CheckPoint 156-215.80 Online Practice Questions and Exam Preparation

CheckPoint 156-215.80 Online Questions & Answers

• Question 511:

  Which information is included in the "Extended Log" tracking option, but is not included in the "Log" tracking option?

  A. file attributes
  B. application information
  C. destination port
  D. data type information
  B. application information

• Question 512:

  What key is used to save the current CPView page in a filename format cpview_"cpview process ID". cap"number of captures"?

  A. S
  B. W
  C. C
  D. Space bar
  C. C

• Question 513:

  What SmartEvent component creates events?

  A. Consolidation Policy
  B. Correlation Unit
  C. SmartEvent Policy
  D. SmartEvent GUI
  B. Correlation Unit

• Question 514:

  Why would an administrator see the message below?

  

  A. A new Policy Package created on both the Management and Gateway will be deleted and must be packed up first before proceeding.
  B. A new Policy Package created on the Management is going to be installed to the existing Gateway.
  C. A new Policy Package created on the Gateway is going to be installed on the existing Management.
  D. A new Policy Package created on the Gateway and transferred to the management will be overwritten by the Policy Package currently on the Gateway but can be restored from a periodic backup on the Gateway.
  B. A new Policy Package created on the Management is going to be installed to the existing Gateway.

• Question 515:

  What is the difference between SSL VPN and IPSec VPN?

  A. IPSec VPN does not require installation of a resident VPN client
  B. SSL VPN requires installation of a resident VPN client
  C. SSL VPN and IPSec VPN are the same
  D. IPSec VPN requires installation of a resident VPN client and SSL VPN requires only an installed Browser
  D. IPSec VPN requires installation of a resident VPN client and SSL VPN requires only an installed Browser

• Question 516:

  Which one of the following is true about Threat Extraction?

  A. Always delivers a file to user
  B. Works on all MS Office, Executables, and PDF files
  C. Can take up to 3 minutes to complete
  D. Delivers file only if no threats found
  B. Works on all MS Office, Executables, and PDF files

• Question 517:

  Which one of the following is TRUE?

  A. Ordered policy is a sub-policy within another policy
  B. One policy can be either inline or ordered, but not both
  C. Inline layer can be defined as a rule action
  D. Pre-R80 Gateways do not support ordered layers
  C. Inline layer can be defined as a rule action

• Question 518:

  The SmartEvent R80 Web application for real-time event monitoring is called:

  A. SmartView Monitor
  B. SmartEventWeb
  C. There is no Web application for SmartEvent
  D. SmartView
  B. SmartEventWeb

• Question 519:

  Your company enforces a strict change control policy. Which of the following would be MOST effective for quickly dropping an attacker's specific active connection?

  A. Change the Rule Base and install the Policy to all Security Gateways
  B. Block Intruder feature of SmartView Tracker
  C. Intrusion Detection System (IDS) Policy install
  D. SAM ?Suspicious Activity Rules feature of SmartView Monitor
  B. Block Intruder feature of SmartView Tracker

• Question 520:

  Customer's R80 management server needs to be upgraded to R80.10. What is the best upgrade method when the management server is not connected to the Internet?

  A. Export R80 configuration, clean install R80.10 and import the configuration
  B. CPUSE online upgrade
  C. CPUSE offline upgrade
  D. SmartUpdate upgrade
  C. CPUSE offline upgrade