CheckPoint 156-315.80 Online Practice Questions and Exam Preparation

CheckPoint 156-315.80 Online Questions & Answers

• Question 371:

  Check Point APIs allow system engineers and developers to make changes to their organization's security policy with CLI tools and Web Services for all the following except:

  A. Create new dashboards to manage 3rd party task
  B. Create products that use and enhance 3rd party solutions
  C. Execute automated scripts to perform common tasks
  D. Create products that use and enhance the Check Point Solution
  A. Create new dashboards to manage 3rd party task

  ---

  Check Point APIs let system administrators and developers make changes to the security policy with CLI tools and web-services. You can use an API to:

  1.

  Use an automated script to perform common tasks

  2.

  Integrate Check Point products with 3rd party solutions

  3.

  Create products that use and enhance the Check Point solution Reference: http://dl3.checkpoint.com/paid/29/29532b9eec50d0a947719ae631f640d0/CP_R80_CheckPoint_API_ReferenceGuide.pdf?HashKey=1522190468_125d63ea5296b7dadd3e4fd81c708cc5andxtn=.pdf

• Question 372:

  Firewall policies must be configured to accept VRRP packets on the GAiA platform if it runs Firewall software. The Multicast destination assigned by the Internet Assigned Number Authority (IANA) for VRRP is:

  A. 224.0.0.18
  B. 224.0.0.5
  C. 224.0.0.102
  D. 224.0.0.22
  A. 224.0.0.18

  ---

  Reference: https://www.iana.org/assignments/multicast-addresses/multicast-addresses.xhtml

• Question 373:

  Which of the following is an identity acquisition method that allows a Security Gateway to identify Active Directory users and computers?

  A. UserCheck
  B. Active Directory Query
  C. Account Unit Query
  D. User Directory Query
  B. Active Directory Query

  ---

  Reference : https://sc1.checkpoint.com/documents/R76/CP_R76_IdentityAwareness_AdminGuide/62402.htm

• Question 374:

  According to out of the box SmartEvent policy, which blade will automatically be correlated into events?

  A. Firewall
  B. VPN
  C. IPS
  D. HTTPS
  C. IPS

• Question 375:

  What is not a purpose of the deployment of Check Point API?

  A. Execute an automated script to perform common tasks
  B. Create a customized GUI Client for manipulating the objects database
  C. Create products that use and enhance the Check Point solution
  D. Integrate Check Point products with 3rd party solution
  B. Create a customized GUI Client for manipulating the objects database

  ---

  Reference: Check Point APIs Reference Guide R80 PDF

• Question 376:

  VPN Link Selection will perform the following when the primary VPN link goes down?

  A. The Firewall will drop the packets.
  B. The Firewall can update the Link Selection entries to start using a different link for the same tunnel.
  C. The Firewall will send out the packet on all interfaces.
  D. The Firewall will inform the client that the tunnel is down.
  B. The Firewall can update the Link Selection entries to start using a different link for the same tunnel.

• Question 377:

  When SecureXL is enabled, all packets should be accelerated, except packets that match the following conditions:

  A. All UDP packets
  B. All IPv6 Traffic
  C. All packets that match a rule whose source or destination is the Outside Corporate Network
  D. CIFS packets
  D. CIFS packets

• Question 378:

  Which two of these Check Point Protocols are used by SmartEvent Processes?

  A. ELA and CPD
  B. FWD and LEA
  C. FWD and CPLOG
  D. ELA and CPLOG
  D. ELA and CPLOG

• Question 379:

  Which of the SecureXL templates are enabled by default on Security Gateway?

  A. Accept
  B. Drop
  C. NAT
  D. None
  D. None

• Question 380:

  Under which file is the proxy arp configuration stored?

  A. $FWDIR/state/proxy_arp.conf on the management server
  B. $FWDIR/conf/local.arp on the management server
  C. $FWDIR/state/_tmp/proxy.arp on the security gateway
  D. $FWDIR/conf/local.arp on the gateway
  D. $FWDIR/conf/local.arp on the gateway