Far Out 156-315.80 Exam Guide For Check Point Certified Security Expert - R80 Certification

NEW QUESTION 1
Packet acceleration (SecureXL) identifies connections by several attributes- Which of the attributes is NOT used for identifying connection?

• A. Source Address
• B. Destination Address
• C. TCP Acknowledgment Number
• D. Source Port

Answer: C

Explanation:
https //sc1.checkpoint.com/documents/R77/CP R77_Firewall_WebAdmm/92711.htm

NEW QUESTION 2
What is the default shell for the command line interface?

• A. Expert
• B. Clish
• C. Admin
• D. Normal

Answer: B

Explanation:
The default shell of the CLI is called clish

NEW QUESTION 3
To ensure that VMAC mode is enabled, which CLI command should you run on all cluster members?

• A. fw ctl set int fwha vmac global param enabled
• B. fw ctl get int vmac global param enabled; result of command should return value 1
• C. cphaprob-a if
• D. fw ctl get int fwha_vmac_global_param_enabled; result of command should return value 1

Answer: D

NEW QUESTION 4
Check Point ClusterXL Active/Active deployment is used when:

• A. Only when there is Multicast solution set up.
• B. There is Load Sharing solution set up.
• C. Only when there is Unicast solution set up.
• D. There is High Availability solution set up.

Answer: D

NEW QUESTION 5
In a Client to Server scenario, which represents that the packet has already checked against the tables and the Rule Base?

• A. Big l
• B. Little o
• C. Little i
• D. Big O

Answer: D

NEW QUESTION 6
Customer’s R80 management server needs to be upgraded to R80.10. What is the best upgrade method when the management server is not connected to the Internet?

• A. Export R80 configuration, clean install R80.10 and import the configuration
• B. CPUSE offline upgrade
• C. CPUSE online upgrade
• D. SmartUpdate upgrade

Answer: C

NEW QUESTION 7
What is the limitation of employing Sticky Decision Function?

• A. With SDF enabled, the involved VPN Gateways only supports IKEv1
• B. Acceleration technologies, such as SecureXL and CoreXL are disabled when activating SDF
• C. With SDF enabled, only ClusterXL in legacy mode is supported
• D. With SDF enabled, you can only have three Sync interfaces at most

Answer: B

NEW QUESTION 8
What is the protocol and port used for Health Check and State Synchronization in ClusterXL?

• A. CCP and 18190
• B. CCP and 257
• C. CCP and 8116
• D. CPC and 8116

Answer: C

NEW QUESTION 9
Selecting an event displays its configurable properties in the Detail pane and a description of the event in the Description pane. Which is NOT an option to adjust or configure?

• A. Severity
• B. Automatic reactions
• C. Policy
• D. Threshold

Answer: C

NEW QUESTION 10
Which of the following describes how Threat Extraction functions?

• A. Detect threats and provides a detailed report of discovered threats.
• B. Proactively detects threats.
• C. Delivers file with original content.
• D. Delivers PDF versions of original files with active content removed.

Answer: B

NEW QUESTION 11
CoreXL is supported when one of the following features is enabled:

• A. Route-based VPN
• B. IPS
• C. IPv6
• D. Overlapping NAT

Answer: B

Explanation:
CoreXL does not support Check Point Suite with these features: References:

NEW QUESTION 12
What is the Implicit Clean-up Rule?

• A. A setting is defined in the Global Properties for all policies.
• B. A setting that is configured per Policy Layer.
• C. Another name for the Clean-up Rule.
• D. Automatically created when the Clean-up Rule is defined.

Answer: C

NEW QUESTION 13
Hit Count is a feature to track the number of connections that each rule matches, which one is not benefit of Hit Count.

• A. Better understand the behavior of the Access Control Policy
• B. Improve Firewall performance - You can move a rule that has hot count to a higher position in the Rule Base
• C. Automatically rearrange Access Control Policy based on Hit Count Analysis
• D. Analyze a Rule Base - You can delete rules that have no matching connections

Answer: C

NEW QUESTION 14
Fill in the blank: A new license should be generated and installed in all of the following situations EXCEPT when _______ .

• A. The license is attached to the wrong Security Gateway.
• B. The existing license expires.
• C. The license is upgraded.
• D. The IP address of the Security Management or Security Gateway has changed.

Answer: A

NEW QUESTION 15
When configuring SmartEvent Initial settings, you must specify a basic topology for SmartEvent to help it calculate traffic direction for events. What is this setting called and what are you defining?

• A. Network, and defining your Class A space
• B. Topology, and you are defining the Internal network
• C. Internal addresses you are defining the gateways
• D. Internal network(s) you are defining your networks

Answer: B

NEW QUESTION 16
Which is the least ideal Synchronization Status for Security Management Server High Availability deployment?

• A. Synchronized
• B. Never been synchronized
• C. Lagging
• D. Collision

Answer: D

NEW QUESTION 17
Which Mobile Access Application allows a secure container on Mobile devices to give users access to internal website, file share and emails?

• A. Check Point Remote User
• B. Check Point Capsule Workspace
• C. Check Point Mobile Web Portal
• D. Check Point Capsule Remote

Answer: C

NEW QUESTION 18
In SmartConsole, objects are used to represent physical and virtual network components and also some logical components. These objects are divided into several categories. Which of the following is NOT an objects category?

• A. Limit
• B. Resource
• C. Custom Application / Site
• D. Network Object

Answer: B

NEW QUESTION 19
Which of the following type of authentication on Mobile Access can NOT be used as the first authentication method?

• A. Dynamic ID
• B. RADIUS
• C. Username and Password
• D. Certificate

Answer: A

NEW QUESTION 20
Which Check Point daemon monitors the other daemons?

• A. fwm
• B. cpd
• C. cpwd
• D. fwssd

Answer: C

NEW QUESTION 21
......