CheckPoint 156-315.80 Online Practice Questions and Exam Preparation

CheckPoint 156-315.80 Online Questions & Answers

• Question 1:

  Using Threat Emulation technologies, what is the best way to block .exe and .bat file types?

  A. enable DLP and select.exe and .bat file type
  B. enable .exe and .bat protection in IPS Policy
  C. create FW rule for particular protocol
  D. tecli advanced attributes set prohibited_file_types exe.bat
  A. enable DLP and select.exe and .bat file type

• Question 2:

  Please choose correct command to add an "emailserver1" host with IP address 10.50.23.90 using GAiA management CLI?

  A. host name myHost12 ip-address 10.50.23.90
  B. mgmt: add host name ip-address 10.50.23.90
  C. add host name emailserver1 ip-address 10.50.23.90
  D. mgmt: add host name emailserver1 ip-address 10.50.23.90
  D. mgmt: add host name emailserver1 ip-address 10.50.23.90

• Question 3:

  What is mandatory for ClusterXL to work properly?

  A. The number of cores must be the same on every participating cluster node
  B. The Magic MAC number must be unique per cluster node
  C. The Sync interface must not have an IP address configured
  D. If you have "Non-monitored Private" interfaces, the number of those interfaces must be the same on all cluster members
  B. The Magic MAC number must be unique per cluster node

• Question 4:

  Which web services protocol is used to communicate to the Check Point R80 Identity Awareness Web API?

  A. SOAP
  B. REST
  C. XLANG
  D. XML-RPC
  B. REST

  ---

  explanation:

  The Identity Web API uses the REST protocol over SSL. The requests and responses are HTTP and in JSON format.

  Reference: https://sc1.checkpoint.com/documents/R80.10/WebAdminGuides/EN/CP_R80.10_IdentityAwareness_AdminGuide/html_frameset.htm?topic=documents/R80.10/WebAdminGuides/EN/ CP_R80.10_IdentityAwareness_AdminGuide/148699

• Question 5:

  An administrator would like to troubleshoot why templating is not working for some traffic. How can he determine at which rule templating is disabled?

  A. He can use the fw accel stat command on the gateway.
  B. He can use the fw accel statistics command on the gateway.
  C. He can use the fwaccel stat command on the Security Management Server.
  D. He can use the fwaccel stat command on the gateway
  D. He can use the fwaccel stat command on the gateway

• Question 6:

  Automation and Orchestration differ in that:

  A. Automation relates to codifying tasks, whereas orchestration relates to codifying processes.
  B. Automation involves the process of coordinating an exchange of information through web service interactions such as XML and JSON, but orchestration does not involve processes.
  C. Orchestration is concerned with executing a single task, whereas automation takes a series of tasks and puts them all together into a process workflow.
  D. Orchestration relates to codifying tasks, whereas automation relates to codifying processes.
  A. Automation relates to codifying tasks, whereas orchestration relates to codifying processes.

• Question 7:

  What is the most recommended way to install patches and hotfixes?

  A. CPUSE Check Point Update Service Engine
  B. rpm -Uv
  C. Software Update Service
  D. UnixinstallScript
  A. CPUSE Check Point Update Service Engine

• Question 8:

  SmartEvent does NOT use which of the following procedures to identify events:

  A. Matching a log against each event definition
  B. Create an event candidate
  C. Matching a log against local exclusions
  D. Matching a log against global exclusions
  C. Matching a log against local exclusions

  ---

  explanation:

  Events are detected by the SmartEvent Correlation Unit. The Correlation Unit task is to scan logs for criteria that match an Event Definition. SmartEvent uses these procedures to identify events:

  1.

  Matching a Log Against Global Exclusions

  2.

  Matching a Log Against Each Event Definition

  3.

  Creating an Event Candidate

  4.

  When a Candidate Becomes an Event

  Reference: https://sc1.checkpoint.com/documents/R76/CP_R76_SmartEvent_AdminGuide/17401.htm

• Question 9:

  What is a best practice before starting to troubleshoot using the "fw monitor" tool?

  A. Run the command: fw monitor debug on
  B. Clear the connections table
  C. Disable CoreXL
  D. Disable SecureXL
  D. Disable SecureXL

• Question 10:

  What are the main stages of a policy installations?

  A. Verification and Compilation, Transfer and Commit
  B. Verification and Compilation, Transfer and Installation
  C. Verification, Commit, Installation
  D. Verification, Compilation and Transfer, Installation
  B. Verification and Compilation, Transfer and Installation