Checkpoint Updated 156-215.81 Exam Questions and Answers by lowri

You should generate new licenses when the existing license expires, license is upgraded or the IP-address where the license is tied changes13. These scenarios require a new license to be generated and activated on the Security Gateway or Management Server13. Therefore, the correct answer is C. When the existing license expires, license is upgraded or the IP-address where the license is tied changes

The steps to configure the HTTPS Inspection Policy are as follows34:

• Go to Manage & Settings > Blades > HTTPS Inspection > Policy.
• Click on New HTTPS Inspection Rule or select an existing rule and click on Edit Rule.
• Define the Source, Destination, and Action for the rule. The action can be either Inspect, Bypass, or Ask.
• Click on OK and then on Install Policy to apply the changes. References: HTTPS Inspection R81 Administration Guide, Check Point CCSA - R81: Practice Test & Explanation

The Sticky Decision Function (SDF) is required to prevent failovers in an Active-Active cluster. The SDF ensures that the same cluster member handles all connections that belong to a certain session. If the SDF is not enabled, different cluster members may handle different connections of the same session, which may cause a failover or a drop12. References: ClusterXL Administration Guide R81, Check Point CCSA - R81: Practice Test & Explanation

To achieve the requirement of giving the Network Operations Center administrator access to Check Point Security devices mostly for troubleshooting purposes, but not to the expert mode, and still allowing her to run tcpdump, you need to:

• Add tcpdump to CLISH using add command. This command adds a new command to the Command Line Interface Shell (CLISH) that allows running tcpdump without entering the expert mode .
• Create a new access role. This option defines a set of permissions and commands that can be assigned to a user or a group of users.
• Add tcpdump to the role. This option grants the permission to run tcpdump to the role.
• Create new user with any UID and assign role to the user. This option creates a new user account with any User ID (UID) and assigns the role that has tcpdump permission to the user.

References: [How to add a new command to CLISH], [Check Point R81 Gaia Administration Guide], [Check Point R81 Identity Awareness Administration Guide]