Changed 156-215.80 Exam Questions

Check Point Certified Security Administrator R80 Questions and Answers

Question 69

Which is the correct order of a log flow processed by SmartEvent components:

Firewall > Correlation Unit > Log Server > SmartEvent Server Database > SmartEvent Client

Firewall > SmartEvent Server Database > Correlation Unit > Log Server > SmartEvent Client

Firewall > Log Server > SmartEvent Server Database > Correlation Unit > SmartEvent Client

Firewall > Log Server > Correlation Unit > SmartEvent Server Database > SmartEvent Client

Question 70

What happens if the identity of a user is known?

If the user credentials do not match an Access Role, the traffic is automatically dropped.

If the user credentials do not match an Access Role, the system displays a sandbox.

If the user credentials do not match an Access Role, the gateway moves onto the next rule.

If the user credentials do not match an Access Role, the system displays the Captive Portal.

Question 71

Choose the correct statement regarding Implicit Rules.

To edit the Implicit rules you go to: Launch Button > Policy > Global Properties > Firewall.

Implied rules are fixed rules that you cannot change.

You can directly edit the Implicit rules by double-clicking on a specific Implicit rule.

You can edit the Implicit rules but only if requested by Check Point support personnel.

Question 72

Which the following type of authentication on Mobile Access can NOT be used as the first authentication method?

Dynamic ID

RADIUS

Username and Password

Certificate