From the Gaia web interface, which of the following operations CANNOT be performed on a Security Management Server?
Answer(s): A
From the Gaia web interface, the operation that CANNOT be performed on a Security Management Server is Verify a Security Policy. This operation can only be done from SmartConsole4.
Check Point R81 SmartConsole Online Help
Which of the following are types of VPN communities?
Answer(s): D
The types of VPN communities are Meshed, Star, and Combination. A Meshed community is a group of Security Gateways that have VPN connections between every pair of members. A Star community has one Security Gateway as the center and other Security Gateways or hosts as satellites. A Combination community is a group of Meshed and Star communities.
[Check Point R81 Site-to-Site VPN Administration Guide]
What are the three types of UserCheck messages?
The three types of UserCheck messages are inform, ask, and block. Inform messages notify users about security events and do not require any user action. Ask messages prompt users to choose whether to allow or block an action. Block messages prevent users from performing an action and display a reason1.
Check Point R81 Logging and Monitoring Administration Guide
What two ordered layers make up the Access Control Policy Layer?
Answer(s): B
The two ordered layers that make up the Access Control Policy Layer are Network and Threat Prevention. Network layer contains rules that define how traffic is inspected and handled by the Security Gateway. Threat Prevention layer contains rules that define how traffic is inspected by the Threat Prevention Software Blades2.
Check Point R81 Security Management Administration Guide
Which statement is TRUE of anti-spoofing?
Answer(s): C
The statement that is TRUE of anti-spoofing is that it is BEST Practice to have anti-spoofing groups in sync with the routing table. Anti-spoofing prevents attackers from sending packets with a false source IP address. Anti-spoofing groups define which IP addresses are expected on each interface of the Security Gateway. If the routing table changes, the anti-spoofing groups should be updated accordingly34.
Check Point R81 ClusterXL Administration Guide, Network Defined by Routes: Anti-Spoofing
Post your Comments and Discuss Checkpoint 156-215.81 exam prep with other Community members:
Our website is free, but we have to fight against AI bots and content theft. We're sorry for the inconvenience caused by these security measures. You can access the rest of the 156-215.81 content, but please register or login to continue.