CheckPoint Checkpoint Certifications 156-215.80 Questions & Answers

• Question 261:

  Which of these statements describes the Check Point ThreatCloud?

  A. Blocks or limits usage of web applications

  B. Prevents or controls access to web sites based on category

  C. Prevents Cloud vulnerability exploits

  D. A worldwide collaborative security network

  Correct Answer: D

  Reference: https://www.checkpoint.com/support-services/threatcloud-managed-security-service/

• Question 262:

  Packet acceleration (SecureXL) identifies connections by several attributes. Which of the attributes is NOT used for identifying connection?

  A. Source Address

  B. Destination Address

  C. TCP Acknowledgment Number

  D. Source Port

  Correct Answer: C

  Reference: https://sc1.checkpoint.com/documents/R77/CP_R77_Firewall_WebAdmin/92711.htm

• Question 263:

  When defining QoS global properties, which option below is not valid?

  A. Weight

  B. Authenticated timeout

  C. Schedule

  D. Rate

  Correct Answer: C

  Reference: https://sc1.checkpoint.com/documents/R76/CP_R76_QoS_AdminGuide/14871.htm

• Question 264:

  What component of R80 Management is used for indexing?

  A. DBSync

  B. API Server

  C. fwm

  D. SOLR

  Correct Answer: D

  Reference: https://www.checkpoint.com/downloads/product-related/r80.10-mgmt-architecture-overview.pdf

• Question 265:

  Which NAT rules are prioritized first?

  A. Post-Automatic/Manual NAT rules

  B. Manual/Pre-Automatic NAT

  C. Automatic Hide NAT

  D. Automatic Static NAT

  Correct Answer: B

• Question 266:

  What is the difference between an event and a log?

  A. Events are generated at gateway according to Event Policy

  B. A log entry becomes an event when it matches any rule defined in Event Policy

  C. Events are collected with SmartWorkflow from Trouble Ticket systems

  D. Logs and Events are synonyms

  Correct Answer: B

• Question 267:

  The system administrator of a company is trying to find out why acceleration is not working for the traffic. The traffic is allowed according to the rule base and checked for viruses. But it is not accelerated. What is the most likely reason that the traffic is not accelerated?

  A. There is a virus found. Traffic is still allowed but not accelerated

  B. The connection required a Security server

  C. Acceleration is not enabled

  D. The traffic is originating from the gateway itself

  Correct Answer: D

• Question 268:

  During the Check Point Stateful Inspection Process, for packets that do not pass Firewall Kernel Inspection and are rejected by the rule definition, packets are:

  A. Dropped without sending a negative acknowledgment

  B. Dropped without logs and without sending a negative acknowledgment

  C. Dropped with negative acknowledgment

  D. Dropped with logs and without sending a negative acknowledgment

  Correct Answer: D

• Question 269:

  Which one of the following is true about Threat Extraction?

  A. Always delivers a file to user

  B. Works on all MS Office, Executables, and PDF files

  C. Can take up to 3 minutes to complete

  D. Delivers file only if no threats found

  Correct Answer: B

• Question 270:

  Which the following type of authentication on Mobile Access can NOT be used as the first authentication method?

  A. Dynamic ID

  B. RADIUS

  C. Username and Password

  D. Certificate

  Correct Answer: A

  Reference: https://sc1.checkpoint.com/documents/R77/CP_R77_Mobile_Access_WebAdmin/41587.htm