CheckPoint 156-315.80 Online Practice Questions and Exam Preparation

CheckPoint 156-315.80 Online Questions & Answers

• Question 311:

  Fill in the blank: Authentication rules are defined for ________ .

  A. User groups
  B. Users using UserCheck
  C. Individual users
  D. All users in the database
  A. User groups

  ---

  Reference: https://sc1.checkpoint.com/documents/R76/CP_R76_SGW_WebAdmin/6721.htm

• Question 312:

  What are the blades of Threat Prevention?

  A. IPS, QoS, AntiVirus, AntiBot, Threat Emulation/Extraction
  B. DLP, AntiVirus, QoS, AntiBot, Threat Emulation/Extraction
  C. IPS, AntiVirus, AntiBot
  D. IPS, AntiVirus, AntiBot, Threat Emulation/Extraction
  D. IPS, AntiVirus, AntiBot, Threat Emulation/Extraction

  ---

  Reference: https://www.checkpoint.com/products/next-generation-threat-prevention/

• Question 313:

  For best practices, what is the recommended time for automatic unlocking of locked admin accounts?

  A. 20 minutes
  B. 15 minutes
  C. Admin account cannot be unlocked automatically
  D. 30 minutes at least
  D. 30 minutes at least

• Question 314:

  Which of the following processes pulls application monitoring status from gateways?

  A. cpm
  B. fwm
  C. cpwd
  D. cpd
  D. cpd

  ---

  Reference: https://sc1.checkpoint.com/documents/R76/CP_R76_SmartViewMonitor_AdminGuide/17666.htm

• Question 315:

  Vanessa is expecting a very important Security Report. The Document should be sent as an attachment via e-mail. An e-mail with Security_report.pdf file was delivered to her e-mail inbox. When she opened the PDF file, she noticed that the file is basically empty and only few lines of text are in it. The report is missing some graphs, tables and links.

  Which component of SandBlast protection is her company using on a Gateway?

  A. SandBlast Threat Emulation
  B. SandBlast Agent
  C. Check Point Protect
  D. SandBlast Threat Extraction
  D. SandBlast Threat Extraction

• Question 316:

  When defining QoS global properties, which option below is not valid?

  A. Weight
  B. Authenticated timeout
  C. Schedule
  D. Rate
  C. Schedule

  ---

  Reference: https://sc1.checkpoint.com/documents/R76/CP_R76_QoS_AdminGuide/14871.htm

• Question 317:

  Which of the following is NOT an attribute of packet acceleration?

  A. Source address
  B. Protocol
  C. Destination port
  D. VLAN tag
  D. VLAN tag

  ---

  Connections are identified by the 5 tuple attributes: source address, destination address, source port, destination port, protocol. When the packets in a connection match all the 5 tuple attributes, the traffic flow can be processed on the accelerated path.

• Question 318:

  What is the command to show SecureXL status?

  A. fwaccel status
  B. fwaccel stats -m
  C. fwaccel -s
  D. fwaccel stat
  D. fwaccel stat

  ---

  To check overall SecureXL status: [Expert@HostName]# fwaccel stat

  Reference: https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=andsolutionid=sk41397

• Question 319:

  SmartEvent provides a convenient way to run common command line executables that can assist in investigating events. Right-clicking the IP address, source or destination, in an event provides a list of default and customized commands. They appear only on cells that refer to IP addresses because the IP address of the active cell is used as the destination of the command when run. The default commands are:

  A. ping, traceroute, netstat, and route
  B. ping, nslookup, Telnet, and route
  C. ping, whois, nslookup, and Telnet
  D. ping, traceroute, netstat, and nslookup
  C. ping, whois, nslookup, and Telnet

  ---

  Reference: https://sc1.checkpoint.com/documents/R76/CP_R76_SmartEventIntro_AdminGuide/17468.htm

• Question 320:

  Which utility allows you to configure the DHCP service on Gaia from the command line?

  A. ifconfig
  B. dhcp_ofg
  C. sysconfig
  D. cpconfig
  C. sysconfig