Summer Sale - Limited Time 55% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: 5763r953

Welcome To DumpsPedia

156-315.80 Sample Questions Answers

Questions 4

What are the methods of SandBlast Threat Emulation deployment?

Options:

A.

Cloud, Appliance and Private

B.

Cloud, Appliance and Hybrid

C.

Cloud, Smart-1 and Hybrid

D.

Cloud, OpenServer and Vmware

Buy Now
Questions 5

In Threat Prevention, you can create new or clone profiles but you CANNOT change the out-of-the-box profiles of:

Options:

A.

Basic, Optimized, Strict

B.

Basic, Optimized, Severe

C.

General, Escalation, Severe

D.

General, purposed, Strict

Buy Now
Questions 6

What is a feature that enables VPN connections to successfully maintain a private and secure VPN session without employing Stateful Inspection?

Options:

A.

Stateful Mode

B.

VPN Routing Mode

C.

Wire Mode

D.

Stateless Mode

Buy Now
Questions 7

What statement best describes the Proxy ARP feature for Manual NAT in R80.10?

Options:

A.

Automatic proxy ARP configuration can be enabled

B.

Translate Destination on Client Side should be configured

C.

fw ctl proxy should be configured

D.

local.arp file must always be configured

Buy Now
Questions 8

Which of the following is NOT a valid type of SecureXL template?

Options:

A.

Accept Template

B.

Deny template

C.

Drop Template

D.

NAT Template

Buy Now
Questions 9

Check Point ClusterXL Active/Active deployment is used when:

Options:

A.

Only when there is Multicast solution set up.

B.

There is Load Sharing solution set up.

C.

Only when there is Unicast solution set up.

D.

There is High Availability solution set up.

Buy Now
Questions 10

Which NAT rules are prioritized first?

Options:

A.

Post-Automatic/Manual NAT rules

B.

Manual/Pre-Automatic NAT

C.

Automatic Hide NAT

D.

Automatic Static NAT

Buy Now
Questions 11

Which VPN routing option uses VPN routing for every connection a satellite gateway handles?

Options:

A.

To satellites through center only

B.

To center only

C.

To center and to other satellites through center

D.

To center, or through the center to other satellites, to Internet and other VPN targets

Buy Now
Questions 12

Which of the following blades is NOT subscription-based and therefore does not have to be renewed on a regular basis?

Options:

A.

Application Control

B.

Threat Emulation

C.

Anti-Virus

D.

Advanced Networking Blade

Buy Now
Questions 13

Fill in the blank: Identity Awareness AD-Query is using the Microsoft _______________ API to learn users from AD.

Options:

A.

WMI

B.

Eventvwr

C.

XML

D.

Services.msc

Buy Now
Questions 14

NAT rules are prioritized in which order?

1. Automatic Static NAT

2. Automatic Hide NAT

3. Manual/Pre-Automatic NAT

4. Post-Automatic/Manual NAT rules

Options:

A.

1, 2, 3, 4

B.

1, 4, 2, 3

C.

3, 1, 2, 4

D.

4, 3, 1, 2

Buy Now
Questions 15

Which statement is true about ClusterXL?

Options:

A.

Supports Dynamic Routing (Unicast and Multicast)

B.

Supports Dynamic Routing (Unicast Only)

C.

Supports Dynamic Routing (Multicast Only)

D.

Does not support Dynamic Routing

Buy Now
Questions 16

What is the valid range for Virtual Router Identifier (VRID) value in a Virtual Routing Redundancy Protocol (VRRP) configuration?

Options:

A.

1-254

B.

1-255

C.

0-254

D.

0 – 255

Buy Now
Questions 17

The system administrator of a company is trying to find out why acceleration is not working for the traffic. The traffic is allowed according to the rule base and checked for viruses. But it is not accelerated.

What is the most likely reason that the traffic is not accelerated?

Options:

A.

