CheckPoint Checkpoint Certifications 156-315.80 Questions & Answers

• Question 271:

  What is the command to show SecureXL status?

  A. fwaccel status

  B. fwaccel stats -m

  C. fwaccel -s

  D. fwaccel stat

  Correct Answer: D

  To check overall SecureXL status: [Expert@HostName]# fwaccel stat

  Reference: https://supportcenter.checkpoint.com/supportcenter/portal? eventSubmit_doGoviewsolutiondetails=andsolutionid=sk41397

• Question 272:

  The SmartEvent R80 Web application for real-time event monitoring is called:

  A. SmartView Monitor

  B. SmartEventWeb

  C. There is no Web application for SmartEvent

  D. SmartView

  Correct Answer: B

• Question 273:

  What will SmartEvent automatically define as events?

  A. Firewall

  B. VPN

  C. IPS

  D. HTTPS

  Correct Answer: C

  Reference: https://sc1.checkpoint.com/documents/R80/CP_R80_LoggingAndMonitoring/ html_frameset.htm?topic=documents/R80/CP_R80_LoggingAndMonitoring/131915

• Question 274:

  With MTA (Mail Transfer Agent) enabled the gateways manages SMTP traffic and holds external email with potentially malicious attachments. What is required in order to enable MTA (Mail Transfer Agent) functionality in the Security Gateway?

  A. Threat Cloud Intelligence

  B. Threat Prevention Software Blade Package

  C. Endpoint Total Protection

  D. Traffic on port 25

  Correct Answer: B

• Question 275:

  What is mandatory for ClusterXL to work properly?

  A. The number of cores must be the same on every participating cluster node

  B. The Magic MAC number must be unique per cluster node

  C. The Sync interface must not have an IP address configured

  D. If you have "Non-monitored Private" interfaces, the number of those interfaces must be the same on all cluster members

  Correct Answer: B

• Question 276:

  Please choose correct command to add an "emailserver1" host with IP address 10.50.23.90 using GAiA management CLI?

  A. host name myHost12 ip-address 10.50.23.90

  B. mgmt: add host name ip-address 10.50.23.90

  C. add host name emailserver1 ip-address 10.50.23.90

  D. mgmt: add host name emailserver1 ip-address 10.50.23.90

  Correct Answer: D

• Question 277:

  Using Threat Emulation technologies, what is the best way to block .exe and .bat file types?

  A. enable DLP and select.exe and .bat file type

  B. enable .exe and .bat protection in IPS Policy

  C. create FW rule for particular protocol

  D. tecli advanced attributes set prohibited_file_types exe.bat

  Correct Answer: A

• Question 278:

  What is the recommended number of physical network interfaces in a Mobile Access cluster deployment?

  A. 4 Interfaces - an interface leading to the organization, a second interface leading to the internet, a third interface for synchronization, a fourth interface leading to the Security Management Server.

  B. 3 Interfaces - an interface leading to the organization, a second interface leading to the Internet, a third interface for synchronization.

  C. 1 Interface - an interface leading to the organization and the Internet, and configure for synchronization.

  D. 2 Interfaces - a data interface leading to the organization and the Internet, a second interface for synchronization.

  Correct Answer: B

  Reference: https://sc1.checkpoint.com/documents/R76/CP_R76_Mobile_Access_WebAdmin/41723.htm

• Question 279:

  Automation and Orchestration differ in that:

  A. Automation relates to codifying tasks, whereas orchestration relates to codifying processes.

  B. Automation involves the process of coordinating an exchange of information through web service interactions such as XML and JSON, but orchestration does not involve processes.

  C. Orchestration is concerned with executing a single task, whereas automation takes a series of tasks and puts them all together into a process workflow.

  D. Orchestration relates to codifying tasks, whereas automation relates to codifying processes.

  Correct Answer: A

• Question 280:

  An administrator would like to troubleshoot why templating is not working for some traffic. How can he determine at which rule templating is disabled?

  A. He can use the fw accel stat command on the gateway.

  B. He can use the fw accel statistics command on the gateway.

  C. He can use the fwaccel stat command on the Security Management Server.

  D. He can use the fwaccel stat command on the gateway

  Correct Answer: D