The Secret Of CheckPoint 156-315.81 Free Exam Questions

NEW QUESTION 1

What is the best sync method in the ClusterXL deployment?

• A. Use 1 cluster + 1st sync
• B. Use 1 dedicated sync interface
• C. Use 3 clusters + 1st sync + 2nd sync + 3rd sync
• D. Use 2 clusters +1st sync + 2nd sync

Answer: B

NEW QUESTION 2

Which of the following will NOT affect acceleration?

• A. Connections destined to or originated from the Security gateway
• B. A 5-tuple match
• C. Multicast packets
• D. Connections that have a Handler (ICMP, FTP, H.323, etc.)

Answer: B

NEW QUESTION 3

Which of the following is NOT a VPN routing option available in a star community?

• A. To satellites through center only.
• B. To center, or through the center to other satellites, to Internet and other VPN targets.
• C. To center and to other satellites through center.
• D. To center only.

Answer: AD

NEW QUESTION 4

SandBlast offers flexibility in implementation based on their individual business needs. What is an option for deployment of Check Point SandBlast Zero-Day Protection?

• A. Smart Cloud Services
• B. Load Sharing Mode Services
• C. Threat Agent Solution
• D. Public Cloud Services

Answer: A

NEW QUESTION 5

Sieve is a Cyber Security Engineer working for Global Bank with a large scale deployment of Check Point Enterprise Appliances Steve's manager. Diana asks him to provide firewall connection table details from one of the firewalls for which he is responsible. Which of these commands may impact performance briefly and should not be used during heavy traffic times of day?

• A. fw tab -t connections -s
• B. fw tab -t connections
• C. fw tab -t connections -c
• D. fw tab -t connections -f

Answer: B

NEW QUESTION 6

To accelerate the rate of connection establishment, SecureXL groups all connection that match a particular service and whose sole differentiating element is the source port. The type of grouping enables even the very first packets of a TCP handshake to be accelerated. The first packets of the first connection on the same service will be forwarded to the Firewall kernel which will then create a template of the connection. Which of the these is NOT a SecureXL template?

• A. Accept Template
• B. Deny Template
• C. Drop Template
• D. NAT Template

Answer: B

NEW QUESTION 7

Tom has connected to the R81 Management Server remotely using SmartConsole and is in the process of making some Rule Base changes, when he suddenly loses connectivity. Connectivity is restored shortly afterward.
What will happen to the changes already made?

• A. Tom’s changes will have been stored on the Management when he reconnects and he will not lose any of his work.
• B. Tom will have to reboot his SmartConsole computer, and access the Management cache store on that computer, which is only accessible after a reboot.
• C. Tom’s changes will be lost since he lost connectivity and he will have to start again.
• D. Tom will have to reboot his SmartConsole computer, clear to cache, and restore changes.

Answer: A

NEW QUESTION 8

SmartConsole R81 x requires the following ports to be open for SmartEvent.

• A. 19009, 19090 & 443
• B. 19009, 19004 & 18190
• C. 18190 & 443
• D. 19009, 18190 & 443

Answer: D

NEW QUESTION 9

The CPD daemon is a Firewall Kernel Process that does NOT do which of the following?

• A. Secure Internal Communication (SIC)
• B. Restart Daemons if they fail
• C. Transfers messages between Firewall processes
• D. Pulls application monitoring status

Answer: D

NEW QUESTION 10

What is the SandBlast Agent designed to do?

• A. Performs OS-level sandboxing for SandBlast Cloud architecture
• B. Ensure the Check Point SandBlast services is running on the end user’s system
• C. If malware enters an end user’s system, the SandBlast Agent prevents the malware from spreading with the network
• D. Clean up email sent with malicious attachments

Answer: C

NEW QUESTION 11

Which statement is NOT TRUE about Delta synchronization?

• A. Using UDP Multicast or Broadcast on port 8161
• B. Using UDP Multicast or Broadcast on port 8116
• C. Quicker than Full sync
• D. Transfers changes in the Kernel tables between cluster members.

