Get CheckPoint 156-215.81 Exam Practice Questions - Real and Updated

Answer : C

Identity Sharing is a feature that allows Security Gateways to acquire and share identities with other Security Gateways, enabling identity-based access control across different network segments or domains13. Management servers, users, and administrators do not share identities with Security Gateways.

Answer : C

A clean-up rule is a rule that is placed at the end of the security policy to drop any traffic that is not explicitly allowed by the previous rules.It is a best practice to have a clean-up rule to prevent unauthorized access and log the dropped packets for analysis12. The other options are not the purpose of a clean-up rule. Reference:Clean-up Rule,Check Point CCSA - R81: Practice Test & Explanation

Answer : B

UserCheck is a communication tool used to inform a user about a website or application they are trying to access.UserCheck allows administrators to define actions that require user interaction, such as asking for confirmation, informing about risks, or blocking access3, p. 38. UserCheck is not a messaging tool, an administrator tool, or a notification tool. Reference:Check Point CCSA - R81: Practice Test & Explanation, [Check Point UserCheck Administration Guide R81]

Answer : C

Verification Error. Rule 4 (Web Inbound) hides Rule 6 (Webmaster access) is the correct answer. This is because Rule 4 has a broader source and destination than Rule 6, and both rules have the same service (HTTP). Therefore, Rule 6 will never be matched, and the Webmaster access will be denied. Reference: Check Point R80.10 - Part 3 - Rule Base Order

Answer : D

The INSPECT Engine is the core component of Check Point's Stateful Inspection technology. It is used to extract state related information from packets and store that information in state tables.The INSPECT Engine also evaluates the security policy and enforces it on the packets1. Reference:Check Point R81 Security Gateway Technical Administration Guide