156-315.80 questions and answers

What command verifies that the API server is responding?

Which pre-defined Permission Profile should be assigned to an administrator that requires full access to audit all configurations without modifying them?

Which SmartConsole tab is used to monitor network and security performance?

Which is the correct order of a log flow processed by SmartEvent components?

The Check Point history feature in R80 provides the following:

Which directory below contains log files?

With SecureXL enabled, accelerated packets will pass through the following:

Please choose correct command to add an "emailserver1" host with IP address 10.50.23.90 using GAiA management CLI?

While using the Gaia CLI.
what is the correct command to publish changes to the management server?

What are types of Check Point APIs available currently as part of R80.10 code?

Due to high CPU workload on the Security Gateway, the security administrator decided to purchase a new multicore CPU to replace the existing single core CPU.
After installation, is the administrator required to perform any additional tasks?

Which is NOT an example of a Check Point API?

SandBlast agent extends 0 day prevention to what part of the network?

Sticky Decision Function (SDF) is required to prevent which of the following? Assume you set up an Active-Active cluster.

You work as a security administrator for a large company. CSO of your company has attended a security conference where he has learnt how hackers constantly modify their strategies and techniques to evade detection and reach corporate resources. He wants to make sure that his company has the tight protections in place. Check Point has been selected for the security vendor.

Which Check Point product protects BEST against malware and zero-day attacks while ensuring quick delivery of safe content to your users?

Which Check Point software blades could be enforced under Threat Prevention profile using Check Point R80.10 SmartConsole application?

Which command is used to obtain the configuration lock in Gaia?

When Configuring Endpoint Compliance Settings for Applications and Gateways within Mobile Access, which of the three approaches will allow you to contuju'1* individual policies for each application?

You have a Geo-Protection policy blocking Australia and a number of other countries. Your network now requires a Check Point Firewall to be installed in Sydney, Australia.

What must you do to get SIC to work?

When requiring certificates for mobile devices, make sure the authentication method is set to one of the following, Username and Password, RADIUS or _______.

Kofi, the administrator of the ALPHA Corp network wishes to change the default Gaia WebUI Portal port number currently set on the default HTTPS port.

Which CLISH commands are required to be able to change this TCP port?

What happen when IPS profile is set in Detect Only Mode for troubleshooting?

Tom has connected to the R80 Management Server remotely using SmartConsole and is in the process of making some Rule Base changes, when he suddenly loses connectivity. Connectivity is restored shortly afterward.

What will happen to the changes already made?

Vanessa is expecting a very important Security Report. The Document should be sent as an attachment via e-mail. An e-mail with Security_report.pdf file was delivered to her e-mail inbox. When she opened the PDF file, she noticed that the file is basically empty and only few lines of text are in it. The report is missing some graphs, tables and links.

Which component of SandBlast protection is her company using on a Gateway?

Which command shows actual allowed connections in state table?

The fwd process on the Security Gateway sends logs to the fwd process on the Management Server via which 2 processes?

CPM process stores objects, policies, users, administrators, licenses and management data in a database.
The database is:

Which one of these features is NOT associated with the Check Point URL Filtering and Application Control Blade?

What is the valid range for Virtual Router Identifier (VRID) value in a Virtual Routing Redundancy Protocol (VRRP) configuration?

Check Pont Central Deployment Tool (CDT) communicates with the Security Gateway / Cluster Members over Check Point SIC _____________ .

When doing a Stand-Alone Installation, you would install the Security Management Server with which other Check Point architecture component?

To fully enable Dynamic Dispatcher with Firewall Priority Queues on a Security Gateway, run the following command in Expert mode then reboot:

What are the blades of Threat Prevention?

What are the attributes that SecureXL will check after the connection is allowed by Security Policy?

What are the available options for downloading Check Point hotfixes in Gaia WebUI (CPUSE)?

Ken wants to obtain a configuration lock from other administrator on R80 Security Management Server. He can do this via WebUI or via CLI.

Which command should he use in CLI? (Choose the correct answer.)

If SecureXL is disabled which path is used to process traffic?

Pamela is Cyber Security Engineer working for Global Instance Firm with large scale deployment of Check Point Enterprise Appliances using GAiA/R80.10. Company's Developer Team is having random access issue to newly deployed Application Server in DMZ's Application Server Farm Tier and blames DMZ Security Gateway as root cause. The ticket has been created and issue is at Pamela's desk for an investigation. Pamela decides to use Check Point's Packet Analyzer Tool-fw monitor to iron out the issue
during approved Maintenance window.

What do you recommend as the best suggestion for Pamela to make sure she successfully captures entire traffic in context of Firewall and problematic traffic?

Which encryption algorithm is the least secured?

Which command lists all tables in Gaia?

The fwd process on the Security Gateway sends logs to the fwd process on the Management Server, where it is forwarded to via.

To ensure that VMAC mode is enabled, which CLI command should you run on all cluster members?

Security Checkup Summary can be easily conducted within:

What is the valid range for VRID value in VRRP configuration?

What is the protocol and port used for Health Check and State Synchronization in ClusterXL?

To enable Dynamic Dispatch on Security Gateway without the Firewall Priority Queues, run the following command in Expert mode and reboot:

On what port does the CPM process run?

What is the main difference between Threat Extraction and Threat Emulation?

What command lists all interfaces using Multi-Queue?

Which one of the following is true about Capsule Connect?

Which of the following is NOT a type of Endpoint Identity Agent?

What is the Implicit Clean-up Rule?

What is the responsibility of SOLR process on R80.10 management server?

When gathering information about a gateway using CPINFO, what information is included or excluded when using the "-x" parameter?

Which is NOT a SmartEvent component?

What is the benefit of Manual NAT over Automatic NAT?

The Correlation Unit performs all but the following actions:

You are investigating issues with to gateway cluster members are not able to establish the first initial cluster synchronization.

What service is used by the FWD daemon to do a Full Synchronization?

Which process is available on any management product and on products that require direct GUI access, such as SmartEvent and provides GUI client communications, database manipulation, policy compilation and Management HA synchronization?

SandBlast appliances can be deployed in the following modes:

Which blades and or features are not supported in R80?

Which statement is true regarding redundancy?

What is the difference between SSL VPN and IPSec VPN?

Fill in the blanks: A _______ license requires an administrator to designate a gateway for attachment whereas a ________ license is automatically attached to a Security Gateway.

You are working with multiple Security Gateways enforcing an extensive number of rules.
To simplify security administration, which action would you choose?

When Dynamic Dispatcher is enabled, connections are assigned dynamically with the exception of:

DLP and Geo Policy are examples of what type of Policy?

How would you deploy TE250X Check Point appliance just for email traffic and in-line mode without a Check Point Security Gateway?

Which of the following is an identity acquisition method that allows a Security Gateway to identify Active Directory users and computers?

Which of the following process pulls application monitoring status?

During inspection of your Threat Prevention logs you find four different computers having one event each with a Critical Severity.

Which of those hosts should you try to remediate first?

You need to change the MAC-address on eth2 interface of the gateway.

What is the correct way to change MAC-address in Check Point Gaia?

In what way are SSL VPN and IPSec VPN different?