CheckPoint Checkpoint Certifications 156-315.80 Questions & Answers

• Question 351:

  You have existing dbedit scripts from R77. Can you use them with R80.10?

  A. dbedit is not supported in R80.10

  B. dbedit is fully supported in R80.10

  C. You can use dbedit to modify threat prevention or access policies, but not create or modify layers

  D. dbedit scripts are being replaced by mgmt_cli in R80.10

  Correct Answer: D

  Reference: https://www.checkpoint.com/downloads/product-related/r80.10-mgmt-architecture-overview.pdf

• Question 352:

  What are the steps to configure the HTTPS Inspection Policy?

  A. Go to ManageandSettings > Blades > HTTPS Inspection > Configure in SmartDashboard

  B. Go to Applicationandurl filtering blade > Advanced > Https Inspection > Policy

  C. Go to ManageandSettings > Blades > HTTPS Inspection > Policy

  D. Go to Applicationandurl filtering blade > Https Inspection > Policy

  Correct Answer: A

• Question 353:

  You want to store the GAIA configuration in a file for later reference. What command should you use?

  A. write mem

  B. show config -f

  C. save config -o

  D. save configuration

  Correct Answer: D

• Question 354:

  How do Capsule Connect and Capsule Workspace differ?

  A. Capsule Connect provides a Layer3 VPN. Capsule Workspace provides a Desktop with usable applications.

  B. Capsule Workspace can provide access to any application.

  C. Capsule Connect provides Business data isolation.

  D. Capsule Connect does not require an installed application at client.

  Correct Answer: A

• Question 355:

  Using mgmt_cli, what is the correct syntax to import a host object called Server_1 from the CLI?

  A. mgmt_cli add-host "Server_1" ip_address "10.15.123.10" --format txt

  B. mgmt_cli add host name "Server_1" ip-address "10.15.123.10" --format json

  C. mgmt_cli add object-host "Server_1" ip-address "10.15.123.10" --format json

  D. mgmt._cli add object "Server-1" ip-address "10.15.123.10" --format json

  Correct Answer: B

  Example:

  mgmt_cli add host name "New Host 1" ip-address "192.0.2.1" --format json

  ?;--format jso"; is optional. By default the output is presented in plain text.

  Reference: https://sc1.checkpoint.com/documents/latest/APIs/index.html#cli/add-host~v1.1%20

• Question 356:

  Where do you create and modify the Mobile Access policy in R80?

  A. SmartConsole

  B. SmartMonitor

  C. SmartEndpoint

  D. SmartDashboard

  Correct Answer: A

• Question 357:

  SmartConsole R80 requires the following ports to be open for SmartEvent R80 management:

  A. 19090,22

  B. 19190,22

  C. 18190,80

  D. 19009,443

  Correct Answer: D

• Question 358:

  Which configuration file contains the structure of the Security Server showing the port numbers, corresponding protocol name, and status?

  A. $FWDIR/database/fwauthd.conf

  B. $FWDIR/conf/fwauth.conf

  C. $FWDIR/conf/fwauthd.conf

  D. $FWDIR/state/fwauthd.conf

  Correct Answer: C

• Question 359:

  What API command below creates a new host with the name "New Host" and IP address of "192.168.0.10"?

  A. new host name "New Host" ip-address "192.168.0.10"

  B. set host name "New Host" ip-address "192.168.0.10"

  C. create host name "New Host" ip-address "192.168.0.10"

  D. add host name "New Host" ip-address "192.168.0.10"

  Correct Answer: D

• Question 360:

  As a valid Mobile Access Method, what feature provides Capsule Connect/VPN?

  A. That is used to deploy the mobile device as a generator of one-time passwords for authenticating to an RSA Authentication Manager.

  B. Fill Layer4 VPN -SSL VPN that gives users network access to all mobile applications.

  C. Full Layer3 VPN -IPSec VPN that gives users network access to all mobile applications.

  D. You can make sure that documents are sent to the intended recipients only.

  Correct Answer: C

  Reference: https://sc1.checkpoint.com/documents/R77/CP_R77_Mobile_Access_WebAdmin/82201.htm