Check Point Certified Security Administrator (CCSA R80) Exam Questions PDF download

QUESTION: 61

What are the three conflict resolution rules in the Threat Prevention Policy Layers?

Conflict on action, conflict on exception, and conflict on settings
Conflict on scope, conflict on settings, and conflict on exception
Conflict on settings, conflict on address, and conflict on exception
Conflict on action, conflict on destination, and conflict on settings

Answer(s): C

Reveal Solution Next Question

QUESTION: 62

What does the “unknown” SIC status shown on SmartConsole mean?

The SMS can contact the Security Gateway but cannot establish Secure Internal Communication.
SIC activation key requires a reset.
The SIC activation key is not known by any administrator.
There is no connection between the Security Gateway and SMS.

Answer(s): D

Explanation:

The most typical status is Communicating. Any other status indicates that the SIC communication is problematic. For example, if the SIC status is Unknown then there is no connection between the Gateway and the Security Management server. If the SIC status is Not Communicating, the Security Management server is able to contact the gateway, but SIC communication cannot be established.

Reference:

https://sc1.checkpoint.com/documents/R76/CP_R76_SecMan_WebAdmin/html_frameset.htm?topic=documents/R76/CP_R76_SecMan_WebAdmin/118037

Reveal Solution Next Question

QUESTION: 63

Kofi, the administrator of the ALPHA Corp network wishes to change the default Gaia WebUI Portal port number currently set on the default HTTPS port. Which CLISH commands are required to be able to change this TCP port?

set web ssl-port <new port number>
set Gaia-portal port <new port number>
set Gaia-portal https-port <new port number>
set web https-port <new port number>

Answer(s): A

Explanation:

In Clish
A). Connect to command line on Security Gateway / each Cluster member.
B). Log in to Clish.
C). Set the desired port (e.g., port 4434):
HostName> set web ssl-port <Port_Number>
D). Save the changes:
HostName> save config
E). Verify that the configuration was saved:
[Expert@HostName]# grep 'httpd:ssl_port' /config/db/initial

Reference:

https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk83482

Reveal Solution Next Question

QUESTION: 64

Browser-based Authentication sends users to a web page to acquire identities using ______________ .

User Directory
Captive Portal and Transparent Kerberos Authentication
Captive Portal
UserCheck

Answer(s): B

Explanation:

To enable Identity Awareness:

1. Log in to SmartDashboard.
2. From the Network Objects tree, expand the Check Point branch.
3. Double-click the Security Gateway on which to enable Identity Awareness.
4. In the Software Blades section, select Identity Awareness on the Network Security tab. The Identity Awareness Configuration wizard opens.
5. Select one or more options. These options set the methods for acquiring identities of managed and unmanaged assets.
-AD Query - Lets the Security Gateway seamlessly identify Active Directory users and computers.
-Browser-Based Authentication - Sends users to a Web page to acquire identities from unidentified users. If Transparent Kerberos Authentication is configured, AD users may be identified transparently.

Reference:

https://sc1.checkpoint.com/documents/R76/CP_R76_IdentityAwareness_AdminGuide/62050.htm

Reveal Solution Next Question

QUESTION: 65

Which default Gaia user has full read/write access?

Monitor
Altuser
Administrator
Superuser

Answer(s): C

Reveal Solution Next Question

Checkpoint Check Point Certified Security Administrator (CCSA R80) 156-215.80 Dumps in PDF

Free Checkpoint 156-215.80 Real Questions (page: 13)

QUESTION: 61

QUESTION: 62

Explanation:

Reference:

QUESTION: 63

Explanation:

Reference:

QUESTION: 64

Explanation:

Reference:

QUESTION: 65