CheckPoint 156-315.80 Online Practice Questions and Exam Preparation

CheckPoint 156-315.80 Online Questions & Answers

• Question 231:

  What is the best method to upgrade a Security Management Server to R80.x when it is not connected to the Internet?

  A. CPUSE offline upgrade only
  B. Advanced upgrade or CPUSE offline upgrade C. Advanced Upgrade only
  D. SmartUpdate offline upgrade
  B. Advanced upgrade or CPUSE offline upgrade C. Advanced Upgrade only

• Question 232:

  How does the Anti-Virus feature of the Threat Prevention policy block traffic from infected websites?

  A. By dropping traffic from websites identified through ThreatCloud Verification and URL Caching
  B. By dropping traffic that is not proven to be from clean websites in the URL Filtering blade
  C. By allowing traffic from websites that are known to run Antivirus Software on servers regularly
  D. By matching logs against ThreatCloud information about the reputation of the website
  D. By matching logs against ThreatCloud information about the reputation of the website

• Question 233:

  What is the valid range for VRID value in VRRP configuration?

  A. 1 - 254
  B. 1 - 255
  C. 0 - 254
  D. 0 - 255
  B. 1 - 255

  ---

  Virtual Router ID - Enter a unique ID number for this virtual router. The range of valid values is 1 to 255. Reference: https://sc1.checkpoint.com/documents/R76/CP_R76_Gaia_WebAdmin/87911.htm

• Question 234:

  Fill in the blank. Once a certificate is revoked from the Security Gateway by the Security Management Server, the certificate information is ________ .

  A. Sent to the Internal Certificate Authority.
  B. Sent to the Security Administrator.
  C. Stored on the Security Management Server.
  D. Stored on the Certificate Revocation List.
  D. Stored on the Certificate Revocation List.

• Question 235:

  IF the first packet of an UDP session is rejected by a rule definition from within a security policy (not including the clean up rule), what message is sent back through the kernel?

  A. Nothing
  B. TCP FIN
  C. TCP RST
  D. ICMP unreachable
  C. TCP RST

• Question 236:

  Which options are given on features, when editing a Role on Gaia Platform?

  A. Read/Write, Read Only
  B. Read/Write, Read Only, None
  C. Read/Write, None
  D. Read Only, None
  B. Read/Write, Read Only, None

  ---

  Reference: https://sc1.checkpoint.com/documents/R77/CP_R77_Gaia_AdminWebAdminGuide/html_frameset.htm?topic=documents/R77/CP_R77_Gaia_AdminWebAdminGuide/75930

• Question 237:

  What is the most recommended way to install patches and hotfixes?

  A. CPUSE Check Point Update Service Engine
  B. rpm -Uv
  C. Software Update Service
  D. UnixinstallScript
  A. CPUSE Check Point Update Service Engine

• Question 238:

  Which command is used to display status information for various components?

  A. show all systems
  B. show system messages
  C. sysmess all
  D. show sysenv all
  D. show sysenv all

  ---

  Reference: https://sc1.checkpoint.com/documents/R77/CP_R77_Gaia_AdminWebAdminGuide/html_frameset.htm?topic=documents/R77/CP_R77_Gaia_AdminWebAdminGuide/120709

• Question 239:

  Which User-mode process is responsible for the FW CLI commands?

  A. fwd
  B. fwm
  C. cpm
  D. cpd
  B. fwm

  ---

  fwm -- Firewall Management (fwm) is on all management products, including Multi-Domain Security Management, and on products that require direct GUI access, such as SmartEvent. The fwm process is used mainly for backward compatibility of gateways. It provides GUI client communication, database manipulation, policy compilation, and Management High Availability synchronization.

• Question 240:

  When users connect to the Mobile Access portal they are unable to open File Shares.

  Which log file would you want to examine?

  A. cvpnd.elg
  B. httpd.elg
  C. vpnd.elg
  D. fw.elg
  A. cvpnd.elg