Get CheckPoint 156-215.81 Exam Practice Questions - Real and Updated

Answer : D

The Windows Security Event that will NOT map a username to an IP address in Identity Awareness isKerberos Ticket Timed Out. This event occurs when a Kerberos ticket expires and is not renewed, which means that the user is no longer active on the network. Identity Awareness does not use this event to map a username to an IP address, as it does not indicate a valid user session. The other events are used by Identity Awareness to map a username to an IP address, as they indicate a successful user authentication or activity on the network.

Answer : A

Identity Captive Portal is a Check Point Identity Awareness web portal, to which users connect with their web browser to log in and authenticate, when using Browser-Based Authentication2.To enable Identity Captive Portal for a specific rule, you need to right click Accept in the rule, select ''More'', and then check ''Enable Identity Captive Portal''3. Reference:Identity Awareness Administration Guide R80,Identity awareness with captive portal in Checkpoint R80

Answer : C

The key that is created during Phase 2 of a site-to-site VPN is a symmetrical IPSec key3.This key is used to encrypt and decrypt the data that is exchanged between the VPN peers3.The symmetrical IPSec key is derived from the shared secret and the Diffie-Hellman public keys that are exchanged during Phase 13. Reference:Site to Site VPN in R80.x - Tutorial for Beginners

Answer : B

URL Filtering employs a technology called UserCheck, which educates users on web usage policy in real time. UserCheck is a feature that allows the firewall to interact with the users and inform them about the web usage policy and its violations. UserCheck can also allow users to request access to blocked websites or report false positives. UserCheck helps users understand and comply with the web usage policy and reduces the workload of the administrators.

Answer : C

You should generate new licenses when the existing license expires, license is upgraded or the IP-address where the license is tied changes13.These scenarios require a new license to be generated and activated on the Security Gateway or Management Server13. Therefore, the correct answer is C.When the existing license expires, license is upgraded or the IP-address where the license is tied changes