CheckPoint Checkpoint Certifications 156-215.81.20 Questions & Answers

• Question 431:

  The CPD daemon is a Firewall Kernel Process that does NOT do which of the following?

  A. Secure Internal Communication (SIC)

  B. Restart Daemons if they fail

  C. Transfer messages between Firewall processes

  D. Pulls application monitoring status

  Correct Answer: D

  Reference: https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=andsolutionid=sk97638

• Question 432:

  Which of the following is NOT an attribute of packer acceleration?

  A. Source address

  B. Protocol

  C. Destination port

  D. Application Awareness

  Correct Answer: D

  Reference: https://sc1.checkpoint.com/documents/R76/CP_R76_Firewall_WebAdmin/92711.htm

• Question 433:

  Which is a suitable command to check whether Drop Templates are activated or not?

  A. fw ctl get int activate_drop_templates

  B. fwaccel stat

  C. fwaccel stats

  D. fw ctl templates璬

  Correct Answer: B

  Reference: https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=andsolutionid=sk71200

• Question 434:

  Please choose correct command syntax to add an "emailserver1" host with IP address 10.50.23.90 using GAiA management CLI?

  A. host name myHost12 ip-address 10.50.23.90

  B. mgmt add host name ip-address 10.50.23.90

  C. add host name emailserver1 ip-address 10.50.23.90

  D. mgmt add host name emailserver1 ip-address 10.50.23.90

  Correct Answer: C

• Question 435:

  The CDT utility supports which of the following?

  A. Major version upgrades to R77.30

  B. Only Jumbo HFA's and hotfixes

  C. Only major version upgrades to R80.10

  D. All upgrades

  Correct Answer: D

  Reference: https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=andsolutionid=sk97443

• Question 436:

  Using ClusterXL, what statement is true about the Sticky Decision Function?

  A. Can only be changed for Load Sharing implementations

  B. All connections are processed and synchronized by the pivot

  C. Is configured using cpconfig

  D. Is only relevant when using SecureXL

  Correct Answer: A

• Question 437:

  What command would show the API server status?

  A. cpm status

  B. api restart

  C. api status

  D. show api status

  Correct Answer: C

• Question 438:

  How Capsule Connect and Capsule Workspace differ?

  A. Capsule Connect provides a Layer3 VPN. Capsule Workspace provides a Desktop with usable applications

  B. Capsule Workspace can provide access to any application

  C. Capsule Connect provides Business data isolation

  D. Capsule Connect does not require an installed application at client

  Correct Answer: A

• Question 439:

  Which of the following is a new R80.10 Gateway feature that had not been available in R77.X and older?

  A. The rule base can be built of layers, each containing a set of the security rules. Layers are inspected in the order in which they are defined, allowing control over the rule base flow and which security functionalities take precedence.

  B. Limits the upload and download throughput for streaming media in the company to 1 Gbps.

  C. Time object to a rule to make the rule active only during specified times.

  D. Sub Policies are sets of rules that can be created and attached to specific rules. If the rule is matched, inspection will continue in the sub policy attached to it rather than in the next rule.

  Correct Answer: D

  Reference: http://dl3.checkpoint.com/paid/1f/1f850d1640792cf885336cc6ae8b2743/CP_R80_ReleaseNotes.pdf?HashKey=1517092603_dd917544d92dccc060e5b25d28a46f79andxtn=.pdf

• Question 440:

  What are the three components for Check Point Capsule?

  A. Capsule Docs, Capsule Cloud, Capsule Connect

  B. Capsule Workspace, Capsule Cloud, Capsule Connect

  C. Capsule Workspace, Capsule Docs, Capsule Connect

  D. Capsule Workspace, Capsule Docs, Capsule Cloud

  Correct Answer: D

  Reference: https://www.checkpoint.com/products-solutions/mobile-security/check-point-capsule/