Breathing CheckPoint 156-315.81 Sample Question Online

NEW QUESTION 1

If you needed the Multicast MAC address of a cluster, what command would you run?

• A. cphaprob –a if
• B. cphaconf ccp multicast
• C. cphaconf debug data
• D. cphaprob igmp

Answer: D

NEW QUESTION 2

Which command would disable a Cluster Member permanently?

• A. clusterXL_admin down
• B. cphaprob_admin down
• C. clusterXL_admin down-p
• D. set clusterXL down-p

Answer: C

NEW QUESTION 3

If a “ping”-packet is dropped by FW1 Policy –on how many inspection Points do you see this packet in “fw monitor”?

• A. “i", “l” and “o”
• B. I don’t see it in fw monitor
• C. “i" only
• D. “i" and “l”

Answer: C

NEW QUESTION 4

Within the Check Point Firewall Kernel resides Chain Modules, which are individually responsible for the inspection of a specific blade or feature that has been enabled in the configuration of the gateway. For Wire mode configuration, chain modules marked with ______ will not apply.

• A. ffffffff
• B. 00000001
• C. 00000002
• D. 00000003

Answer: B

NEW QUESTION 5

Which command lists firewall chain?

• A. fwctl chain
• B. fw list chain
• C. fw chain module
• D. fw tab -t chainmod

Answer: A

Explanation:
https://sc1.checkpoint.com/documents/R81/WebAdminGuides/EN/CP_R81_NextGenSecurityGateway_Guide/T

NEW QUESTION 6


You are the administrator for ABC Corp. You have logged into your R81 Management server. You are making some changes in the Rule Base and notice that rule No.6 has a pencil icon next to it.
What does this mean?

• A. This rule N
• B. 6 has been marked for deletion in your Management session.
• C. This rule N
• D. 6 has been marked for deletion in another Management session.
• E. This rule N
• F. 6 has been marked for editing in your Management session.
• G. This rule N
• H. 6 has been marked for editing in another Management session.

Answer: C

NEW QUESTION 7

What is the least amount of CPU cores required to enable CoreXL?

• A. 2
• B. 1
• C. 4
• D. 6

Answer: A

NEW QUESTION 8

What are the modes of SandBlast Threat Emulation deployment?

• A. Cloud, Smart-1 and Hybrid
• B. Clou
• C. OpenServer and Vmware
• D. Cloud, Appliance and Private
• E. Cloud, Appliance and Hybrid

Answer: D

NEW QUESTION 9

SandBlast appliances can be deployed in the following modes:

• A. using a SPAN port to receive a copy of the traffic only
• B. detect only
• C. inline/prevent or detect
• D. as a Mail Transfer Agent and as part of the traffic flow only

Answer: C

NEW QUESTION 10

In the Check Point Firewall Kernel Module, each Kernel is associated with a key, which specifies the type of traffic applicable to the chain module. For Wire Mode configuration, chain modules marked with ________ will not apply.

• A. ffff
• B. 1
• C. 2
• D. 3

Answer: B

NEW QUESTION 11

Using mgmt_cli, what is the correct syntax to import a host object called Server_1 from the CLI?

• A. mgmt_cli add-host “Server_1” ip_address “10.15.123.10” --format txt
• B. mgmt_cli add host name “Server_1” ip-address “10.15.123.10” --format json
• C. mgmt_cli add object-host “Server_1” ip-address “10.15.123.10” --format json
• D. mgmt._cli add object “Server-1” ip-address “10.15.123.10” --format json

Answer: B

Explanation:
Example:
mgmt_cli add host name "New Host 1" ip-address "192.0.2.1" --format json
• "--format json" is optional. By default the output is presented in plain text.

NEW QUESTION 12

What is the most recommended way to install patches and hotfixes?

• A. CPUSE Check Point Update Service Engine
• B. rpm -Uv
• C. Software Update Service
• D. UnixinstallScript

Answer: A

NEW QUESTION 13

Which options are given on features, when editing a Role on Gaia Platform?

• A. Read/Write, Read Only
• B. Read/Write, Read Only, None
• C. Read/Write, None
• D. Read Only, None

Answer: B

NEW QUESTION 14

Which Mobile Access Application allows a secure container on Mobile devices to give users access to internal website, file share and emails?

• A. Check Point Remote User
• B. Check Point Capsule Workspace
• C. Check Point Mobile Web Portal
• D. Check Point Capsule Remote

Answer: C

NEW QUESTION 15

What CLI command compiles and installs a Security Policy on the target’s Security Gateways?

• A. fwm compile
• B. fwm load
• C. fwm fetch
• D. fwm install

Answer: B

NEW QUESTION 16

You notice that your firewall is under a DDoS attack and would like to enable the Penalty Box feature, which command you use?

• A. sim erdos –e 1
• B. sim erdos – m 1
• C. sim erdos –v 1
• D. sim erdos –x 1

Answer: A

NEW QUESTION 17

If an administrator wants to add manual NAT for addresses now owned by the Check Point firewall, what else is necessary to be completed for it to function properly?

• A. Nothing - the proxy ARP is automatically handled in the R81 version
• B. Add the proxy ARP configurations in a file called /etc/conf/local.arp
• C. Add the proxy ARP configurations in a file called $FWDIR/conf/local.arp
• D. Add the proxy ARP configurations in a file called $CPDIR/conf/local.arp

Answer: D

NEW QUESTION 18

What is not a purpose of the deployment of Check Point API?

• A. Execute an automated script to perform common tasks
• B. Create a customized GUI Client for manipulating the objects database
• C. Create products that use and enhance the Check Point solution
• D. Integrate Check Point products with 3rd party solution

Answer: B

NEW QUESTION 19

What is a possible command to delete all of the SSH connections of a gateway?

• A. fw sam -I dport 22
• B. fw ctl conntab -x -dpott=22
• C. fw tab -t connections -x -e 00000016
• D. fwaccel dos config set dport ssh

Answer: A

NEW QUESTION 20

You need to change the MAC-address on eth2 interface of the gateway. What is the correct way to change MAC-address in Check Point Gaia?

• A. In CLISH run: set interface eth2 mac-addr 11:11:11:11:11:11
• B. In expert-mode run ifconfig eth1 hw 11:11:11:11 11 11
• C. In CLISH run set interface eth2 hw-addr 11 11 11:11:11 11
• D. In expert-mode run: ethtool -4 eth2 mac 11 11:11:11:11:11

Answer: A

NEW QUESTION 21
......