CheckPoint 156-315.80 Online Practice Questions and Exam Preparation

CheckPoint 156-315.80 Online Questions & Answers

• Question 331:

  Vanessa is firewall administrator in her company. Her company is using Check Point firewall on a central and several remote locations which are managed centrally by R77.30 Security Management Server. On central location is installed R77.30 Gateway on Open server. Remote locations are using Check Point UTM-1570 series appliances with R75.30 and some of them are using a UTM-1-Edge-X or Edge-W with latest available firmware. She is in process of migrating to R80.

  What can cause Vanessa unnecessary problems, if she didn't check all requirements for migration to R80?

  A. Missing an installed R77.20 Add-on on Security Management Server
  B. Unsupported firmware on UTM-1 Edge-W appliance
  C. Unsupported version on UTM-1 570 series appliance
  D. Unsupported appliances on remote locations
  A. Missing an installed R77.20 Add-on on Security Management Server

• Question 332:

  During inspection of your Threat Prevention logs you find four different computers having one event each with a Critical Severity. Which of those hosts should you try to remediate first?

  A. Host having a Critical event found by Threat Emulation
  B. Host having a Critical event found by IPS
  C. Host having a Critical event found by Antivirus
  D. Host having a Critical event found by Anti-Bot
  D. Host having a Critical event found by Anti-Bot

• Question 333:

  What is the responsibility of SOLR process on R80.10 management server?

  A. Validating all data before it's written into the database
  B. It generates indexes of data written to the database
  C. Communication between SmartConsole applications and the Security Management Server
  D. Writing all information into the database
  B. It generates indexes of data written to the database

• Question 334:

  You want to verify if your management server is ready to upgrade to R80.10.

  What tool could you use in this process?

  A. migrate export
  B. upgrade_tools verify
  C. pre_upgrade_verifier
  D. migrate import
  C. pre_upgrade_verifier

• Question 335:

  SmartConsole R80 requires the following ports to be open for SmartEvent R80 management:

  A. 19090,22
  B. 19190,22
  C. 18190,80
  D. 19009,443
  D. 19009,443

• Question 336:

  DLP and Geo Policy are examples of what type of Policy?

  A. Standard Policies
  B. Shared Policies
  C. Inspection Policies
  D. Unified Policies
  B. Shared Policies

  ---

  Reference: https://sc1.checkpoint.com/documents/R80/CP_R80_SecMGMT/html_frameset.htm?topic=documents/R80/CP_R80_SecMGMT/126197

• Question 337:

  After finishing installation admin John likes to use top command in expert mode. John has to set the expert-password and was able to use top command. A week later John has to use the top command again, He detected that the expert password is no longer valid. What is the most probable reason for this behavior?

  A. "write memory" was not issued on clish
  B. changes are only possible via SmartConsole
  C. "save config" was not issued in expert mode
  D. "save config" was not issued on clish
  D. "save config" was not issued on clish

  ---

  when using the "sim affinity -l" command?

• Question 338:

  Traffic from source 192.168.1.1 is going to www.google.com. The Application Control Blade on the gateway is inspecting the traffic. Assuming acceleration is enabled which path is handling the traffic?

  A. Slow Path
  B. Medium Path
  C. Fast Path
  D. Accelerated Path
  A. Slow Path

• Question 339:

  If a "ping"-packet is dropped by FW1 Policy 璷n how many inspection Points do you see this packet in "fw monitor"?

  A. "i", "l" and "o"
  B. I don't see it in fw monitor
  C. "i" only
  D. "i" and "l"
  C. "i" only

• Question 340:

  What is the command to check the status of the SmartEvent Server?

  A. fw ctl get int cpsemd_stat
  B. cp_conf get_stat cpsead
  C. fw ctl stat cpsead
  D. cpstat cpsead
  D. cpstat cpsead

  ---

  Reference: https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=andsolutionid=sk113265