156-215.81 Free Practice Test

The Network Operations Center administrator needs access to Check Point Security devices mostly for troubleshooting purposes. You do not want to give her access to the expert mode, but she still should be able to run tcpdump. How can you achieve this requirement?

1. A. Add tcpdump to CLISH using add command.Create a new access role.Add tcpdump to the role.Create new user with any UID and assign role to the user.
2. B. Add tcpdump to CLISH using add command.Create a new access role.Add tcpdump to the role.Createnew user with UID 0 and assign role to the user.
3. C. Create a new access role.Add expert-mode access to the role.Create new user with UID 0 and assign role to the user.
4. D. Create a new access role.Add expert-mode access to the role.Create new user with any UID and assign role to the user.

Correct Answer: A

Full synchronization between cluster members is handled by Firewall Kernel. Which port is used for this?

1. A. UDP port 265
2. B. TCP port 265
3. C. UDP port 256
4. D. TCP port 256

Correct Answer: B

What two ordered layers make up the Access Control Policy Layer?

1. A. URL Filtering and Network
2. B. Network and Threat Prevention
3. C. Application Control and URL Filtering
4. D. Network and Application Control

Correct Answer: D

When a Security Gateway sends its logs to an IP address other than its own, which deployment option is installed?

1. A. Distributed
2. B. Standalone
3. C. Bridge Mode
4. D. Targeted

Correct Answer: A

Which configuration element determines which traffic should be encrypted into a VPN tunnel vs. sent in the clear?

1. A. The firewall topologies
2. B. NAT Rules
3. C. The Rule Base
4. D. The VPN Domains

Correct Answer: C