CheckPoint 156-315.80 Online Practice Questions and Exam Preparation

CheckPoint 156-315.80 Online Questions & Answers

• Question 361:

  What command is used to manually failover a Multi-Version Cluster during the upgrade?

  A. clusterXL_admin down in Expert Mode
  B. clusterXL_admin down in Clish
  C. set cluster member state down in Clish
  D. set cluster down in Expert Mode
  B. clusterXL_admin down in Clish

• Question 362:

  What is the benefit of "tw monitor" over "tcpdump"?

  A. "fw monitor" reveals Layer 2 information, while "tcpdump" acts at Layer 3.
  B. "fw monitor" is also available for 64-Bit operating systems.
  C. With "fw monitor", you can see the inspection points, which cannot be seen in "tcpdump"
  D. "fw monitor" can be used from the CLI of the Management Server to collect information from multiple gateways.
  C. With "fw monitor", you can see the inspection points, which cannot be seen in "tcpdump"

• Question 363:

  In SmartConsole, objects are used to represent physical and virtual network components and also some logical components. These objects are divided into several categories. Which of the following is NOT an objects category?

  A. Limit
  B. Resource
  C. Custom Application / Site
  D. Network Object
  B. Resource

  ---

  Reference: https://sc1.checkpoint.com/documents/R80.10/WebAdminGuides/EN/CP_R80.10_SecurityManagement_AdminGuide/html_frameset.htm?topic=documents/R80.10/WebAdminGuides/EN/ CP_R80.10_SecurityManagement_AdminGuide/162005

• Question 364:

  You need to change the MAC-address on eth2 interface of the gateway. What command and what mode will you use to achieve this goal?

  A. set interface eth2 mac-addr 11:11:11:11:11:11; CLISH
  B. ifconfig eth1 hw 11:11:11:11:11:11; expert
  C. set interface eth2 hw-addr 11:11:11:11:11:11; CLISH
  D. ethtool -i eth2 mac 11:11:11:11:11:11; expert
  A. set interface eth2 mac-addr 11:11:11:11:11:11; CLISH

  ---

  Reference: https://sc1.checkpoint.com/documents/R76/CP_R76_Gaia_WebAdmin/75697.htm

• Question 365:

  You are asked to check the status of several user-mode processes on the management server and gateway. Which of the following processes can only be seen on a Management Server?

  A. fwd
  B. fwm
  C. cpd
  D. cpwd
  B. fwm

• Question 366:

  What is the mechanism behind Threat Extraction?

  A. This a new mechanism which extracts malicious files from a document to use it as a counter-attack against its sender.
  B. This is a new mechanism which is able to collect malicious files out of any kind of file types to destroy it prior to sending it to the intended recipient.
  C. This is a new mechanism to identify the IP address of the sender of malicious codes and put it into the SAM database (Suspicious Activity Monitoring).
  D. Any active contents of a document, such as JavaScripts, macros and links will be removed from the document and forwarded to the intended recipient, which makes this solution very fast.
  D. Any active contents of a document, such as JavaScripts, macros and links will be removed from the document and forwarded to the intended recipient, which makes this solution very fast.

• Question 367:

  SmartEvent Security Checkups can be run from the following Logs and Monitor activity:

  A. Reports
  B. Advanced
  C. Checkups
  D. Views
  A. Reports

• Question 368:

  John is using Management HA. Which Security Management Server should he use for making changes?

  A. secondary Smartcenter
  B. active SmartConsole
  C. connect virtual IP of Smartcenter HA
  D. primary Log Server
  B. active SmartConsole

• Question 369:

  When Identity Awareness is enabled, which identity source(s) is(are) used for Application Control?

  A. RADIUS
  B. Remote Access and RADIUS
  C. AD Query
  D. AD Query and Browser-based Authentication
  D. AD Query and Browser-based Authentication

  ---

  Identity Awareness gets identities from these acquisition sources:

  1.

  AD Query

  2.

  Browser-Based Authentication

  3.

  Endpoint Identity Agent

  4.

  Terminal Servers Identity Agent

  5.

  Remote Access

• Question 370:

  The Event List within the Event tab contains:

  A. a list of options available for running a query.
  B. the top events, destinations, sources, and users of the query results, either as a chart or in a tallied list.
  C. events generated by a query.
  D. the details of a selected event.
  C. events generated by a query.

  ---

  Reference: https://sc1.checkpoint.com/documents/R80/CP_R80_LoggingAndMonitoring/html_frameset.htm?topic=documents/R80/CP_R80_LoggingAndMonitoring/131915