Check Point Certified Security Administrator R81.20 156-215.81 Exam Questions
Which of the following commands is used to monitor cluster members in CLI?
Correct Answer: A
The command show cluster state is used to monitor cluster members in CLI. It displays information such as the cluster mode, the cluster members, their status, their priority, and their interfaces. References: [ClusterXL Administration Guide], [Check Point CLI Reference Card]
Which of the following statements about Site-to-Site VPN Domain-based is NOT true?
Route-based— The Security Gateways will have a Virtual Tunnel Interface (VTI) for each VPN Tunnel with a peer VPN Gateway. The Routing Table can have routes to forward traffic to these VTls. Any traffic routed through a VTI is automatically identified as VPN Traffic and is passed through the VPN Tunnel associated with the VTI.
Correct Answer: B
Domain-based— VPN domains are pre-defined for all VPN Gateways. A VPN domain is a service or user that can send or receive VPN traffic through a VPN Gateway.
This statement is not true because a VPN domain is not a service or user, but a host or network that can send or receive VPN traffic through a VPN Gateway 1 . This is the definition given in the Site to Site VPN R81 Administration Guide 1 . The other statements are true according to the same guide 1 .
Remote Access VPN R81.20 Administration Guide
Site to Site VPN R81 Administration Guide
DeepDive Webinar - R81.20 Seamless VPN Connection to Public Cloud
Fill in the blank: ____________ is the Gaia command that turns the server off.
Correct Answer: C
halt is the Gaia command that turns the server off. This command shuts down the operating system and powers off the machine. Other commands that can be used to shut down the server are shutdown and poweroff. References: [Gaia Administration Guide R80.40]
Which of the following commands is used to verify license installation?
Correct Answer: B
The command cplic print is used to verify license installation. It displays the installed licenses and their expiration dates . References: [Check Point R81 Command Line Interface Reference Guide], Check Point :: Pearson VUE
Of all the Check Point components in your network, which one changes most often and should be backed up most frequently?
Correct Answer: D
The Security Management Server is the component that changes most often and should be backed up most frequently, because it stores all the security policies and configurations for the Check Point components in your network. The other components are either clients or gateways that do not change as frequently.
References: Check Point Security Management Administration Guide R81 , p. 9