Free 156-215.80 Exam Braindumps (page: 23)

Page 23 of 134

While enabling the Identity Awareness blade the Identity Awareness wizard does not automatically detect the windows domain. Why does it not detect the windows domain?

  1. Security Gateways is not part of the Domain
  2. SmartConsole machine is not part of the domain
  3. Security Management Server is not part of the domain
  4. Identity Awareness is not enabled on Global properties

Answer(s): B

Explanation:

To enable Identity Awareness:
1. Log in to SmartDashboard.
2. From the Network Objects tree, expand the Check Point branch.
3. Double-click the Security Gateway on which to enable Identity Awareness.
4. In the Software Blades section, select Identity Awareness on the Network Security tab. The Identity Awareness Configuration wizard opens.
5. Select one or more options. These options set the methods for acquiring identities of managed and unmanaged assets.
-AD Query - Lets the Security Gateway seamlessly identify Active Directory users and computers.
-Browser-Based Authentication - Sends users to a Web page to acquire identities from unidentified users. If Transparent Kerberos Authentication is configured, AD users may be identified transparently.
-Terminal Servers - Identify users in a Terminal Server environment (originating from one IP address). See Choosing Identity Sources.
Note - When you enable Browser-Based Authentication on a Security Gateway that is on an IP Series appliance, make sure to set the Voyager management application port to a port other than 443 or 80.
6. Click Next.
The Integration With Active Directory window opens.
When SmartDashboard is part of the domain, SmartDashboard suggests this domain automatically. If you select this domain, the system creates an LDAP Account Unit with all of the domain controllers in the organization's Active Directory.


Reference:

https://sc1.checkpoint.com/documents/R76/CP_R76_IdentityAwareness_AdminGuide/62050.htm



View the rule below. What does the lock-symbol in the left column mean?

  1. The current administrator has read-only permissions to Threat Prevention Policy.
  2. Another user has locked the rule for editing.
  3. Configuration lock is present. Click the lock symbol to gain read-write access.
  4. The current administrator is logged in as read-only because someone else is editing the policy.

Answer(s): B

Explanation:

Administrator Collaboration
More than one administrator can connect to the Security Management Server at the same time. Every administrator has their own username, and works in a session that is independent of the other administrators. When an administrator logs in to the Security Management Server through SmartConsole, a new editing session starts. The changes that the administrator makes during the session are only available to that administrator. Other administrators see a lock icon on object and rules that are being edited.
To make changes available to all administrators, and to unlock the objects and rules that are being edited, the administrator must publish the session.


Reference:

https://sc1.checkpoint.com/documents/R80/CP_R80_SecMGMT/html_frameset.htm?topic=documents/R80/CP_R80_SecMGMT/124265



When attempting to start a VPN tunnel, in the logs the error 'no proposal chosen' is seen numerous times. No other VPN-related log entries are present. Which phase of the VPN negotiations has failed?

  1. IKE Phase 1
  2. IPSEC Phase 2
  3. IPSEC Phase 1
  4. IKE Phase 2

Answer(s): A



Which command is used to add users to or from existing roles?

  1. Add rba user <User Name> roles <List>
  2. Add rba user <User Name>
  3. Add user <User Name> roles <List>
  4. Add user <User Name>

Answer(s): A

Explanation:

Configuring Roles - CLI (rba)


Reference:

https://sc1.checkpoint.com/documents/R76/CP_R76_Gaia_WebAdmin/73101.htm



Page 23 of 134



Post your Comments and Discuss Checkpoint 156-215.80 exam with other Community members:

andreito commented on May 13, 2019
very cool test, im very very ver very cool!
CHILE
upvote

Carlos commented on May 13, 2019
This is a well formatted and clean brain dumps. I had tried other sites and the images were all full of watermarks stolen from other sites. This one looks pretty original and authentic.
CHILE
upvote