurityManagement_WebAdminGuide/html_frameset.htm?topic=documents/R77/CP_R77_SecurityManagement_WebAdminGuide/94041

Correct Answer: B

Correct Answer: D

Correct Answer: B

Using Endpoint Identity Agents give you:

1.

User and machine identity

2.

Minimal user intervention ?all necessary configuration is done by administrators and does not require user input.

3.

Seamless connectivity ?transparent authentication using Kerberos Single Sign-On (SSO) when users are logged in to the domain. If you do not want to use SSO, users enter their credentials manually. You can let them save these credentials.

4.

Connectivity through roaming ?users stay automatically identified when they move between networks, as the client detects the movement and reconnects.

Reference: https://www.checkpoint.com/products/identity-awareness-software-blade/

Correct Answer: C

Each VPN tunnel in the community may be set to be a Permanent Tunnel. Since Permanent Tunnels are constantly monitored, if the VPN tunnel is down, then a log, alert, or user defined action, can be issued. A VPN tunnel is monitored by periodically sending "tunnel test" packets. As long as responses to the packets are received the VPN tunnel is considered "up." If no response is received within a given time period, the VPN tunnel is considered "down." Permanent Tunnels can only be established between Check Point Security Gateways. The configuration of Permanent Tunnels takes place on the community level and:

1.

Can be specified for an entire community. This option sets every VPN tunnel in the community as permanent.

2.

Can be specified for a specific Security Gateway. Use this option to configure specific Security Gateways to have permanent tunnels.

3.

Can be specified for a single VPN tunnel. This feature allows configuring specific tunnels between specific Security Gateways as permanent.

Reference: https://sc1.checkpoint.com/documents/R77/CP_R77_VPN_AdminGuide/html_frameset.htm?topic=documents/R77/CP_R77_VPN_AdminGuide/14018

Correct Answer: C

Correct Answer: D

On the VPN Routing page, enable the VPN routing for satellites section, by selecting one of these options:

1.

To center and to other Satellites through center; this allows connectivity between Gateways; for example, if the spoke Gateways are DAIP Gateways, and the hub is a Gateway with a static IP address

2.

To center, or through the center to other satellites, to Internet and other VPN targets; this allows connectivity between the Gateways, as well as the ability to inspect all communication passing through the hub to the Internet. Reference: https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=andsolutionid=sk31021

Correct Answer: C

Reference: http://ccsawannabe.blogspot.com/2016/04/check-point-identity-awareness.html