There is a virus found. Traffic is still allowed but not accelerated.

B.

The connection required a Security server.

C.

Acceleration is not enabled.

D.

The traffic is originating from the gateway itself.

Buy Now
Questions 18

Office mode means that:

Options:

A.

SecurID client assigns a routable MAC address. After the user authenticates for a tunnel, the VPN gateway assigns a routable IP address to the remote client.

B.

Users authenticate with an Internet browser and use secure HTTPS connection.

C.

Local ISP (Internet service Provider) assigns a non-routable IP address to the remote user.

D.

Allows a security gateway to assign a remote client an IP address. After the user authenticates for a tunnel, the VPN gateway assigns a routable IP address to the remote client.

Buy Now
Questions 19

What are the main stages of a policy installations?

Options:

A.

Verification & Compilation, Transfer and Commit

B.

Verification & Compilation, Transfer and Installation

C.

Verification, Commit, Installation

D.

Verification, Compilation & Transfer, Installation

Buy Now
Questions 20

Which of the SecureXL templates are enabled by default on Security Gateway?

Options:

A.

Accept

B.

Drop

C.

NAT

D.

None

Buy Now
Questions 21

What is UserCheck?

Options:

A.

Messaging tool used to verify a user’s credentials.

B.

Communication tool used to inform a user about a website or application they are trying to access.

C.

Administrator tool used to monitor users on their network.

D.

Communication tool used to notify an administrator when a new user is created.

Buy Now
Questions 22

Which is NOT an example of a Check Point API?

Options:

A.

Gateway API

B.

Management API

C.

OPSC SDK

D.

Threat Prevention API

Buy Now
Questions 23

fwssd is a child process of which of the following Check Point daemons?

Options:

A.

fwd

B.

cpwd

C.

fwm

D.

cpd

Buy Now
Questions 24

NO: 66

You are working with multiple Security Gateways enforcing an extensive number of rules. To simplify security administration, which action would you choose?

Options:

A.

Eliminate all possible contradictory rules such as the Stealth or Cleanup rules.

B.

Create a separate Security Policy package for each remote Security Gateway.

C.

Create network objects that restricts all applicable rules to only certain networks.

D.

Run separate SmartConsole instances to login and configure each Security Gateway directly.

Buy Now
Questions 25

Which one of the following is NOT a configurable Compliance Regulation?

Options:

A.

glba

B.

cjis

C.

soci

D.

ncipa

Buy Now
Questions 26

John detected high load on sync interface. Which is most recommended solution?

Options:

A.

For FTP connections – do not sync

B.

Add a second interface to handle sync traffic

C.

For short connections like http service – do not sync

D.

For short connections like icmp service – delay sync for 2 seconds

Buy Now
Questions 27

Using ClusterXL, what statement is true about the Sticky Decision Function?

Options:

A.

Can only be changed for Load Sharing implementations

B.

All connections are processed and synchronized by the pivot

C.

Is configured using cpconfig

D.

Is only relevant when using SecureXL

Buy Now
Questions 28

What component of R80 Management is used for indexing?

Options:

A.

DBSync

B.

API Server

C.

fwm

D.

SOLR

Buy Now
Questions 29

John is using Management HA. Which Security Management Server should he use for making changes?

Options:

A.

secondary Smartcenter

B.

active SmartConsole

C.

connect virtual IP of Smartcenter HA

D.

primary Log Server

Buy Now
Questions 30

Which tool is used to enable ClusterXL?

Options:

A.

SmartUpdate

B.

cpconfig

C.

SmartConsole

D.

sysconfig

Buy Now
Questions 31

Which of the following is NOT an option to calculate the traffic direction?

Options:

A.

Incoming

B.

Internal

C.

External

D.

Outgoing

Buy Now
Questions 32

What are the blades of Threat Prevention?

Options:

A.

IPS, DLP, AntiVirus, AntiBot, Sandblast Threat Emulation/Extraction

B.

