CheckPoint Checkpoint Certifications 156-215.81.20 Questions & Answers

• Question 411:

  What is the difference between an event and a log?

  A. Events are generated at gateway according to Event Policy

  B. A log entry becomes an event when it matches any rule defined in Event Policy

  C. Events are collected with SmartWorkflow from Trouble Ticket systems

  D. Logs and Events are synonyms

  Correct Answer: B

• Question 412:

  The system administrator of a company is trying to find out why acceleration is not working for the traffic. The traffic is allowed according to the rule base and checked for viruses. But it is not accelerated. What is the most likely reason that the traffic is not accelerated?

  A. There is a virus found. Traffic is still allowed but not accelerated

  B. The connection required a Security server

  C. Acceleration is not enabled

  D. The traffic is originating from the gateway itself

  Correct Answer: D

• Question 413:

  During the Check Point Stateful Inspection Process, for packets that do not pass Firewall Kernel Inspection and are rejected by the rule definition, packets are:

  A. Dropped without sending a negative acknowledgment

  B. Dropped without logs and without sending a negative acknowledgment

  C. Dropped with negative acknowledgment

  D. Dropped with logs and without sending a negative acknowledgment

  Correct Answer: D

• Question 414:

  Which one of the following is true about Threat Extraction?

  A. Always delivers a file to user

  B. Works on all MS Office, Executables, and PDF files

  C. Can take up to 3 minutes to complete

  D. Delivers file only if no threats found

  Correct Answer: B

• Question 415:

  Which is the correct order of a log flow processed by SmartEvent components:

  A. Firewall > Correlation Unit > Log Server > SmartEvent Server Database > SmartEvent Client

  B. Firewall > SmartEvent Server Database > Correlation Unit > Log Server > SmartEvent Client

  C. Firewall > Log Server > SmartEvent Server Database > Correlation Unit > SmartEvent Client

  D. Firewall > Log Server > Correlation Unit > SmartEvent Server Database > SmartEvent Client

  Correct Answer: D

• Question 416:

  Which of these statements describes the Check Point ThreatCloud?

  A. Blocks or limits usage of web applications

  B. Prevents or controls access to web sites based on category

  C. Prevents Cloud vulnerability exploits

  D. A worldwide collaborative security network

  Correct Answer: D

  Reference: https://www.checkpoint.com/support-services/threatcloud-managed-security-service/

• Question 417:

  Packet acceleration (SecureXL) identifies connections by several attributes. Which of the attributes is NOT used for identifying connection?

  A. Source Address

  B. Destination Address

  C. TCP Acknowledgment Number

  D. Source Port

  Correct Answer: C

  Reference: https://sc1.checkpoint.com/documents/R77/CP_R77_Firewall_WebAdmin/92711.htm

• Question 418:

  When defining QoS global properties, which option below is not valid?

  A. Weight

  B. Authenticated timeout

  C. Schedule

  D. Rate

  Correct Answer: C

  Reference: https://sc1.checkpoint.com/documents/R76/CP_R76_QoS_AdminGuide/14871.htm

• Question 419:

  The WebUI offers three methods for downloading Hotfixes via CPUSE. One of them is Automatic method. How many times per day will CPUSE agent check for hotfixes and automatically download them?

  A. Six times per day

  B. Seven times per day

  C. Every two hours

  D. Every three hours

  Correct Answer: D

  Reference: https://sc1.checkpoint.com/documents/R77/CP_R77_Gaia_AdminWebAdminGuide/html_frameset.htm?topic=documents/R77/CP_R77_Gaia_AdminWebAdminGuide/112109

• Question 420:

  How would you deploy TE250X Check Point appliance just for email traffic and in-line mode without a Check Point Security Gateway?

  A. Install appliance TE250X on SpanPort on LAN switch in MTA mode

  B. Install appliance TE250X in standalone mode and setup MTA

  C. You can utilize only Check Point Cloud Services for this scenario

  D. It is not possible, always Check Point SGW is needed to forward emails to SandBlast appliance

  Correct Answer: C

  Reference: http://dl3.checkpoint.com/paid/f2/f2faf02dba06acad8cc4c57833593df6/CP_TE100X_TE250X_Appliance_GettingStartedGuide.pdf?HashKey=1517091196_a292abdde351bbdb4b3d28e82654b240andxtn=.pdf