CheckPoint Checkpoint Certifications 156-215.80 Questions & Answers

• Question 231:

  Which one of these features is NOT associated with the Check Point URL Filtering and Application Control Blade?

  A. Detects and blocks malware by correlating multiple detection engines before users are affected.

  B. Configure rules to limit the available network bandwidth for specified users or groups.

  C. Use UserCheck to help users understand that certain websites are against the company's security policy.

  D. Make rules to allow or block applications and Internet sites for individual applications, categories, and risk levels.

  Correct Answer: A

  Reference: https://sc1.checkpoint.com/documents/R76/CP_R76_AppControl_WebAdmin/60902.htm

• Question 232:

  Which of the following is a new R80.10 Gateway feature that had not been available in R77.X and older?

  A. The rule base can be built of layers, each containing a set of the security rules. Layers are inspected in the order in which they are defined, allowing control over the rule base flow and which security functionalities take precedence.

  B. Limits the upload and download throughput for streaming media in the company to 1 Gbps.

  C. Time object to a rule to make the rule active only during specified times.

  D. Sub Policies are sets of rules that can be created and attached to specific rules. If the rule is matched, inspection will continue in the sub policy attached to it rather than in the next rule.

  Correct Answer: D

  Reference: http://dl3.checkpoint.com/paid/1f/1f850d1640792cf885336cc6ae8b2743/ CP_R80_ReleaseNotes.pdf?HashKey=1517092603_dd917544d92dccc060e5b25d28a46f79andxtn=.pdf

• Question 233:

  What are the three components for Check Point Capsule?

  A. Capsule Docs, Capsule Cloud, Capsule Connect

  B. Capsule Workspace, Capsule Cloud, Capsule Connect

  C. Capsule Workspace, Capsule Docs, Capsule Connect

  D. Capsule Workspace, Capsule Docs, Capsule Cloud

  Correct Answer: D

  Reference: https://www.checkpoint.com/products-solutions/mobile-security/check-point-capsule/

• Question 234:

  Full synchronization between cluster members is handled by Firewall Kernel. Which port is used for this?

  A. UDP port 265

  B. TCP port 265

  C. UDP port 256

  D. TCP port 256

  Correct Answer: B

• Question 235:

  What is true about the IPS-Blade?

  A. in R80, IPS is managed by the Threat Prevention Policy

  B. in R80, in the IPS Layer, the only three possible actions are Basic, Optimized and Strict

  C. in R80, IPS Exceptions cannot be attached to "all rules"

  D. in R80, the GeoPolicy Exceptions and the Threat Prevention Exceptions are the same

  Correct Answer: A

• Question 236:

  Due to high CPU workload on the Security Gateway, the security administrator decided to purchase a new multicore CPU to replace the existing single core CPU. After installation, is the administrator required to perform any additional tasks?

  A. Go to clash-Run cpstop | Run cpstart

  B. Go to clash-Run cpconfig | Configure CoreXL to make use of the additional Cores | Exit cpconfig | Reboot Security Gateway

  C. Administrator does not need to perform any task. Check Point will make use of the newly installed CPU and Cores

  D. Go to clash-Run cpconfig | Configure CoreXL to make use of the additional Cores | Exit cpconfig | Reboot Security Gateway | Install Security Policy

  Correct Answer: B

• Question 237:

  When installing a dedicated R80 SmartEvent server, what is the recommended size of the root partition?

  A. Any size

  B. Less than 20GB

  C. More than 10GB and less than 20 GB

  D. At least 20GB

  Correct Answer: D

  Reference: https://sc1.checkpoint.com/documents/R80/CP_R80_LoggingAndMonitoring/ html_frameset.htm?topic=documents/R80/CP_R80_LoggingAndMonitoring/120829

• Question 238:

  Which firewall daemon is responsible for the FW CLI commands?

  A. fwd

  B. fwm

  C. cpm

  D. cpd

  Correct Answer: A

• Question 239:

  If the Active Security Management Server fails or if it becomes necessary to change the Active to Standby, the following steps must be taken to prevent data loss. Providing the Active Security Management Server is responsible, which of these steps should NOT be performed:

  A. Rename the hostname of the Standby member to match exactly the hostname of the Active member.

  B. Change the Standby Security Management Server to Active.

  C. Change the Active Security Management Server to Standby.

  D. Manually synchronize the Active and Standby Security Management Servers.

  Correct Answer: A

• Question 240:

  Please choose correct command syntax to add an "emailserver1" host with IP address 10.50.23.90 using GAiA management CLI?

  A. host name myHost12 ip-address 10.50.23.90

  B. mgmt add host name ip-address 10.50.23.90

  C. add host name emailserver1 ip-address 10.50.23.90

  D. mgmt add host name emailserver1 ip-address 10.50.23.90

  Correct Answer: C