DLP, AntiVirus, QoS, AntiBot, Sandblast Threat Emulation/Extraction

C.

IPS, AntiVirus, AntiBot

D.

IPS, AntiVirus, AntiBot, Sandblast Threat Emulation/Extraction

Buy Now
Questions 33

Automatic affinity means that if SecureXL is running, the affinity for each interface is automatically reset every

Options:

A.

15 sec

B.

60 sec

C.

5 sec

D.

30 sec

Buy Now
Questions 34

Your manager asked you to check the status of SecureXL, and its enabled templates and features. What command will you use to provide such information to manager?

Options:

A.

fw accel stat

B.

fwaccel stat

C.

fw acces stats

D.

fwaccel stats

Buy Now
Questions 35

Which component is NOT required to communicate with the Web Services API?

Options:

A.

API key

B.

session ID token

C.

content-type

D.

Request payload

Buy Now
Questions 36

When using the Mail Transfer Agent, where are the debug logs stored?

Options:

A.

$FWDIR/bin/emaild.mta. elg

B.

$FWDIR/log/mtad elg

C.

/var/log/mail.mta elg

D.

$CPDIR/log/emaild elg

Buy Now
Questions 37

You need to change the number of firewall Instances used by CoreXL. How can you achieve this goal?

Options:

A.

edit fwaffinity.conf; reboot required

B.

cpconfig; reboot required

C.

edit fwaffinity.conf; reboot not required

D.

cpconfig; reboot not required

Buy Now
Questions 38

What is the default shell for the command line interface?

Options:

A.

Expert

B.

Clish

C.

Admin

D.

Normal

Buy Now
Questions 39

The fwd process on the Security Gateway sends logs to the fwd process on the Management Server via which 2 processes?

Options:

A.

fwd via cpm

B.

fwm via fwd

C.

cpm via cpd

D.

fwd via cpd

Buy Now
Questions 40

ClusterXL is fully supported by Gaia and available to all Check Point appliances. Which command is NOT related to redundancy and functions?

Options:

A.

cphaprob stat

B.

cphaprob -a if

C.

cphaprob -I list

D.

cphaprob all show stat

Buy Now
Questions 41

What is not a purpose of the deployment of Check Point API?

Options:

A.

Execute an automated script to perform common tasks

B.

Create a customized GUI Client for manipulating the objects database

C.

Create products that use and enhance the Check Point solution

D.

Integrate Check Point products with 3rd party solution

Buy Now
Questions 42

Tom has connected to the R80 Management Server remotely using SmartConsole and is in the process of making some Rule Base changes, when he suddenly loses connectivity. Connectivity is restored shortly afterward.

What will happen to the changes already made?

Options:

A.

Tom’s changes will have been stored on the Management when he reconnects and he will not lose any of his work.

B.

Tom will have to reboot his SmartConsole computer, and access the Management cache store on that computer, which is only accessible after a reboot.

C.

Tom’s changes will be lost since he lost connectivity and he will have to start again.

D.

Tom will have to reboot his SmartConsole computer, clear to cache, and restore changes.

Buy Now
Questions 43

What solution is Multi-queue intended to provide?

Options:

A.

Improve the efficiency of traffic handling by SecureXL SNDs

B.

Reduce the confusion for traffic capturing in FW Monitor

C.

Improve the efficiency of CoreXL Kernel Instances

D.

Reduce the performance of network interfaces

Buy Now
Questions 44

The log server sends what to the Correlation Unit?

Options:

A.

Authentication requests

B.

CPMI dbsync

C.

Logs

D.

Event Policy

Buy Now
Questions 45

GAIA greatly increases operational efficiency by offering an advanced and intuitive software update agent, commonly referred to as the:

Options:

A.

Check Point Update Service Engine

B.

Check Point Software Update Agent

C.

Check Point Remote Installation Daemon (CPRID)

D.

