CheckPoint 156-315.80 Online Practice Questions and Exam Preparation

CheckPoint 156-315.80 Online Questions & Answers

• Question 281:

  You noticed that CPU cores on the Security Gateway are usually 100% utilized and many packets were dropped. You don't have a budget to perform a hardware upgrade at this time. To optimize drops you decide to use Priority Queues and fully enable Dynamic Dispatcher. How can you enable them?

  A. fw ctl multik dynamic_dispatching on
  B. fw ctl multik dynamic_dispatching set_mode 9
  C. fw ctl multik set_mode 9
  D. fw ctl multik pq enable
  C. fw ctl multik set_mode 9

  ---

  Reference: https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=andsolutionid=sk105261

• Question 282:

  What is the SandBlast Agent designed to do?

  A. Performs OS-level sandboxing for SandBlast Cloud architecture
  B. Ensure the Check Point SandBlast services is running on the end user's system
  C. If malware enters an end user's system, the SandBlast Agent prevents the malware from spreading with the network
  D. Clean up email sent with malicious attachments
  C. If malware enters an end user's system, the SandBlast Agent prevents the malware from spreading with the network

  ---

  Reference: https://www.checkpoint.com/downloads/product-related/datasheets/ds-sandblast-agent.pdf

• Question 283:

  Security Checkup Summary can be easily conducted within:

  A. Summary
  B. Views
  C. Reports
  D. Checkups
  C. Reports

• Question 284:

  In the Check Point Firewall Kernel Module, each Kernel is associated with a key, which specifies the type of traffic applicable to the chain module. For Stateful Mode configuration, chain modules marked with __________________ will not apply.

  A. ffff
  B. 1
  C. 3
  D. 2
  D. 2

  ---

  Reference: http://dkcheckpoint.blogspot.com/2016/07/chapter-2-chain-module.html

• Question 285:

  What is true about VRRP implementations?

  A. VRRP membership is enabled in cpconfig
  B. VRRP can be used together with ClusterXL, but with degraded performance
  C. You cannot have a standalone deployment
  D. You cannot have different VRIDs in the same physical network
  C. You cannot have a standalone deployment

  ---

  Reference: https://sc1.checkpoint.com/documents/R76/CP_R76_Gaia_WebAdmin/87911.htm

• Question 286:

  In what way are SSL VPN and IPSec VPN different?

  A. SSL VPN is using HTTPS in addition to IKE, whereas IPSec VPN is clientless
  B. SSL VPN adds an extra VPN header to the packet, IPSec VPN does not
  C. IPSec VPN does not support two factor authentication, SSL VPN does support this
  D. IPSec VPN uses an additional virtual adapter; SSL VPN uses the client network adapter only.
  D. IPSec VPN uses an additional virtual adapter; SSL VPN uses the client network adapter only.

• Question 287:

  While using the Gaia CLI. what is the correct command to publish changes to the management server?

  A. json publish
  B. mgmt publish
  C. mgmt_cli commit
  D. commit
  B. mgmt publish

• Question 288:

  Which of the following is NOT a VPN routing option available in a star community?

  A. To satellites through center only.
  B. To center, or through the center to other satellites, to Internet and other VPN targets.
  C. To center and to other satellites through center.
  D. To center only.
  A. To satellites through center only.
  D. To center only.

  ---

  Reference: https://sc1.checkpoint.com/documents/R80/CP_R80BC_VPN/html_frameset.htm

• Question 289:

  What is required for a certificate-based VPN tunnel between two gateways with separate management systems?

  A. Mutually Trusted Certificate Authorities
  B. Shared User Certificates
  C. Shared Secret Passwords
  D. Unique Passwords
  A. Mutually Trusted Certificate Authorities

  ---

  Reference: https://community.checkpoint.com/t5/Security-Gateways/HowTo-Set-Up-Certificate-Based-VPNs-with-Check-Point-Appliances/td-p/73299

• Question 290:

  Which firewall daemon is responsible for the FW CLI commands?

  A. fwd
  B. fwm
  C. cpm
  D. cpd
  A. fwd