156-536 Check Point Certified Harmony Endpoint Specialist - R81.20 (CCES) Questions and Answers

Endpoint security software Capabilities and a device agent which operates as a container for the Capabilities and communicates with the Endpoint Management Server

GUI client that connects to the Endpoint Security Management Server to manage the policy an other configuration for Endpoints

Endpoint Security software Capabilities and a GUI client to manage policies for all capabilities

GUI client that connects to the local Endpoint Capability Software to manage the policy and all other configuration for that Endpoint only

Using Kerberos principals

Using the AD server

Using encryption keys

With the ktpass tool

Sanitization (CDR)

Polymorphic Model

Behavior Guard

Anti-Ransomware

The default rule is a global rule that only applies to Computers. Rules for Users must be added manually by the administrator.

There are no rules to start with and administrators must create rules in order to deploy the capability policies, actions and behavior.

There are only rules for the Harmony Endpoint Firewall Capability. All other Capabilities only include Actions.

The default rule is a global rule which applies to all users and computers in the organization.

AES-CBC 128 bit

AES-CBC 256 bit

XTS-AES 256 bit

XTS-AES 128 bit

• Full Disk Encryption

• Media Encryption

• Anti-Malware

• Passwords and Usernames

• Port Protection (MEPP)

• Security Questions

• Media Encryption

• Media Decryption

• Remote Access VPN

• Full Disk Encryption

• Media Encryption & Port Protection (MEPP)

• Remote Access VPN

post-logon authentication and encryption

OS boot protection with pre-boot authentication and encryption

OS boot protection and post-boot authentication

Decryption

start_web_mgmt - run in dish

start_web_mgmt - run in expert mode

web_mgmt_start - run in expert mode

web_mgmt_start - run in dish

Four levels - Low security, Medium security, High security, Very High security

Two levels - Low and High security

Three levels - Low security, Medium security. High security

One and only level - enable or disable security

The Remote Help only provides procedural information and FAQs about the Endpoint Security Client including procedure to reset password

The Remote Help tool provides

a) User Logon Pre-boot Remote Help

b) Media Encryption Remote Help

The Remote Help tool provides

a) Link to the secret location of encrypted password file

b) Key to decrypt the password file

The Remote Help tool unlocks admin accounts on SmartEndpoint

The Policy Overview

The Computer Management view

The Operational Overview

The Security Overview

Google. Bing, Yahoo! by default, and extra support for Baidu, Yandex, Lycos and Excite if the Harmony Endpoint Management is deployed in Cloud

Google, Bing, and Yahoo!

Google and Bing if the Harmony Endpoint Management is On-Premises deployment

Google, Yahoo! and OneSearch

To authenticate before the computer will start

To answer a security question after login

To authenticate before the computer's OS starts

To regularly change passwords

During the first sync

After the last sync

Before the first sync.

After the first sync

Between the Endpoint clients and the EPS

Between the Endpoint clients and the EMS

Between the Endpoint clients and the NMS

Between the Endpoint clients and the SMS

Pairs of authentication settings and un-authentication settings

Pairs of encryption and decryption keys

Pairs of Kerberos principals and encryption keys

Pairs of ktpass tools

The Apple device will automatically reboot when the installation is complete. This is confirmation thatthe client is installed.

The MAC OS will generate a pop-up message to notify the administrator.

When the client is successfully installed, the Endpoint icon will app ear in the computer's menu bar.

The Harmony management portal will generate a pop-up in the portal to notify theadministrator.

SIC

CPCOM

TCP

UDP

You can enable all gateway related blades.

The administrator has to enable compliance and Network Policy Management.

Logging & Status, SmartEvent Server, and SmartEvent Correlation unit must be enabled.

The SmartEndPoint super Node on the Management.