Check Point Software Update Daemon

Buy Now
Questions 46

Vanessa is a Firewall administrator. She wants to test a backup of her company’s production Firewall cluster Dallas_GW. She has a lab environment that is identical to her production environment. She decided to restore production backup via SmartConsole in lab environment.

Which details she need to fill in System Restore window before she can click OK button and test the backup?

Options:

A.

Server, SCP, Username, Password, Path, Comment, Member

B.

Server, TFTP, Username, Password, Path, Comment, All Members

C.

Server, Protocol, Username, Password, Path, Comment, All Members

D.

Server, Protocol, username Password, Path, Comment, Member

Buy Now
Questions 47

True or False: In a Distributed Environment, a Central License can be installed via CLI on a Security Gateway.

Options:

A.

True, CLI is the prefer method for Licensing

B.

False, Central License are handled via Security Management Server

C.

False, Central Licenses are installed via Gaia on Security Gateways

D.

True, Central License can be installed with CPLIC command on a Security Gateway

Buy Now
Questions 48

When SecureXL is enabled, all packets should be accelerated, except packets that match the following conditions:

Options:

A.

All UDP packets

B.

All IPv6 Traffic

C.

All packets that match a rule whose source or destination is the Outside Corporate Network

D.

CIFS packets

Buy Now
Questions 49

How does the Anti-Virus feature of the Threat Prevention policy block traffic from infected websites?

Options:

A.

By dropping traffic from websites identified through ThreatCloud Verification and URL Caching

B.

By dropping traffic that is not proven to be from clean websites in the URL Filtering blade

C.

By allowing traffic from websites that are known to run Antivirus Software on servers regularly

D.

By matching logs against ThreatCloud information about the reputation of the website

Buy Now
Questions 50

Can multiple administrators connect to a Security Management Server at the same time?

Options:

A.

No, only one can be connected

B.

Yes, all administrators can modify a network object at the same time

C.

Yes, every administrator has their own username, and works in a session that is independent of other administrators.

D.

Yes, but only one has the right to write.

Buy Now
Questions 51

In R80 spoofing is defined as a method of:

Options:

A.

Disguising an illegal IP address behind an authorized IP address through Port Address Translation.

B.

Hiding your firewall from unauthorized users.

C.

Detecting people using false or wrong authentication logins

D.

Making packets appear as if they come from an authorized IP address.

Buy Now
Questions 52

Which is NOT a SmartEvent component?

Options:

A.

SmartEvent Server

B.

Correlation Unit

C.

Log Consolidator

D.

Log Server

Buy Now
Questions 53

An administrator would like to troubleshoot why templating is not working for some traffic. How can he determine at which rule templating is disabled?

Options:

A.

He can use the fw accel stat command on the gateway.

B.

He can use the fw accel statistics command on the gateway.

C.

He can use the fwaccel stat command on the Security Management Server.

D.

He can use the fwaccel stat command on the gateway

Buy Now
Questions 54

When an encrypted packet is decrypted, where does this happen?

Options:

A.

Security policy

B.

Inbound chain

C.

Outbound chain

D.

Decryption is not supported

Buy Now
Questions 55

Which Check Point feature enables application scanning and the detection?

Options:

A.

Application Dictionary

B.

AppWiki

C.

Application Library

D.

CPApp

Buy Now
Questions 56

Which statement is NOT TRUE about Delta synchronization?

Options:

A.

Using UDP Multicast or Broadcast on port 8161

B.

Using UDP Multicast or Broadcast on port 8116

C.

Quicker than Full sync

D.

Transfers changes in the Kernel tables between cluster members.

Buy Now
Questions 57

Which Remote Access Client does not provide an Office-Mode Address?

Options:

A.

SecuRemote

B.

Endpoint Security Suite

C.

Endpoint Security VPN

D.

Check Point Mobile

Buy Now
Questions 58

What is considered Hybrid Emulation Mode?

Options:

A.

