Online Access Free CheckPoint.156-215.80.v2022-08-11.q362 Practice Test (Page 26)

156-215.80 Exam Question 121

What are the three authentication methods for SIC?

A.Passwords, Users, and standards-based SSL for the creation of security channels

B.Certificates, standards-based SSL for the creation of secure channels, and 3DES or AES128 for
encryption

C.Packet Filtering, certificates, and 3DES or AES128 for encryption

D.Certificates, Passwords, and Tokens

156-215.80 Exam Question 122

An internal router is sending UDP keep-alive packets that are being encapsulated with
GRE and sent through your R77 Security Gateway to a partner site. A rule for GRE traffic is configured for ACCEPT/LOG. Although the keep-alive packets are being sent every minute, a search through the SmartView Tracker logs for GRE traffic only shows one entry for the whole day (early in the morning after a Policy install).
Your partner site indicates they are successfully receiving the GRE encapsulated keep- alive packets on the 1-minute interval.
If GRE encapsulation is turned off on the router, SmartView Tracker shows a log entry for the UDP keep-alive packet every minute.
Which of the following is the BEST explanation for this behavior?

A.The log unification process is using a LUUID (Log Unification Unique Identification) that has become corrupt. Because it is encrypted, the R77 Security Gateway cannot distinguish between GRE sessions. This is a known issue with GRE. Use IPSEC instead of the non- standard GRE protocol for encapsulation.

B.The Log Server log unification process unifies all log entries from the Security Gateway on a specific connection into only one log entry in the SmartView Tracker. GRE traffic has a
10 minute session timeout, thus each keep-alive packet is considered part of the original logged connection at the beginning of the day.

C.The Log Server is failing to log GRE traffic properly because it is VPN traffic. Disable all
VPN configuration to the partner site to enable proper logging.

D.The setting Log does not capture this level of detail for GRE. Set the rule tracking action to Audit since certain types of traffic can only be tracked this way.

156-215.80 Exam Question 123

Where can you trigger a failover of the cluster members?
1. Log in to Security Gateway CLI and run command clusterXL_admin down.
2. In SmartView Monitor right-click the Security Gateway member and select Cluster member down.
3. Log into Security Gateway CLI and run command cphaprob down.

A.1, 2, and 3

B.2 and 3

C.1 and 2

D.1 and 3

156-215.80 Exam Question 124

Jack works for a managed service provider and he has been tasked to create 17 new policies for several new customers. He does not have much time. What is the BEST way to do this with R80 security management?

A.Create a text-file with mgmt_cliscript that creates all objects and policies. Open the file in SmartConsole Command Line to run it.

B.Create a text-file with Gaia CLI -commands in order to create all objects and policies. Run the file in CLISH with command load configuration.

C.Create a text-file with DBEDIT script that creates all objects and policies. Run the file in the command line of the management server using command dbedit -f.

D.Use Object Explorer in SmartConsole to create the objects and Manage Policies from the menu to create the policies.