CheckPoint 156-315.80 Online Practice Questions and Exam Preparation

CheckPoint 156-315.80 Online Questions & Answers

• Question 341:

  In Threat Prevention, you can create new or clone profiles but you CANNOT change the out-of-the-box profiles of:

  A. Basic, Optimized, Strict
  B. Basic, Optimized, Severe
  C. General, Escalation, Severe
  D. General, purposed, Strict
  A. Basic, Optimized, Strict

  ---

  Reference: https://sc1.checkpoint.com/documents/R80.30/WebAdminGuides/EN/CP_R80.30_ThreatPrevention_AdminGuide/138383.htm

• Question 342:

  What kind of information would you expect to see using the "sim affinity -I" command?

  A. The VMACs used in a Security Gateway cluster
  B. The involved firewall kernel modules in inbound and outbound packet chain
  C. Overview over SecureXL templated connections
  D. Affinity Distribution
  D. Affinity Distribution

• Question 343:

  What is the correct order of the default "fw monitor" inspection points?

  A. i, I, o, O
  B. 1, 2, 3, 4
  C. i, o, I, O
  D. I, i, O, o
  C. i, o, I, O

• Question 344:

  Which feature is NOT provided by all Check Point Mobile Access solutions?

  A. Support for IPv6
  B. Granular access control
  C. Strong user authentication
  D. Secure connectivity
  A. Support for IPv6

  ---

  Types of Solutions

  All of Check Point's Remote Access solutions provide:

  1.

  Enterprise-grade, secure connectivity to corporate resources.

  2.

  Strong user authentication.

  3.

  Granular access control.

• Question 345:

  Which is the correct order of a log flow processed by SmartEvent components?

  A. Firewall > Correlation Unit > Log Server > SmartEvent Server Database > SmartEvent Client
  B. Firewall > SmartEvent Server Database > Correlation Unit > Log Server > SmartEvent Client
  C. Firewall > Log Server > SmartEvent Server Database > Correlation Unit > SmartEvent Client
  D. Firewall > Log Server > Correlation Unit > SmartEvent Server Database > SmartEvent Client
  D. Firewall > Log Server > Correlation Unit > SmartEvent Server Database > SmartEvent Client

• Question 346:

  Which statement is correct about the Sticky Decision Function?

  A. It is not supported with either the Performance pack of a hardware based accelerator card
  B. Does not support SPI's when configured for Load Sharing
  C. It is automatically disabled if the Mobile Access Software Blade is enabled on the cluster
  D. It is not required L2TP traffic
  A. It is not supported with either the Performance pack of a hardware based accelerator card

  ---

  Reference: https://sc1.checkpoint.com/documents/R76/CP_R76_ClusterXL_AdminGuide/7290.htm

• Question 347:

  Is the first packet of an UDP session is rejected by a rule definition from within a security policy (not including the clean up rule), what message is send back through the kernel?

  A. Nothing
  B. TCP FIN
  C. TCP RST
  D. ICMP unreachable
  A. Nothing

• Question 348:

  If a "ping"-packet is dropped by FW1 Policy 璷n how many inspection Points do you see this packet in "fw monitor"?

  A. "i", "l" and "o"
  B. I don't see it in fw monitor
  C. "i" only
  D. "i" and "l"
  C. "i" only

• Question 349:

  Choose the correct syntax to add a new host named "emailserver1" with IP address 10.50.23.90 using GAiA Management CLI?

  A. mgmt_cli add host name "myHost12 ip" address 10.50.23.90
  B. mgmt_cli add host name ip-address 10.50.23.90
  C. mgmt_cli add host "emailserver1" address 10.50.23.90
  D. mgmt_cli add host name "emailserver1" ip-address 10.50.23.90
  D. mgmt_cli add host name "emailserver1" ip-address 10.50.23.90

  ---

  Reference: https://weekly-geekly.github.io/articles/339924/index.html

• Question 350:

  What is the purpose of a SmartEvent Correlation Unit?

  A. The SmartEvent Correlation Unit is designed to check the connection reliability from SmartConsole to the SmartEvent Server.
  B. The SmartEvent Correlation Unit's task it to assign severity levels to the identified events.
  C. The Correlation unit role is to evaluate logs from the log server component to identify patterns/threats and convert them to events.
  D. The SmartEvent Correlation Unit is designed to check the availability of the SmartReporter Server.
  C. The Correlation unit role is to evaluate logs from the log server component to identify patterns/threats and convert them to events.