CheckPoint 156-315.80 Online Practice Questions and Exam Preparation

CheckPoint 156-315.80 Online Questions & Answers

• Question 1:

  SmartEvent does NOT use which of the following procedures to identify events:

  A. Matching a log against each event definition
  B. Create an event candidate
  C. Matching a log against local exclusions
  D. Matching a log against global exclusions
  C. Matching a log against local exclusions

  ---

  Events are detected by the SmartEvent Correlation Unit. The Correlation Unit task is to scan logs for criteria that match an Event Definition. SmartEvent uses these procedures to identify events:

  1.

  Matching a Log Against Global Exclusions

  2.

  Matching a Log Against Each Event Definition

  3.

  Creating an Event Candidate

  4.

  When a Candidate Becomes an Event

  Reference: https://sc1.checkpoint.com/documents/R76/CP_R76_SmartEvent_AdminGuide/17401.htm

• Question 2:

  What is the SOLR database for?

  A. Used for full text search and enables powerful matching capabilities
  B. Writes data to the database and full text search
  C. Serves GUI responsible to transfer request to the DLE server
  D. Enables powerful matching capabilities and writes data to the database
  A. Used for full text search and enables powerful matching capabilities

• Question 3:

  What are the attributes that SecureXL will check after the connection is allowed by Security Policy?

  A. Source address, Destination address, Source port, Destination port, Protocol
  B. Source MAC address, Destination MAC address, Source port, Destination port, Protocol
  C. Source address, Destination address, Source port, Destination port
  D. Source address, Destination address, Destination port, Protocol
  A. Source address, Destination address, Source port, Destination port, Protocol

• Question 4:

  Advanced Security Checkups can be easily conducted within:

  A. Reports
  B. Advanced
  C. Checkups
  D. Views
  E. Summary
  A. Reports

• Question 5:

  John detected high load on sync interface. Which is most recommended solution?

  A. For short connections like http service - delay sync for 2 seconds
  B. Add a second interface to handle sync traffic
  C. For short connections like http service - do not sync
  D. For short connections like icmp service - delay sync for 2 seconds
  A. For short connections like http service - delay sync for 2 seconds

• Question 6:

  What is the default size of NAT table fwx_alloc?

  A. 20000
  B. 35000
  C. 25000
  D. 10000
  C. 25000

  ---

  Reference: https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=andsolutionid=sk32224

• Question 7:

  What is the name of the secure application for Mail/Calendar for mobile devices?

  A. Capsule Workspace
  B. Capsule Mail
  C. Capsule VPN
  D. Secure Workspace
  A. Capsule Workspace

  ---

  Reference: https://www.checkpoint.com/products/mobile-secure-workspace/

• Question 8:

  Fill in the blank: A ________ VPN deployment is used to provide remote users with secure access to internal corporate resources by authenticating the user through an internet browser.

  A. Clientless remote access
  B. Clientless direct access
  C. Client-based remote access
  D. Direct access
  A. Clientless remote access

  ---

  Reference: https://sc1.checkpoint.com/documents/R80/CP_R80BC_Firewall/html_frameset.htm?topic=documents/R80/CP_R80BC_Firewall/92704

• Question 9:

  What is the recommended configuration when the customer requires SmartLog indexing for 14 days and SmartEvent to keep events for 180 days?

  A. Use Multi-Domain Management Server.
  B. Choose different setting for log storage and SmartEvent db
  C. Install Management and SmartEvent on different machines.
  D. it is not possible.
  B. Choose different setting for log storage and SmartEvent db

• Question 10:

  If SecureXL is disabled which path is used to process traffic?

  A. Passive path
  B. Medium path
  C. Firewall path
  D. Accelerated path
  C. Firewall path