CheckPoint Checkpoint Certifications 156-315.80 Questions & Answers

• Question 121:

  Sticky Decision Function (SDF) is required to prevent which of the following? Assume you set up an Active-Active cluster.

  A. Symmetric routing

  B. Failovers

  C. Asymmetric routing

  D. Anti-Spoofing

  Correct Answer: C

• Question 122:

  CPM process stores objects, policies, users, administrators, licenses and management data in a database. The database is:

  A. MySQL

  B. Postgres SQL

  C. MarisDB

  D. SOLR

  Correct Answer: B

  Reference: https://sc1.checkpoint.com/documents/R80/CP_R80_MultiDomainSecurity/html_frameset.htm? topic=documents/R80/CP_R80_MultiDomainSecurity/15420

• Question 123:

  If you needed the Multicast MAC address of a cluster, what command would you run?

  A. cphaprob -a if

  B. cphaconf ccp multicast

  C. cphaconf debug data

  D. cphaprob igmp

  Correct Answer: D

• Question 124:

  Which is NOT an example of a Check Point API?

  A. Gateway API

  B. Management API

  C. OPSC SDK

  D. Threat Prevention API

  Correct Answer: A

  Reference: https://sc1.checkpoint.com/documents/R80/APIs/#introduction%20

• Question 125:

  What are the three components for Check Point Capsule?

  A. Capsule Docs, Capsule Cloud, Capsule Connect

  B. Capsule Workspace, Capsule Cloud, Capsule Connect

  C. Capsule Workspace, Capsule Docs, Capsule Connect

  D. Capsule Workspace, Capsule Docs, Capsule Cloud

  Correct Answer: D

  Reference: https://www.checkpoint.com/products-solutions/mobile-security/check-point-capsule/

• Question 126:

  Which of the following Check Point processes within the Security Management Server is responsible for the receiving of log records from Security Gateway?

  A. logd

  B. fwd

  C. fwm

  D. cpd

  Correct Answer: B

  Reference: https://supportcenter.checkpoint.com/supportcenter/portal? eventSubmit_doGoviewsolutiondetails=andsolutionid=sk97638

• Question 127:

  You want to gather and analyze threats to your mobile device. It has to be a lightweight app. Which application would you use?

  A. SmartEvent Client Info

  B. SecuRemote

  C. Check Point Protect D. Check Point Capsule Cloud

  Correct Answer: C

  Reference: https://www.insight.com/content/dam/insight-web/en_US/pdfs/check-point/mobile-threatprevention-behavioral-risk-analysis.pdf

• Question 128:

  Which view is NOT a valid CPVIEW view?

  A. IDA

  B. RAD

  C. PDP

  D. VPN

  Correct Answer: C

• Question 129:

  Which of the following is a new R80.10 Gateway feature that had not been available in R77.X and older?

  A. The rule base can be built of layers, each containing a set of the security rules. Layers are inspected in the order in which they are defined, allowing control over the rule base flow and which security functionalities take precedence.

  B. Limits the upload and download throughput for streaming media in the company to 1 Gbps.

  C. Time object to a rule to make the rule active only during specified times.

  D. Sub Policies ae sets of rules that can be created and attached to specific rules. If the rule is matched, inspection will continue in the sub policy attached to it rather than in the next rule.

  Correct Answer: D

  Reference: http://dl3.checkpoint.com/paid/1f/1f850d1640792cf885336cc6ae8b2743/ CP_R80_ReleaseNotes.pdf?HashKey=1517092603_dd917544d92dccc060e5b25d28a46f79andxtn=.pdf

• Question 130:

  What is true about VRRP implementations?

  A. VRRP membership is enabled in cpconfig

  B. VRRP can be used together with ClusterXL, but with degraded performance

  C. You cannot have a standalone deployment

  D. You cannot have different VRIDs in the same physical network

  Correct Answer: C

  Reference: https://sc1.checkpoint.com/documents/R76/CP_R76_Gaia_WebAdmin/87911.htm