156-215.81 Free Practice Test

To quickly review when Threat Prevention signatures were last updated, which Threat Tool would an administrator use?

1. A. Protections
2. B. IPS Protections
3. C. Profiles
4. D. ThreatWiki

Correct Answer: B

Which of the following Windows Security Events will NOT map a username to an IP address in Identity Awareness?

1. A. Kerberos Ticket Renewed
2. B. Kerberos Ticket Requested
3. C. Account Logon
4. D. Kerberos Ticket Timed Out

Correct Answer: D

Which of the following is considered to be the more secure and preferred VPN authentication method?

1. A. Password
2. B. Certificate
3. C. MD5
4. D. Pre-shared secret

Correct Answer: B
References:

John is using Management HA. Which Smartcenter should be connected to for making changes?

1. A. secondary Smartcenter
2. B. active Smartcenter
3. C. connect virtual IP of Smartcenter HA
4. D. primary Smartcenter

Correct Answer: B

Fill in the blank: Permanent VPN tunnels can be set on all tunnels in the community, on all tunnels for specific gateways, or _______.

1. A. On all satellite gateway to satellite gateway tunnels
2. B. On specific tunnels for specific gateways
3. C. On specific tunnels in the community
4. D. On specific satellite gateway to central gateway tunnels

Correct Answer: C
Each VPN tunnel in the community may be set to be a Permanent Tunnel. Since Permanent Tunnels are constantly monitored, if the VPN tunnel is down, then a log, alert, or user defined action, can be issued. A VPN tunnel is monitored by periodically sending "tunnel test" packets. As long as responses to the packets are received the VPN tunnel is considered "up." If no response is received within a given time period, the VPN tunnel is considered "down." Permanent Tunnels can only be established between Check Point Security Gateways. The configuration of Permanent Tunnels takes place on the community level and: