CheckPoint Checkpoint Certifications 156-215.80 Questions & Answers

• Question 251:

  If the first packet of an UDP session is rejected by a security policy, what does the firewall send to the client?

  A. Nothing

  B. TCP FIN

  C. TCP RST

  D. ICMP unreachable

  Correct Answer: A

• Question 252:

  What is the mechanism behind Threat Extraction?

  A. This is a new mechanism which extracts malicious files from a document to use it as a counter-attack against its sender

  B. This is a new mechanism which is able to collect malicious files out of any kind of file types to destroy it prior to sending it to the intended recipient

  C. This is a new mechanism to identify the IP address of the sender of malicious codes and to put it into the SAM database (Suspicious Activity Monitoring).

  D. Any active contents of a document, such as JavaScripts, macros and links will be removed from the document and forwarded to the intended recipient, which makes this solution very fast

  Correct Answer: D

• Question 253:

  Using mgmt_cli, what is the correct syntax to import a host object called Server_1 from the CLI?

  A. mgmt_cli add-host "Server_1" ip_address "10.15.123.10" --format txt

  B. mgmt_cli add host name "Server_1" ip_address "10.15.123.10" --format json

  C. mgmt_cli add object-host "Server_1" ip_address "10.15.123.10" --format json

  D. mgmt_cli add object "Server_1" ip_address "10.15.123.10" --format json

  Correct Answer: A

  Reference: https://sc1.checkpoint.com/documents/latest/APIs/index.html#cli/add-host~v1.1

• Question 254:

  SandBlast has several functional components that work together to ensure that attacks are prevented in real-time. Which the following is NOT part of the SandBlast component?

  A. Threat Emulation

  B. Mobile Access

  C. Mail Transfer Agent

  D. Threat Cloud

  Correct Answer: C

  Reference: https://www.checkpoint.com/products-solutions/zero-day-protection/

• Question 255:

  Vanessa is expecting a very important Security Report. The Document should be sent as an attachment via e-mail. An e-mail with Security_report.pdf file was delivered to her e-mail inbox. When she opened the PDF file, she noticed that the file is basically empty and only few lines of text are in it. The report is missing some graphs, tables and links. Which component of SandBlast protection is her company using on a Gateway?

  A. SandBlast Threat Emulation

  B. SandBlast Agent

  C. Check Point Protect

  D. SandBlast Threat Extraction

  Correct Answer: D

• Question 256:

  In SmartEvent, what are the different types of automatic reactions that the administrator can configure?

  A. Mail, Block Source, Block Event Activity, External Script, SNMP Trap

  B. Mail, Block Source, Block Destination, Block Services, SNMP Trap

  C. Mail, Block Source, Block Destination, External Script, SNMP Trap

  D. Mail, Block Source, Block Event Activity, Packet Capture, SNMP Trap

  Correct Answer: A

  Reference: https://sc1.checkpoint.com/documents/R76/CP_R76_SmartEvent_AdminGuide/17401.htm

• Question 257:

  Identify the API that is not supported by Check Point currently.

  A. R80 Management API

  B. Identity Awareness Web Services API

  C. Open REST API

  D. OPSEC SDK

  Correct Answer: C

  Reference: http://dl3.checkpoint.com/paid/29/29532b9eec50d0a947719ae631f640d0/ CP_R80_CheckPoint_API_ReferenceGuide.pdf? HashKey=1517091458_be29bd4732d8d22283df32ccaaffc482andxtn=.pdf

• Question 258:

  The WebUI offers three methods for downloading Hotfixes via CPUSE. One of them is Automatic method. How many times per day will CPUSE agent check for hotfixes and automatically download them?

  A. Six times per day

  B. Seven times per day

  C. Every two hours

  D. Every three hours

  Correct Answer: D

  Reference: https://sc1.checkpoint.com/documents/R77/CP_R77_Gaia_AdminWebAdminGuide/ html_frameset.htm?topic=documents/R77/CP_R77_Gaia_AdminWebAdminGuide/112109

• Question 259:

  How would you deploy TE250X Check Point appliance just for email traffic and in-line mode without a Check Point Security Gateway?

  A. Install appliance TE250X on SpanPort on LAN switch in MTA mode

  B. Install appliance TE250X in standalone mode and setup MTA

  C. You can utilize only Check Point Cloud Services for this scenario

  D. It is not possible, always Check Point SGW is needed to forward emails to SandBlast appliance

  Correct Answer: C

  Reference: http://dl3.checkpoint.com/paid/f2/f2faf02dba06acad8cc4c57833593df6/ CP_TE100X_TE250X_Appliance_GettingStartedGuide.pdf? HashKey=1517091196_a292abdde351bbdb4b3d28e82654b240andxtn=.pdf

• Question 260:

  Which is the correct order of a log flow processed by SmartEvent components:

  A. Firewall > Correlation Unit > Log Server > SmartEvent Server Database > SmartEvent Client

  B. Firewall > SmartEvent Server Database > Correlation Unit > Log Server > SmartEvent Client

  C. Firewall > Log Server > SmartEvent Server Database > Correlation Unit > SmartEvent Client

  D. Firewall > Log Server > Correlation Unit > SmartEvent Server Database > SmartEvent Client

  Correct Answer: D