Exam 156-215.80 All Questions

View all questions & answers for the 156-215.80 exam

Go to Exam

Exam 156-215.80 topic 1 question 390 discussion

Actual exam question from Checkpoint's 156-215.80

Question #: 390
Topic #: 1

[All 156-215.80 Questions]

After trust has been established between the Check Point components, what is TRUE about name and IP-address changes?

A. Security Gateway IP-address cannot be changed without re-establishing the trust
B. The Security Gateway name cannot be changed in command line without re-establishing trust
C. The Security Management Server name cannot be changed in SmartConsole without re-establishing trust
D. The Security Management Server IP-address cannot be changed without re-establishing the trust

Show Suggested Answer

Suggested Answer: A 🗳️

by utt at Dec. 2, 2019, 9:40 a.m.

Comments

Submit Cancel

babajana

Highly Voted 2 years, 6 months ago

i tested it lab and D is correct answer A is wrong because if you change the IP on Gaia and on the gateway properties in smart console, you must not reset the SIC (check SIC communication after changing or get interfaces to refresh the ip topology) B is wrong because you can change the name of GW without reset sic (set hostname GW-A) C is wrong because you can change the name in SMART CONSOLE without reset the sic. ( this will not change the hostname of the sms, only the name in smart console) D is correct, if you change the sms IP on Gaia Webui and reconnect the Smart Console to new IP, all GW’s who was connected to the old IP, lost the connection. If you have more interfaces on sms, and change all IP’s all GW’s will lost the connection.

upvoted 13 times

drogadotcom

1 year, 9 months ago

Same here, tested in lab because I did not believe that A could be wrong. Even if you change the IP on the Gaia Portal interface (and then in the smartconsole object), after install policy SIC status says "communicating". B and C are wrong. So, D is the correct option.

upvoted 2 times

...

utt

Highly Voted 3 years, 6 months ago

C cus SIC base name of management

upvoted 7 times

babajana

2 years, 7 months ago

i change SMS name in lab. dont need reestablish trust

upvoted 1 times

...

Hernan_Mella

Most Recent 11 months, 3 weeks ago

Selected Answer: C

https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk42071

upvoted 1 times

...

DUGDUGDUG

1 year, 8 months ago

The answer is C. The ICA is initialized on the managers hostname. it don't care about IP the others might require a new rule or unload the local policy but that's all IP which has nothing to do with certificates

upvoted 1 times

...

AskarSakenov

1 year, 9 months ago

If the Security Management Server is renamed, trust will need to be reestablished as the certificate is reissued. Page 79 - CCSA R80.10 Guide

upvoted 1 times

...

oluchecpoint

3 years, 5 months ago

A and B are possible action without re-trust. The sic is based on name of the Manager so C is the only correct answer! sk40993

upvoted 6 times

babajana

2 years, 6 months ago

where read this C is correct?

upvoted 2 times

verona347

2 years, 5 months ago

https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk40993 Notes: Since the hostname (name of the Security Management) has not been changed, SIC communication should not be affected, as long as the routing is correct. C is correct!

upvoted 3 times

...