156-215.80

156-215.80 practice questions, page 5 of 22, with answer review and explanations.

Question 21

An administrator is creating an IPsec site-to-site VPN between his corporate office and branch office. Both offices are protected by Check Point Security Gateway managed by the same Security Management Server. While configuring the VPN community to specify the pre-shared secret, the administrator found that the check box to enable pre-shared secret is shared and cannot be enabled. Why does it not allow him to specify the pre-shared secret?

  1. IPsec VPN blade should be enabled on both Security Gateway.
  2. Pre-shared can only be used while creating a VPN between a third party vendor and Check Point Security Gateway.
  3. Certificate based Authentication is the only authentication method available between two Security Gateway managed by the same SMS.
  4. The Security Gateways are pre-R75.40.

Question 22

You are the senior Firewall administrator for Alpha Corp, and have recently returned from a training course on Check Point's new advanced management platform. You are presenting an in-house overview of the new features of Check Point Management to the other administrators in Alpha Corp. How will you describe the new `Publish` button in Management Console?

  1. The Publish button takes any changes an administrator has made in their management session, publishes a copy to the Check Point Cloud, and then saves it to the database.
  2. The Publish button takes any changes an administrator has made in their management session and publishes a copy to the Check Point Cloud but does not save it to the database.
  3. The Publish button saves any changes an administrator has made in their management session. After saving to the database, any changes are now visible to all other administrator sessions.
  4. The Publish button saves any changes an administrator has made in their management session. After saving to the database, any changes are now visible to any new Unified Policy sessions.

Question 23

Which of the following ClusterXL modes uses a non-unicast MAC address for the cluster IP address.

  1. High Availability
  2. Load Sharing Multicast
  3. Load Sharing Pivot
  4. Master/Backup

Question 24

With the User Directory Software Blade, you can create user definitions on a(an) ___________ Server.

  1. NT domain
  2. SMTP
  3. LDAP
  4. SecurID

Question 25

Which of the following is NOT a component of a Distinguished Name?

  1. Organizational Unit
  2. Country
  3. Common Name
  4. User container