Free 156-215.81 Exam Braindumps (page: 16)

Page 16 of 102

Of all the Check Point components in your network, which one changes most often and should be backed up most frequently?

  1. SmartManager
  2. SmartConsole
  3. Security Gateway
  4. Security Management Server

Answer(s): D

Explanation:

The Security Management Server is the component that changes most often and should be backed up most frequently, because it stores all the security policies and configurations for the Check Point components in your network. The other components are either clients or gateways that do not change as frequently.


Reference:

Check Point Security Management Administration Guide R81, p. 9



Which option would allow you to make a backup copy of the OS and Check Point configuration, without stopping Check Point processes?

  1. All options stop Check Point processes
  2. backup
  3. migrate export
  4. snapshot

Answer(s): D

Explanation:

The snapshot option would allow you to make a backup copy of the OS and Check Point configuration, without stopping Check Point processes. A snapshot is a full system backup, including network interfaces, routing tables, and Check Point products and configuration. The other options require stopping Check Point processes or do not backup the OS.


Reference:

Check Point Security Management Administration Guide R81, p. 15-16



What is the Transport layer of the TCP/IP model responsible for?

  1. It transports packets as datagrams along different routes to reach their destination.
  2. It manages the flow of data between two hosts to ensure that the packets are correctly assembled and delivered to the target application.
  3. It defines the protocols that are used to exchange data between networks and how host programs interact with the Application layer.
  4. It deals with all aspects of the physical components of network connectivity and connects with different network types.

Answer(s): B

Explanation:

The Transport layer of the TCP/IP model is responsible for managing the flow of data between two hosts to ensure that the packets are correctly assembled and delivered to the target application. It also provides error detection and correction, flow control, and multiplexing. The Transport layer uses protocols such as TCP and UDP.


Reference:

Check Point Security Engineering Study Guide, p. 10-11



What needs to be configured if the NAT property `Translate destination on client side' is not enabled in Global properties?

  1. A host route to route to the destination IP
  2. Use the file local.arp to add the ARP entries for NAT to work
  3. Nothing, the Gateway takes care of all details necessary
  4. Enabling `Allow bi-directional NAT' for NAT to work correctly

Answer(s): C

Explanation:

If the NAT property `Translate destination on client side' is not enabled in Global properties, nothing needs to be configured on the client side, because the Gateway takes care of all details necessary. The Gateway translates the destination IP address before sending the packet to the client, so the client does not need to know about the NAT rule or add any host route or ARP entry.


Reference:

Check Point Security Engineering Study Guide, p. 136-137



Page 16 of 102



Post your Comments and Discuss Checkpoint 156-215.81 exam with other Community members:

Pooja commented on September 08, 2024
Nice info ok I will do the same
Anonymous
upvote

IPR commented on October 05, 2023
q:124 is wrong - the correct answer is b but the syntax is: ip-address
Anonymous
upvote

IPR commented on October 05, 2023
Q:124 is wrong - the correct answer is B but the syntax is: ip-address
Anonymous
upvote