Answer: A

NEW QUESTION 12

Fill in the blank: The R81 utility fw monitor is used to troubleshoot .

• A. User data base corruption
• B. LDAP conflicts
• C. Traffic issues
• D. Phase two key negotiations

Answer: C

Explanation:
Check Point’s FW Monitor is a powerful built-in tool for capturing network traffic at the packet level. The FW Monitor utility captures network packets at multiple capture points along the FireWall inspection chains. These captured packets can be inspected later using the WireShark.

NEW QUESTION 13

Which of the following is NOT an internal/native Check Point command?

• A. fwaccel on
• B. fw ct1 debug
• C. tcpdump
• D. cphaprob

Answer: C

NEW QUESTION 14

Which one of the following is true about Capsule Connect?

• A. It is a full layer 3 VPN client
• B. It offers full enterprise mobility management
• C. It is supported only on iOS phones and Windows PCs
• D. It does not support all VPN authentication methods

Answer: A

NEW QUESTION 15

What are the correct sleps upgrading a HA cluster (Ml is active. M2 is passive) using Multi-Version Cluster(MVC) Upgrade?

• A. 1) Enable the MVC mechanism on both cluster members «cphaprob mvc on2) Upgrade the passive node M2 to R81.103) In SmartConsol
• B. change the version of the cluster object4) Install the Access Control Policy and make sure that the installation will not stop if installation on one cluster member fails5) After examine the cluster states upgrade node M1 to R81.106) On each Cluster Member, disable the MVC mechanism
• C. 1) Enable the MVC mechanism on both cluster members #cphaprob mvc on2) Upgrade the passive node M2 to R81.103) In SmartConsol
• D. change the version of the cluster object4) Install the Access Control Policy5) After examine the cluster states upgrade node M1 to R81.106) On each Cluster Member, disable the MVC mechanism and Install the Access Control Policy
• E. 1) In SmartConsol
• F. change the version of the cluster object2) Upgrade the passive node M2 to R81.103) Enable the MVC mechanism on the upgraded R81.10 Cluster Member M2 Wcphaconf mvc on4) Install the Access Control Policy and make sure that the installation will not stop if installation on one cluster member fails5) After examine the cluster states upgrade node M1 to R81.106) On each Cluster Member, disable the MVC mechanism and Install the Access Control Policy SmartConsol
• G. change the version of the cluster object
• H. 1) Upgrade the passive node M2 to R81.102) Enable the MVC mechanism on the upgraded R81.10 Cluster Member M2 ttcphaconf mvc on3) In SmartConsole, change the version of the cluster object 4} Install the Access Control Policy5) After examine the cluster states upgrade node M1 to R81.106) On each Cluster Member, disable the MVC mechanism and Install the Access Control Policy upgrade the passive node M2 to R81.10

Answer: D

NEW QUESTION 16

Which command will allow you to see the interface status?

• A. cphaprob interface
• B. cphaprob –I interface
• C. cphaprob –a if
• D. cphaprob stat

Answer: C

NEW QUESTION 17

Kofi, the administrator of the ALPHA Corp network wishes to change the default Gaia WebUI Portal port number currently set on the default HTTPS port. Which CLISH commands are required to be able to change this TCP port?

• A. set web ssl-port <new port number>
• B. set Gaia-portal port <new port number>
• C. set Gaia-portal https-port <new port number>
• D. set web https-port <new port number>

Answer: A

NEW QUESTION 18

What command would show the API server status?

• A. cpm status
• B. api restart
• C. api status
• D. show api status

Answer: C

NEW QUESTION 19

What is the command to check the status of Check Point processes?

• A. top
• B. cptop
• C. cphaprob list
• D. cpwd_admin list

Answer: D

NEW QUESTION 20

What is the command to show SecureXL status?

• A. fwaccel status
• B. fwaccel stats -m
• C. fwaccel -s
• D. fwaccel stat

Answer: D

Explanation:
To check overall SecureXL status: [Expert@HostName]# fwaccel stat References:

NEW QUESTION 21
......