CheckPoint 156-315.80 Online Practice Questions and Exam Preparation

CheckPoint 156-315.80 Online Questions & Answers

• Question 271:

  Which of the following is NOT a type of Check Point API available in R80.10?

  A. Identity Awareness Web Services
  B. OPSEC SDK
  C. Mobile Access
  D. Management
  C. Mobile Access

• Question 272:

  Which of the following will NOT affect acceleration?

  A. Connections destined to or originated from the Security gateway
  B. A 5-tuple match
  C. Multicast packets
  D. Connections that have a Handler (ICMP, FTP, H.323, etc.)
  B. A 5-tuple match

• Question 273:

  Tom has been tasked to install Check Point R80 in a distributed deployment. Before Tom installs the systems this way, how many machines will he need if he does NOT include a SmartConsole machine in his calculations?

  A. One machine, but it needs to be installed using SecurePlatform for compatibility purposes.
  B. One machine
  C. Two machines
  D. Three machines
  C. Two machines

  ---

  One for Security Management Server and the other one for the Security Gateway.

• Question 274:

  Capsule Connect and Capsule Workspace both offer secured connection for remote users who are using their mobile devices. However, there are differences between the two.

  Which of the following statements correctly identify each product's capabilities?

  A. Workspace supports ios operating system, Android, and WP8, whereas Connect supports ios operating system and Android only
  B. For compliance/host checking, Workspace offers the MDM cooperative enforcement, whereas Connect offers both jailbreak/root detection and MDM cooperative enforcement.
  C. For credential protection, Connect uses One-time Password login support and has no SSO support, whereas Workspace offers both One-Time Password login support as well as SSO for specific applications.
  D. Workspace can support any application, whereas Connect has a limited number of application types which it will support.
  C. For credential protection, Connect uses One-time Password login support and has no SSO support, whereas Workspace offers both One-Time Password login support as well as SSO for specific applications.

• Question 275:

  The CPD daemon is a Firewall Kernel Process that does NOT do which of the following?

  A. Secure Internal Communication (SIC)
  B. Restart Daemons if they fail
  C. Transfers messages between Firewall processes
  D. Pulls application monitoring status
  D. Pulls application monitoring status

  ---

  Reference: https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=andsolutionid=sk97638

• Question 276:

  You find one of your cluster gateways showing "Down" when you run the "cphaprob stat" command. You then run the "clusterXL_admin up" on the down member but unfortunately the member continues to show down. What command do you run to determine the cause?

  A. cphaprob -f register
  B. cphaprob -d -s report
  C. cpstat -f all
  D. cphaprob -a list
  D. cphaprob -a list

• Question 277:

  On what port does the CPM process run?

  A. TCP 857
  B. TCP 18192
  C. TCP 900
  D. TCP 19009
  D. TCP 19009

  ---

  Reference: https://sc1.checkpoint.com/documents/R80/CP_R80_MultiDomainSecurity/html_frameset.htm?topic=documents/R80/CP_R80_MultiDomainSecurity/15420

• Question 278:

  True or False: In R80, more than one administrator can login to the Security Management Server with write permission at the same time.

  A. False, this feature has to be enabled in the Global Properties.
  B. True, every administrator works in a session that is independent of the other administrators.
  C. True, every administrator works on a different database that is independent of the other administrators.
  D. False, only one administrator can login with write permission.
  B. True, every administrator works in a session that is independent of the other administrators.

• Question 279:

  What happen when IPS profile is set in Detect Only Mode for troubleshooting?

  A. It will generate Geo-Protection traffic
  B. Automatically uploads debugging logs to Check Point Support Center
  C. It will not block malicious traffic
  D. Bypass licenses requirement for Geo-Protection control
  C. It will not block malicious traffic

  ---

  It is recommended to enable Detect-Only for Troubleshooting on the profile during the initial installation of IPS. This option overrides any protections that are set to Prevent so that they will not block any traffic. During this time you can analyze the alerts that IPS generates to see how IPS will handle network traffic, while avoiding any impact on the flow of traffic.

  Reference: https://sc1.checkpoint.com/documents/R76/CP_R76_IPS_AdminGuide/12750.htm

• Question 280:

  If there are two administration logged in at the same time to the SmartConsole, and there are objects locked for editing, what must be done to make them available or other administrators? (Choose the BEST answer.)

  A. Publish or discard the session.
  B. Revert the session.
  C. Save and install the Policy.
  D. Delete older versions of database.
  A. Publish or discard the session.

  ---

  Reference: https://sc1.checkpoint.com/documents/R80/CP_R80_SecMGMT/html_frameset.htm?topic=documents/R80/CP_R80_SecMGMT/126197