Free 156-215.81 Exam Braindumps (page: 12)

Page 12 of 102

You have successfully backed up your Check Point configurations without the OS information.
What command would you use to restore this backup?

  1. restore_backup
  2. import backup
  3. cp_merge
  4. migrate import

Answer(s): A

Explanation:

The command to restore a backup of Check Point configurations without the OS information is restore_backup4. This command restores the Gaia OS configuration and the firewall database from a compressed file. The other commands are not valid for this purpose. import backup is not a valid command. cp_merge is a command to merge policies or objects from different databases. migrate import is a command to import a previously exported database using migrate export.


Reference:

System Backup and Restore feature in Gaia, [cp_merge], [migrate import]



What is the best sync method in the ClusterXL deployment?

  1. Use 1 cluster + 1st sync
  2. Use 1 dedicated sync interface
  3. Use 3 clusters + 1st sync + 2nd sync + 3rd sync
  4. Use 2 clusters + 1st sync + 2nd sync

Answer(s): B

Explanation:

The best sync method in the ClusterXL deployment is to use one dedicated sync interface56. This method provides optimal performance and reliability for synchronization traffic. Using multiple sync interfaces is not recommended as it increases CPU load and does not provide 100% sync redundancy5. Using multiple clusters is not a sync method, but a cluster topology.


Reference:

Sync Redundancy in ClusterXL, Best Practice for HA sync interface



Can multiple administrators connect to a Security Management Server at the same time?

  1. No, only one can be connected
  2. Yes, all administrators can modify a network object at the same time
  3. Yes, every administrator has their own username, and works in a session that is independent of other administrators
  4. Yes, but only one has the right to write

Answer(s): C

Explanation:

Multiple administrators can connect to a Security Management Server at the same time, and each administrator has their own username and works in a session that is independent of other administrators1. This allows concurrent administration and prevents conflicts between different administrators. The other options are incorrect. Only one administrator can be connected is false. All administrators can modify a network object at the same time is false, as only one administrator can lock and edit an object at a time. Only one has the right to write is false, as all administrators have write permissions unless they are restricted by roles or permissions.


Reference:

Security Management Server - Check Point Software



What Identity Agent allows packet tagging and computer authentication?

  1. Endpoint Security Client
  2. Full Agent
  3. Light Agent
  4. System Agent

Answer(s): B

Explanation:

The Full Identity Agent allows packet tagging and computer authentication2. Packet tagging is a feature that enables the Security Gateway to identify the source user and machine of each packet, regardless of NAT or routing. Computer authentication is a feature that enables the Security Gateway to authenticate machines that are not associated with any user, such as servers or unattended workstations. The other options are incorrect. Endpoint Security Client is not an Identity Agent, but a software that provides endpoint security features such as firewall, antivirus, VPN, etc. Light Agent is an Identity Agent that does not require installation and runs on a web browser, but it does not support packet tagging or computer authentication. System Agent is not an Identity Agent, but a software that provides system information and health monitoring for endpoints.


Reference:

Check Point Identity Agent for Microsoft Windows 10



Page 12 of 102



Post your Comments and Discuss Checkpoint 156-215.81 exam with other Community members:

Pooja commented on September 08, 2024
Nice info ok I will do the same
Anonymous
upvote

IPR commented on October 05, 2023
q:124 is wrong - the correct answer is b but the syntax is: ip-address
Anonymous
upvote

IPR commented on October 05, 2023
Q:124 is wrong - the correct answer is B but the syntax is: ip-address
Anonymous
upvote