CheckPoint 156-315.80 Online Practice Questions and Exam Preparation

CheckPoint 156-315.80 Online Questions & Answers

• Question 131:

  SandBlast Mobile identifies threats in mobile devices by using on-device, network, and cloud-based algorithms and has four dedicated components that constantly work together to protect mobile devices and their data. Which component is NOT part of the SandBlast Mobile solution?

  A. Management Dashboard
  B. Gateway
  C. Personal User Storage
  D. Behavior Risk Engine
  C. Personal User Storage

  ---

  Reference: https://community.checkpoint.com/docs/DOC-3072-sandblast-mobile-architecture-overview

• Question 132:

  Which GUI client is supported in R80?

  A. SmartProvisioning
  B. SmartView Tracker
  C. SmartView Monitor
  D. SmartLog
  C. SmartView Monitor

• Question 133:

  Which one of these features is NOT associated with the Check Point URL Filtering and Application Control Blade?

  A. Detects and blocks malware by correlating multiple detection engines before users are affected.
  B. Configure rules to limit the available network bandwidth for specified users or groups.
  C. Use UserCheck to help users understand that certain websites are against the company's security policy.
  D. Make rules to allow or block applications and Internet sites for individual applications, categories, and risk levels.
  A. Detects and blocks malware by correlating multiple detection engines before users are affected.

  ---

  Reference: https://sc1.checkpoint.com/documents/R76/CP_R76_AppControl_WebAdmin/60902.htm

• Question 134:

  What are the methods of SandBlast Threat Emulation deployment?

  A. Cloud, Appliance and Private
  B. Cloud, Appliance and Hybrid
  C. Cloud, Smart-1 and Hybrid
  D. Cloud, OpenServer and Vmware
  A. Cloud, Appliance and Private

• Question 135:

  Which tool is used to enable ClusterXL?

  A. SmartUpdate
  B. cpconfig
  C. SmartConsole
  D. sysconfig
  B. cpconfig

  ---

  Reference: https://sc1.checkpoint.com/documents/R77/CP_R77_ClusterXL_WebAdminGuide/html_frameset.htm?topic=documents/R77/CP_R77_ClusterXL_WebAdminGuide/161105

• Question 136:

  SmartEvent has several components that function together to track security threats. What is the function of the Correlation Unit as a component of this architecture?

  A. Analyzes each log entry as it arrives at the log server according to the Event Policy. When a threat pattern is identified, an event is forwarded to the SmartEvent Server.
  B. Correlates all the identified threats with the consolidation policy.
  C. Collects syslog data from third party devices and saves them to the database.
  D. Connects with the SmartEvent Client when generating threat reports.
  A. Analyzes each log entry as it arrives at the log server according to the Event Policy. When a threat pattern is identified, an event is forwarded to the SmartEvent Server.

• Question 137:

  In terms of Order Rule Enforcement, when a packet arrives at the gateway, the gateway checks it against the rules in the top Policy Layer, sequentially from top to bottom. Which of the following statements is correct?

  A. If the Action of the matching rule is Accept, the gateway will drop the packet.
  B. If the Action of the matching rule is Drop, the gateway continues to check rules in the next Policy Layer down.
  C. If the Action of the matching rule is Drop, the gateway stops matching against later rules in the Policy Rule Base and drops the packet.
  D. If the rule does not matched in the Network policy it will continue to other enabled policies
  C. If the Action of the matching rule is Drop, the gateway stops matching against later rules in the Policy Rule Base and drops the packet.

  ---

  Reference: https://sc1.checkpoint.com/documents/R80/CP_R80_SecMGMT/html_frameset.htm?topic=documents/R80/CP_R80_SecMGMT/126197

• Question 138:

  

  What can we infer about the recent changes made to the Rule Base?

  A. Rule 7 was created by the `admin' administrator in the current session
  B. 8 changes have been made by administrators since the last policy installation
  C. The rules 1, 5 and 6 cannot be edited by the `admin' administrator
  D. Rule 1 and object webserver are locked by another administrator
  D. Rule 1 and object webserver are locked by another administrator

  ---

  Reference: https://sc1.checkpoint.com/documents/R80/CP_R80_SecMGMT/html_frameset.htm?topic=documents/R80/CP_R80_SecMGMT/117948

• Question 139:

  After verifying that API Server is not running, how can you start the API Server?

  A. Run command "set api start" in CLISH mode
  B. Run command "mgmt_cli set api start" in Expert mode
  C. Run command "mgmt api start" in CLISH mode
  D. Run command "api start" in Expert mode
  D. Run command "api start" in Expert mode

• Question 140:

  What is the benefit of Manual NAT over Automatic NAT?

  A. If you create a new Security Policy, the Manual NAT rules will be transferred to this new policy.
  B. There is no benefit since Automatic NAT has in any case higher priority over Manual NAT
  C. You have the full control about the priority of the NAT rules
  D. On IPSO and GAIA Gateways, it is handled in a stateful manner
  C. You have the full control about the priority of the NAT rules