CheckPoint Checkpoint Certifications 156-315.80 Questions & Answers

• Question 371:

  When Dynamic Dispatcher is enabled, connections are assigned dynamically with the exception of:

  A. Threat Emulation

  B. HTTPS

  C. QOS

  D. VoIP

  Correct Answer: D

• Question 372:

  SandBlast offers flexibility in implementation based on their individual business needs. What is an option for deployment of Check Point SandBlast Zero-Day Protection?

  A. Smart Cloud Services

  B. Load Sharing Mode Services

  C. Threat Agent Solution

  D. Public Cloud Services

  Correct Answer: A

• Question 373:

  Which of the following is NOT a component of Check Point Capsule?

  A. Capsule Docs

  B. Capsule Cloud

  C. Capsule Enterprise

  D. Capsule Workspace

  Correct Answer: C

• Question 374:

  Packet acceleration (SecureXL) identifies connections by several attributes. Which of the attributes is NOT used for identifying connection?

  A. Source Address

  B. Destination Address

  C. TCP Acknowledgement Number

  D. Source Port

  Correct Answer: C

  Connections are identified by the 5 tuple attributes: source address, destination address, source port, destination port, protocol. When the packets in a connection match all the 5 tuple attributes, the traffic flow can be processed on the accelerated path.

• Question 375:

  There are 4 ways to use the Management API for creating host object with R80 Management API. Which one is NOT correct?

  A. Using Web Services

  B. Using cpconfig

  C. Using CLISH

  D. Using SmartConsole GUI console

  Correct Answer: B

• Question 376:

  SmartEvent has several components that function together to track security threats. What is the function of the Correlation Unit as a component of this architecture?

  A. Analyzes each log entry as it arrives at the log server according to the Event Policy. When a threat pattern is identified, an event is forwarded to the SmartEvent Server.

  B. Correlates all the identified threats with the consolidation policy.

  C. Collects syslog data from third party devices and saves them to the database.

  D. Connects with the SmartEvent Client when generating threat reports.

  Correct Answer: A

• Question 377:

  SecureXL improves non-encrypted firewall traffic throughput and encrypted VPN traffic throughput.

  A. This statement is true because SecureXL does improve all traffic.

  B. This statement is false because SecureXL does not improve this traffic but CoreXL does.

  C. This statement is true because SecureXL does improve this traffic.

  D. This statement is false because encrypted traffic cannot be inspected.

  Correct Answer: C

  SecureXL improved non-encrypted firewall traffic throughput, and encrypted VPN traffic throughput, by nearly an order-of-magnitude- particularly for small packets flowing in long duration connections.

  Reference: https://downloads.checkpoint.com/fileserver/SOURCE/direct/ID/10001/FILE/ SecureXL_and_Nokia_IPSO_White_Paper_20080401.pdf

• Question 378:

  SandBlast offers busineses flexibility in implementation based on their individual business needs. What is an option for deployment of Check Point SandBlast Zero-Day Protection?

  A. Smart Cloud Service

  B. Any Cloud Service

  C. Threat Agent Service

  D. Public Cloud Service

  Correct Answer: A

• Question 379:

  In R80, where do you manage your Mobile Access Policy?

  A. Access Control Policy

  B. Through the Mobile Console

  C. Shared Gateways Policy

  D. From the Dedicated Mobility Tab

  Correct Answer: A

• Question 380:

  John detected high load on sync interface. Which is most recommended solution?

  A. For FTP connections - do not sync

  B. Add a second interface to handle sync traffic

  C. For short connections like http service - do not sync

  D. For short connections like icmp service - delay sync for 2 seconds

  Correct Answer: A