156-215.81 Free Practice Test

True or False: The destination server for Security Gateway logs depends on a Security Management Server configuration.

1. A. False, log servers are configured on the Log Server General Properties
2. B. True, all Security Gateways will only forward logs with a SmartCenter Server configuration
3. C. True, all Security Gateways forward logs automatically to the Security Management Server
4. D. False, log servers are enabled on the Security Gateway General Properties

Correct Answer: B

Fill in the blank: Browser-based Authentication sends users to a web page to acquire identities using ________ .

1. A. Captive Portal and Transparent Kerberos Authentication
2. B. UserCheck
3. C. User Directory
4. D. Captive Portal

Correct Answer: A
https://sc1.checkpoint.com/documents/R81/WebAdminGuides/EN/CP_R81_IdentityAwareness_AdminGuide/T

The SIC Status “Unknown” means

1. A. There is connection between the gateway and Security Management Server but it is not trusted.
2. B. The secure communication is established.
3. C. There is no connection between the gateway and Security Management Server.
4. D. The Security Management Server can contact the gateway, but cannot establish SIC.

Correct Answer: C
SIC Status
After the gateway receives the certificate issued by the ICA, the SIC status shows if the Security Management Server can communicate securely with this gateway:

What are the three types of UserCheck messages?

1. A. inform, ask, and block
2. B. block, action, and warn
3. C. action, inform, and ask
4. D. ask, block, and notify

Correct Answer: A
Inform User Inform
Shows when the action for the ruleClosed is inform. It informs users what the company policy is for that site. Blocked Message
Block
Shows when a request is blocked. Ask User
Ask
Shows when the action for the rule is ask. It informs users what the company policy is for that site and they must click OK to continue to the site.
https://sc1.checkpoint.com/documents/R81/WebAdminGuides/EN/CP_R81_DataLossPrevention_AdminGuide/

Which of the following is NOT a valid deployment option for R80?

1. A. All-in-one (stand-alone)
2. B. CloudGuard
3. C. Distributed
4. D. Bridge Mode

Correct Answer: B