CheckPoint 156-315.80 Online Practice Questions and Exam Preparation

CheckPoint 156-315.80 Online Questions & Answers

• Question 301:

  Which of the following statements is TRUE about R80 management plug-ins?

  A. The plug-in is a package installed on the Security Gateway.
  B. Installing a management plug-in requires a Snapshot, just like any upgrade process.
  C. A management plug-in interacts with a Security Management Server to provide new features and support for new products.
  D. Using a plug-in offers full central management only if special licensing is applied to specific features of the plug-in.
  C. A management plug-in interacts with a Security Management Server to provide new features and support for new products.

• Question 302:

  In the Check Point Firewall Kernel Module, each Kernel is associated with a key, which specifies the type of traffic applicable to the chain module. For Wire Mode configuration, chain modules marked with __________________ will not apply.

  A. ffff
  B. 1
  C. 2
  D. 3
  B. 1

• Question 303:

  When doing a Stand-Alone Installation, you would install the Security Management Server with which other Check Point architecture component?

  A. None, Security Management Server would be installed by itself.
  B. SmartConsole
  C. SecureClient
  D. Security Gateway
  E. SmartEvent
  D. Security Gateway

  ---

  Reference: https://sc1.checkpoint.com/documents/R76/CP_R76_Installation_and_Upgrade_Guide-webAdmin/89230.htm

• Question 304:

  Fill in the blank: A new license should be generated and installed in all of the following situations EXCEPT when ________ .

  A. The license is attached to the wrong Security Gateway.
  B. The existing license expires.
  C. The license is upgraded.
  D. The IP address of the Security Management or Security Gateway has changed.
  A. The license is attached to the wrong Security Gateway.

• Question 305:

  Which of the following is a new R80.10 Gateway feature that had not been available in R77.X and older?

  A. The rule base can be built of layers, each containing a set of the security rules. Layers are inspected in the order in which they are defined, allowing control over the rule base flow and which security functionalities take precedence.
  B. Limits the upload and download throughput for streaming media in the company to 1 Gbps.
  C. Time object to a rule to make the rule active only during specified times.
  D. Sub Policies ae sets of rules that can be created and attached to specific rules. If the rule is matched, inspection will continue in the sub policy attached to it rather than in the next rule.
  D. Sub Policies ae sets of rules that can be created and attached to specific rules. If the rule is matched, inspection will continue in the sub policy attached to it rather than in the next rule.

  ---

  Reference: http://dl3.checkpoint.com/paid/1f/1f850d1640792cf885336cc6ae8b2743/CP_R80_ReleaseNotes.pdf?HashKey=1517092603_dd917544d92dccc060e5b25d28a46f79andxtn=.pdf

• Question 306:

  Which application should you use to install a contract file?

  A. SmartView Monitor
  B. WebUI
  C. SmartUpdate
  D. SmartProvisioning
  C. SmartUpdate

• Question 307:

  Pamela is Cyber Security Engineer working for Global Instance Firm with large scale deployment of Check Point Enterprise Appliances using GAiA/R80.10. Company's Developer Team is having random access issue to newly deployed Application Server in DMZ's Application Server Farm Tier and blames DMZ Security Gateway as root cause. The ticket has been created and issue is at Pamela's desk for an investigation. Pamela decides to use Check Point's Packet Analyzer Tool-fw monitor to iron out the issue during approved Maintenance window.

  What do you recommend as the best suggestion for Pamela to make sure she successfully captures entire traffic in context of Firewall and problematic traffic?

  A. Pamela should check SecureXL status on DMZ Security gateway and if it's turned ON. She should turn OFF SecureXL before using fw monitor to avoid misleading traffic captures.
  B. Pamela should check SecureXL status on DMZ Security Gateway and if it's turned OFF. She should turn ON SecureXL before using fw monitor to avoid misleading traffic captures.
  C. Pamela should use tcpdump over fw monitor tool as tcpdump works at OS-level and captures entire traffic.
  D. Pamela should use snoop over fw monitor tool as snoop works at NIC driver level and captures entire traffic.
  A. Pamela should check SecureXL status on DMZ Security gateway and if it's turned ON. She should turn OFF SecureXL before using fw monitor to avoid misleading traffic captures.

• Question 308:

  How would you deploy TE250X Check Point appliance just for email traffic and in-line mode without a Check Point Security Gateway?

  A. Install appliance TE250X on SpanPort on LAN switch in MTA mode.
  B. Install appliance TE250X in standalone mode and setup MTA.
  C. You can utilize only Check Point Cloud Services for this scenario.
  D. It is not possible, always Check Point SGW is needed to forward emails to SandBlast appliance.
  C. You can utilize only Check Point Cloud Services for this scenario.

• Question 309:

  The Firewall kernel is replicated multiple times, therefore:

  A. The Firewall kernel only touches the packet if the connection is accelerated
  B. The Firewall can run different policies per core
  C. The Firewall kernel is replicated only with new connections and deletes itself once the connection times out
  D. The Firewall can run the same policy on all cores.
  D. The Firewall can run the same policy on all cores.

  ---

  On a Security Gateway with CoreXL enabled, the Firewall kernel is replicated multiple times. Each replicated copy, or instance, runs on one processing core. These instances handle traffic concurrently, and each instance is a complete and independent inspection kernel. When CoreXL is enabled, all the kernel instances in the Security Gateway process traffic through the same interfaces and apply the same security policy.

  Reference: https://sc1.checkpoint.com/documents/R77/CP_R77_PerformanceTuning_WebAdmin/6731.htm

• Question 310:

  SmartConsole R80.x requires the following ports to be open for SmartEvent:

  A. 19009, 19090 and 443
  B. 19009, 19004 and 18190
  C. 18190 and 443
  D. 19009, 18190 and 443
  D. 19009, 18190 and 443