CheckPoint Checkpoint Certifications 156-315.80 Questions & Answers

• Question 291:

  As an administrator, you may be required to add the company logo to reports. To do this, you would save the logo as a PNG file with the name `cover-company-logo.png' and then copy that image file to which

  directory on the SmartEvent server?

  A. SFWDIR/smartevent/conf

  B. $RTDIR/smartevent/conf

  C. $RTDIR/smartview/conf

  D. $FWDIR/smartview/conf

  Correct Answer: C

  Reference: https://sc1.checkpoint.com/documents/R80.10/WebAdminGuides/EN/ CP_R80.10_LoggingAndMonitoring_AdminGuide/html_frameset.htm?topic=documents/R80.10/ WebAdminGuides/EN/ CP_R80.10_LoggingAndMonitoring_AdminGuide/188029

• Question 292:

  Which one of the following is true about Threat Extraction?

  A. Always delivers a file to user

  B. Works on all MS Office, Executables, and PDF files

  C. Can take up to 3 minutes to complete

  D. Delivers file only if no threats found

  Correct Answer: A

• Question 293:

  Which one of the following is true about Threat Emulation?

  A. Takes less than a second to complete

  B. Works on MS Office and PDF files only

  C. Always delivers a file

  D. Takes minutes to complete (less than 3 minutes)

  Correct Answer: D

• Question 294:

  What is considered Hybrid Emulation Mode?

  A. Manual configuration of file types on emulation location.

  B. Load sharing of emulation between an on premise appliance and the cloud.

  C. Load sharing between OS behavior and CPU Level emulation.

  D. High availability between the local SandBlast appliance and the cloud.

  Correct Answer: B

• Question 295:

  When gathering information about a gateway using CPINFO, what information is included or excluded when using the "-x" parameter?

  A. Includes the registry

  B. Gets information about the specified Virtual System

  C. Does not resolve network addresses

  D. Output excludes connection table

  Correct Answer: B

  Reference: https://www.networksecurityplus.net/2015/02/check-point-how-to-collect-cpinfo-cli.html

• Question 296:

  What component of R80 Management is used for indexing?

  A. DBSync

  B. API Server

  C. fwm

  D. SOLR

  Correct Answer: D

  Reference: https://www.checkpoint.com/downloads/product-related/r80.10-mgmt-architecture-overview.pdf

• Question 297:

  After making modifications to the $CVPNDIR/conf/cvpnd.C file, how would you restart the daemon?

  A. cvpnd_restart

  B. cvpnd_restart

  C. cvpnd restart

  D. cvpnrestart

  Correct Answer: D

• Question 298:

  SandBlast has several functional components that work together to ensure that attacks are prevented in real-time. Which the following is NOT part of the SandBlast component?

  A. Threat Emulation

  B. Mobile Access

  C. Mail Transfer Agent

  D. Threat Cloud

  Correct Answer: C

• Question 299:

  With Mobile Access enabled, administrators select the web-based and native applications that can be accessed by remote users and define the actions that users can perform the applications. Mobile Access encrypts all traffic using:

  A. HTTPS for web-based applications and 3DES or RC4 algorithm for native applications. For end users to access the native applications, they need to install the SSL Network Extender.

  B. HTTPS for web-based applications and AES or RSA algorithm for native applications. For end users to access the native application, they need to install the SSL Network Extender.

  C. HTTPS for web-based applications and 3DES or RC4 algorithm for native applications. For end users to access the native applications, no additional software is required.

  D. HTTPS for web-based applications and AES or RSA algorithm for native applications. For end users to access the native application, no additional software is required.

  Correct Answer: A

  Reference: https://sc1.checkpoint.com/documents/R76/CP_R76_Mobile_Access_WebAdmin/23024.htm

• Question 300:

  What is the benefit of "tw monitor" over "tcpdump"?

  A. "fw monitor" reveals Layer 2 information, while "tcpdump" acts at Layer 3.

  B. "fw monitor" is also available for 64-Bit operating systems.

  C. With "fw monitor", you can see the inspection points, which cannot be seen in "tcpdump"

  D. "fw monitor" can be used from the CLI of the Management Server to collect information from multiple gateways.

  Correct Answer: C