156-215.81

156-215.81 practice questions, page 9 of 10, with answer review and explanations.

Question 41

The competition between stateful inspection and proxies was based on performance, protocol support, and security. Considering stateful Inspections and Proxies, which statement is correct?

  1. Stateful Inspection is limited to Layer 3 visibility, with no Layer 4 to Layer 7 visibility capabilities.
  2. When it comes to performance, proxies were significantly faster than stateful inspection firewalls.
  3. Proxies offer far more security because of being able to give visibility of the payload (the data).
  4. When it comes to performance, stateful inspection was significantly faster than proxies.

Question 42

What are the Threat Prevention software components available on the Check Point Security Gateway?

  1. IPS, Threat Emulation and Threat Extraction
  2. IPS, Anti-Bot, Anti-Virus, SandBlast and Macro Extraction
  3. IPS, Anti-Bot, Anti-Virus, Threat Emulation and Threat Extraction
  4. IDS, Forensics, Anti-Virus, Sandboxing

Question 43

Check Point licenses come in two forms. What are those forms?

  1. Central and Local.
  2. Access Control and Threat Prevention.
  3. On-premise and Public Cloud.
  4. Security Gateway and Security Management.

Question 44

Both major kinds of NAT support Hide and Static NAT. However, one offers more flexibility. Which statement is true?

  1. Manual NAT can offer more flexibility than Automatic NAT.
  2. Dynamic Network Address Translation (NAT) Overloading can offer more flexibility than Port Address Translation.
  3. Dynamic NAT with Port Address Translation can offer more flexibility than Network Address Translation (NAT) Overloading.
  4. Automatic NAT can offer more flexibility than Manual NAT.

Question 45

What is the default tracking option of a rule?

  1. Tracking
  2. Log
  3. None
  4. Alert