CheckPoint 156-315.80 Online Practice Questions and Exam Preparation

CheckPoint 156-315.80 Online Questions & Answers

• Question 141:

  In SmartEvent, which of the following is NOT an option to calculate the traffic direction?

  A. Incoming
  B. Internal
  C. External
  D. Outgoing
  D. Outgoing

• Question 142:

  By default how often updates are checked when the CPUSE Software Updates Policy is set to Automatic?

  A. Six times per day
  B. Seven times per day
  C. Every two hours
  D. Every three hours
  D. Every three hours

  ---

  Reference: https://sc1.checkpoint.com/documents/R77/CP_R77_Gaia_AdminWebAdminGuide/html_frameset.htm?topic=documents/R77/CP_R77_Gaia_AdminWebAdminGuide/112109

• Question 143:

  You have pushed policy to GW-3 and now cannot pass traffic through the gateway. As a last resort, to restore traffic flow, what command would you run to remove the latest policy from GW-3?

  A. fw unloadlocal
  B. fw unloadpolicy
  C. fwm unload local
  D. fwm unload policy
  A. fw unloadlocal

• Question 144:

  What is the best sync method in the ClusterXL deployment?

  A. Use 1 cluster + 1st sync
  B. Use 1 dedicated sync interface
  C. Use 3 clusters + 1st sync + 2nd sync + 3rd sync
  D. Use 2 clusters +1st sync + 2nd sync
  B. Use 1 dedicated sync interface

• Question 145:

  SandBlast agent extends 0 day prevention to what part of the network?

  A. Web Browsers and user devices
  B. DMZ server
  C. Cloud
  D. Email servers
  A. Web Browsers and user devices

• Question 146:

  In which VPN community is a satellite VPN gateway not allowed to create a VPN tunnel with another satellite VPN gateway?

  A. Pentagon
  B. Combined
  C. Meshed
  D. Star
  D. Star

  ---

  Reference: https://sc1.checkpoint.com/documents/R76/CP_R76_Firewall_WebAdmin/92709.htm

• Question 147:

  SSL Network Extender (SNX) is a thin SSL VPN on-demand client that is installed on the remote user's machine via the web browser. What are the two modes of SNX?

  A. Application and Client Service
  B. Network and Application
  C. Network and Layers
  D. Virtual Adapter and Mobile App
  B. Network and Application

  ---

  Reference: https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=andsolutionid=sk67820

• Question 148:

  Fill in the blank: The R80 feature ______ permits blocking specific IP addresses for a specified time period.

  A. Block Port Overflow
  B. Local Interface Spoofing
  C. Suspicious Activity Monitoring
  D. Adaptive Threat Prevention
  C. Suspicious Activity Monitoring

  ---

  Suspicious Activity Rules Solution Suspicious Activity Rules is a utility integrated into SmartView Monitor that is used to modify access privileges upon detection of any suspicious network activity (for example, several attempts to gain unauthorized access). The detection of suspicious activity is based on the creation of Suspicious Activity rules. Suspicious Activity rules are Firewall rules that enable the system administrator to instantly block suspicious connections that are not restricted by the currently enforced security policy. These rules, once set (usually with an expiration date), can be applied immediately without the need to perform an Install Policy operation.

  Reference: https://sc1.checkpoint.com/documents/R76/CP_R76_SmartViewMonitor_AdminGuide/17670.htm

• Question 149:

  When simulating a problem on ClusterXL cluster with cphaprob -d STOP -s problem -t 0 register, to initiate a failover on an active cluster member, what command allows you remove the problematic state?

  A. cphaprob -d STOP unregister
  B. cphaprob STOP unregister
  C. cphaprob unregister STOP
  D. cphaprob -d unregister STOP
  A. cphaprob -d STOP unregister

  ---

  esting a failover in a controlled manner using following command;

  # cphaprob -d STOP -s problem -t 0 register

  This will register a problem state on the cluster member this was entered on; If you then run;

  # cphaprob list

  this will show an entry named STOP.

  to remove this problematic register run following;

  # cphaprob -d STOP unregister

  Reference: https://fwknowledge.wordpress.com/2013/04/04/manual-failover-of-the-fw-cluster/

• Question 150:

  In Advanced Permanent Tunnel Configuration, to set the amount of time the tunnel test runs without a response before the peer host is declared `down', you would set the_________?

  A. life sign polling interval
  B. life sign timeout
  C. life_sign_polling_interval
  D. life_sign_timeout
  D. life_sign_timeout

  ---

  Reference: https://sc1.checkpoint.com/documents/R77/CP_R77_VPN_AdminGuide/html_frameset.htm?topic=documents/R77/CP_R77_VPN_AdminGuide/14018