Important CheckPoint 156-536 Exam Questions

Answer: C

Explanation:

The official Check Point Harmony Endpoint documentation clearly states that deployment rules (automatic deployment) are not supported for macOS clients. macOS client deployments must instead be performed manually using exported packages or third-party deployment methods.

Exact Extract from Official Document:

'Deploy New Endpoints... macOS: No' (indicating that deployment rules cannot automatically deploy endpoints for macOS)

Check Point Harmony Endpoint Specialist R81.20 Administration Guide.

Answer: A

Explanation:

As detailed in the official Check Point Harmony Endpoint documentation, the Push Operation Wizard supports various push operations categorized specifically into Anti-Malware, Forensics and Remediation, and Agent Settings. These operations allow administrators to remotely manage security actions such as malware scans, forensic data collection, remediation tasks, and settings related to endpoint agents.

Exact Extract from Official Document:

'Push operations supported include Anti-Malware, Forensics and Remediation, and Agent Settings.'

Check Point Harmony Endpoint Specialist R81.20 Administration Guide.

Answer: D

Explanation:

The Harmony Endpoint solution provides a range of protections under its Data Security Software Capability, aimed at securing data on endpoint devices. Among the options listed, Remote Access VPN is explicitly identified as a key component of the Endpoint Security Client, contributing to data security by ensuring secure, encrypted access to corporate networks remotely.

The CP_R81.20_Harmony_Endpoint_Server_AdminGuide.pdf details this on page 20, in the 'Endpoint Security Client' section, which lists components available on Windows:

'Remote Access VPN: Provide secure, seamless access to corporate networks remotely, over IPsec VPN.'

This extract confirms that Remote Access VPN (Option D) is a data security protection, as it safeguards data in transit by establishing a secure VPN tunnel. Further elaboration is found on page 415, under 'Remote Access VPN':

'The Remote Access VPN component is a simple and secure way for endpoints to connect remotely to corporate resources over the Internet, through a VPN tunnel.'

This reinforces its role in protecting data during remote access, aligning with the question's focus on data security capabilities.

The other options do not match the documentation:

Option A ('Data Leak Firewall'): The guide mentions a 'Firewall' component (page 20), but it is not specifically termed 'Data Leak Firewall,' and its primary role is network traffic control, not data leak prevention as a standalone capability.

Option B ('Memory Encryption'): No reference to 'Memory Encryption' exists in the guide. Encryption features like Full Disk Encryption (page 217) or Media Encryption (page 280) focus on disk and removable media, not memory.

Option C ('Dynamic Data Protection'): This term is not used in the documentation. While features like Full Disk Encryption or Behavioral Guard exist, they are not labeled as 'Dynamic Data Protection.'

Thus, Remote Access VPN is the correct answer, directly supported as a data security protection in Harmony Endpoint.

CP_R81.20_Harmony_Endpoint_Server_AdminGuide.pdf, Page 20: 'Endpoint Security Client' (lists Remote Access VPN).

CP_R81.20_Harmony_Endpoint_Server_AdminGuide.pdf, Page 415: 'Remote Access VPN' (describes its secure connectivity role).

Answer: A

Explanation:

Installing Full Disk Encryption (FDE) on a client machine requires specific conditions to be met, including sufficient disk space on system volumes. The CP_R81.20_Harmony_Endpoint_Server_AdminGuide.pdf provides an exact specification for this requirement.

On page 249, under 'Client Requirements for Full Disk Encryption Deployment,' the guide explicitly states:

'Ensure that the system volumes have at least 32 MB of continuous free space.'

This precise requirement confirms that administrators must ensure the system volumes have at least 32 MB of continuous space, making Option A the correct answer. The other options (B, C, and D) list different space values (50 MB, 36 MB, and 25 MB, respectively), none of which are supported by the documentation. The use of 'continuous' space emphasizes the need for an uninterrupted block, critical for FDE's operation, further solidifying Option A's accuracy.

CP_R81.20_Harmony_Endpoint_Server_AdminGuide.pdf, Page 249: 'Client Requirements for Full Disk Encryption Deployment' (space requirement).

Answer: A

Explanation:

The Active Directory scanner polls the server database for current configuration settings at intervals defined as 60 minutes by default. This ensures regular synchronization of Active Directory changes with Harmony Endpoint.

Exact Extract from Official Document:

'The Scan Interval is the time, in minutes, between the requests... default is typically every 60 minutes.'

Check Point Harmony Endpoint Specialist R81.20 Administration Guide, 'Configuring a Directory Scanner Instance.'