Manual configuration of file types on emulation location.

B.

Load sharing of emulation between an on premise appliance and the cloud.

C.

Load sharing between OS behavior and CPU Level emulation.

D.

High availability between the local SandBlast appliance and the cloud.

Buy Now
Questions 59

What SmartEvent component creates events?

Options:

A.

Consolidation Policy

B.

Correlation Unit

C.

SmartEvent Policy

D.

SmartEvent GUI

Buy Now
Questions 60

Kofi, the administrator of the ALPHA Corp network wishes to change the default Gaia WebUI Portal port number currently set on the default HTTPS port. Which CLISH commands are required to be able to change this TCP port?

Options:

A.

set web ssl-port

B.

set Gaia-portal port

C.

set Gaia-portal https-port

D.

set web https-port

Buy Now
Questions 61

D18912E1457D5D1DDCBD40AB3BF70D5D

The system administrator of a company is trying to find out why acceleration is not working for the traffic. The traffic is allowed according to the rule based and checked for viruses. But it is not accelerated. What is the most likely reason that the traffic is not accelerated?

Options:

A.

The connection is destined for a server within the network

B.

The connection required a Security server

C.

The packet is the second in an established TCP connection

D.

The packets are not multicast

Buy Now
Questions 62

What command would show the API server status?

Options:

A.

cpm status

B.

api restart

C.

api status

D.

show api status

Buy Now
Questions 63

How can SmartView application accessed?

Options:

A.

http:// /smartview

B.

http:// :4434/smartview/

C.

https:// /smartview/

D.

https:// :4434/smartview/

Buy Now
Questions 64

With MTA (Mail Transfer Agent) enabled the gateways manages SMTP traffic and holds external email with potentially malicious attachments. What is required in order to enable MTA (Mail Transfer Agent) functionality in the Security Gateway?

Options:

A.

Threat Cloud Intelligence

B.

Threat Prevention Software Blade Package

C.

Endpoint Total Protection

D.

Traffic on port 25

Buy Now
Questions 65

You need to change the MAC-address on eth2 interface of the gateway. What is the correct way to change MAC-address in Check Point Gaia?

Options:

A.

In CLISH run: set interface eth2 mac-addr 11:11:11:11:11:11

B.

In expert-mode run ifconfig eth1 hw 11:11:11:11 11 11

C.

In CLISH run set interface eth2 hw-addr 11 11 11:11:11 11

D.

In expert-mode run: ethtool -4 eth2 mac 11 11:11:11:11:11

Buy Now
Questions 66

Which feature is NOT provided by all Check Point Mobile Access solutions?

Options:

A.

Support for IPv6

B.

Granular access control

C.

Strong user authentication

D.

Secure connectivity

Buy Now
Questions 67

When running a query on your logs, to find records for user Toni with machine IP of 10.0.4.210 but exclude her tablet IP of 10.0.4.76, which of the following query syntax would you use?

Options:

A.

Toni? AND 10.0.4.210 NOT 10.0.4.76

B.

To** AND 10.0.4.210 NOT 10.0.4.76

C.

Ton* AND 10.0.4.210 NOT 10.0.4.75

D.

"Toni" AND 10.0.4.210 NOT 10.0.4.76

Buy Now
Questions 68

Which TCP port does the CPM process listen on?

Options:

A.

18191

B.

18190

C.

8983

D.

19009

Buy Now
Questions 69

In order to get info about assignment (FW, SND) of all CPUs in your SGW, what is the most accurate CLI command?

Options:

A.

fw ctl sdstat

B.

fw ctl affinity –l –a –r –v

C.

fw ctl multik stat

D.

cpinfo

Buy Now
Status:
Expired
Exam Code: 156-315.80
Exam Name: Check Point Certified Security Expert - R80
Last Update: Apr 14, 2023
Questions: 462
$72  $159.99
$54  $119.99
$45  $99.99
buy now 156-315.80