Which two Identity Awareness commands are used to support identity sharing?
Answer(s): A
The answer is A because Identity Awareness commands are used to support identity sharing between Security Gateways. Policy Decision Point (PDP) is the Security Gateway that collects identities from various sources and shares them with other gateways. Policy Enforcement Point (PEP) is the Security Gateway that enforces the policy based on the identities received from the PDP12
Check Point R81 Identity Awareness Administration Guide, Check Point R81Security Management Administration Guide
True or False: In R80, more than one administrator can login to the Security Management Server with write permission at the same time.
Answer(s): B
The answer is B because in R80 and above, more than one administrator can login to the Security Management Server with write permission at the same time. Every administrator works in a session that is independent of the other administrators. This is called concurrent administration and it allows multiple administrators to work on the same policy package simultaneously34
Check Point R80.10 Concurrent Administration, Check Point R80.40 Security Management Administration Guide
Which one of the following is TRUE?
Answer(s): C
The answer is C because inline layer can be defined as a rule action in a policy layer. Inline layer is a sub-policy that contains additional rules that are applied only if the parent rule matches. Ordered layer is a policy layer that contains rules that are applied in order, from top to bottom. One policy can be either inline or ordered, but not both. Pre-R80 Gateways do support ordered layers, but not inline layers5
Check Point R81 Policy Layers and Sub-Policies, [Check Point R81 Security Gateway Administration Guide]
Which deployment adds a Security Gateway to an existing environment without changing IP routing?
The answer is B because bridge mode deployment adds a Security Gateway to an existing environment without changing IP routing. Bridge mode is a transparent mode that does not require assigning IP addresses to the Security Gateway interfaces. Distributed deployment is a deployment where the Security Management Server and the Security Gateway are installed on separate machines. Remote deployment is a deployment where the Security Gateway is installed on a remote site and connects to the Security Management Server over a VPN tunnel. Standalone deployment is a deployment where the Security Management Server and the Security Gateway are installed on the same machine.
[Check Point R81 Bridge Mode], [Check Point R81 Deployment Scenarios]
Fill in the blank: An identity server uses a ___________ for user authentication.
The answer is A because an identity server uses a shared secret for user authentication. A shared secret is a passphrase that is known by both the identity server and the user. The identity server sends a challenge to the user, who encrypts it with the shared secret and sends it back. The identity server then verifies the response and authenticates the user12
Check Point R81 Identity Awareness Administration Guide, Check Point R81 Identity Server
Post your Comments and Discuss Checkpoint 156-215.81 exam prep with other Community members:
Our website is free, but we have to fight against AI bots and content theft. We're sorry for the inconvenience caused by these security measures. You can access the rest of the 156-215.81 content, but please register or login to continue.