CheckPoint 156-315.80 Online Practice Questions and Exam Preparation

CheckPoint 156-315.80 Online Questions & Answers

• Question 111:

  Fill in the blank: The R80 utility fw monitor is used to troubleshoot ________.

  A. User data base corruption
  B. LDAP conflicts
  C. Traffic issues
  D. Phase two key negotiations
  C. Traffic issues

  ---

  Check Point's FW Monitor is a powerful built-in tool for capturing network traffic at the packet level. The FW Monitor utility captures network packets at multiple capture points along the FireWall inspection chains. These captured packets can be inspected later using the WireShark.

  Reference: https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=andsolutionid=sk30583

• Question 112:

  Which of the following is NOT a valid type SecureXL template?

  A. Accept Template
  B. Deny template
  C. Drop Template
  D. NAT Template
  B. Deny template

• Question 113:

  Using ClusterXL, what statement is true about the Sticky Decision Function?

  A. Can only be changed for Load Sharing implementations
  B. All connections are processed and synchronized by the pivot
  C. Is configured using cpconfig
  D. Is only relevant when using SecureXL
  A. Can only be changed for Load Sharing implementations

• Question 114:

  Which member of a high-availability cluster should be upgraded first in a Zero downtime upgrade?

  A. The Standby Member
  B. The Active Member
  C. The Primary Member
  D. The Secondary Member
  A. The Standby Member

  ---

  During the upgrade procedure, standby members are upgraded first. When upgrade on the final active member begins, the active member fails over to the standby member (or members, depending on the deployment: High Availability or Load Sharing). At this point, since connection tables between cluster members are not synced, all open connections are lost. Only a full connectivity upgrade (between minor versions) preserves open connections.

  Reference: https://sc1.checkpoint.com/documents/R76/CP_R76_Installation_and_Upgrade_Guide-webAdmin/16454.htm

• Question 115:

  You are working with multiple Security Gateways enforcing an extensive number of rules. To simplify security administration, which action would you choose?

  A. Eliminate all possible contradictory rules such as the Stealth or Cleanup rules.
  B. Create a separate Security Policy package for each remote Security Gateway.
  C. Create network objects that restricts all applicable rules to only certain networks.
  D. Run separate SmartConsole instances to login and configure each Security Gateway directly.
  B. Create a separate Security Policy package for each remote Security Gateway.

• Question 116:

  What are the available options for downloading Check Point hotfixes in Gaia WebUI (CPUSE)?

  A. Manually, Scheduled, Automatic
  B. Manually, Automatic, Disabled
  C. Manually, Scheduled, Disabled
  D. Manually, Scheduled, Enabled
  A. Manually, Scheduled, Automatic

  ---

  Reference: https://sc1.checkpoint.com/documents/R77/CP_R77_Gaia_AdminWebAdminGuide/html_frameset.htm?topic=documents/R77/CP_R77_Gaia_AdminWebAdminGuide/112109

• Question 117:

  Which software blade does NOT accompany the Threat Prevention policy?

  A. Anti-virus
  B. IPS
  C. Threat Emulation
  D. Application Control and URL Filtering
  D. Application Control and URL Filtering

• Question 118:

  During the Check Point Stateful Inspection Process, for packets that do not pass Firewall Kernel Inspection and are rejected by the rule definition, packets are:

  A. Dropped without sending a negative acknowledgment
  B. Dropped without logs and without sending a negative acknowledgment
  C. Dropped with negative acknowledgment
  D. Dropped with logs and without sending a negative acknowledgment
  D. Dropped with logs and without sending a negative acknowledgment

• Question 119:

  Office mode means that:

  A. SecurID client assigns a routable MAC address. After the user authenticates for a tunnel, the VPN gateway assigns a routable IP address to the remote client.
  B. Users authenticate with an Internet browser and use secure HTTPS connection.
  C. Local ISP (Internet service Provider) assigns a non-routable IP address to the remote user.
  D. Allows a security gateway to assign a remote client an IP address. After the user authenticates for a tunnel, the VPN gateway assigns a routable IP address to the remote client.
  D. Allows a security gateway to assign a remote client an IP address. After the user authenticates for a tunnel, the VPN gateway assigns a routable IP address to the remote client.

  ---

  Reference: https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=andsolutionid=sk30545

• Question 120:

  In SmartEvent, what are the different types of automatic reactions that the administrator can configure?

  A. Mail, Block Source, Block Event Activity, External Script, SNMP Trap
  B. Mail, Block Source, Block Destination, Block Services, SNMP Trap
  C. Mail, Block Source, Block Destination, External Script, SNMP Trap
  D. Mail, Block Source, Block Event Activity, Packet Capture, SNMP Trap
  A. Mail, Block Source, Block Event Activity, External Script, SNMP Trap

  ---

  Reference: https://sc1.checkpoint.com/documents/R76/CP_R76_SmartEvent_AdminGuide/17401.htm