CheckPoint 156-315.80 Online Practice Questions and Exam Preparation

CheckPoint 156-315.80 Online Questions & Answers

• Question 411:

  You can select the file types that are sent for emulation for all the Threat Prevention profiles. Each profile defines a(n) _____ or ______ action for the file types.

  A. Inspect/Bypass
  B. Inspect/Prevent
  C. Prevent/Bypass
  D. Detect/Bypass
  A. Inspect/Bypass

  ---

  Reference: https://sc1.checkpoint.com/documents/R77/CP_R77_ThreatPrevention_WebAdmin/101703.htm

• Question 412:

  UserCheck objects in the Application Control and URL Filtering rules allow the gateway to communicate with the users. Which action is not supported in UserCheck objects?

  A. Ask
  B. Drop
  C. Inform
  D. Reject
  D. Reject

• Question 413:

  When requiring certificates for mobile devices, make sure the authentication method is set to one of the following, Username and Password, RADIUS or _______.

  A. SecureID
  B. SecurID
  C. Complexity
  D. TacAcs
  B. SecurID

  ---

  Reference: https://sc1.checkpoint.com/documents/R77/CP_R77_Mobile_Access_WebAdmin/41587.htm

• Question 414:

  How do Capsule Connect and Capsule Workspace differ?

  A. Capsule Connect provides a Layer3 VPN. Capsule Workspace provides a Desktop with usable applications.
  B. Capsule Workspace can provide access to any application.
  C. Capsule Connect provides Business data isolation.
  D. Capsule Connect does not require an installed application at client.
  A. Capsule Connect provides a Layer3 VPN. Capsule Workspace provides a Desktop with usable applications.

• Question 415:

  In SmartEvent, what are the different types of automatic reactions that the administrator can configure?

  A. Mail, Block Source, Block Event Activity, External Script, SNMP Trap
  B. Mail, Block Source, Trigger log, Block Services, SNMP Trap
  C. Mail, Block Source, Trigger log, External Script, SNMP Trap
  D. Mail, Block Source, Block Event Activity, Packet Capture, SNMP Trap
  A. Mail, Block Source, Block Event Activity, External Script, SNMP Trap

  ---

  Reference: https://sc1.checkpoint.com/documents/R76/CP_R76_SmartEvent_AdminGuide/17401.htm

• Question 416:

  In which formats can Threat Emulation forensics reports be viewed in?

  A. TXT, XML and CSV
  B. PDF and TXT
  C. PDF, HTML, and XML
  D. PDF and HTML
  C. PDF, HTML, and XML

• Question 417:

  One of major features in R80 SmartConsole is concurrent administration.

  Which of the following is NOT possible considering that AdminA, AdminB and AdminC are editing the same Security Policy?

  A. A lock icon shows that a rule or an object is locked and will be available.
  B. AdminA and AdminB are editing the same rule at the same time.
  C. A lock icon next to a rule informs that any Administrator is working on this particular rule.
  D. AdminA, AdminB and AdminC are editing three different rules at the same time.
  C. A lock icon next to a rule informs that any Administrator is working on this particular rule.

  ---

  Reference: http://downloads.checkpoint.com/dc/download.htm?ID=65846

• Question 418:

  By default, the R80 web API uses which content-type in its response?

  A. Java Script
  B. XML
  C. Text
  D. JSON
  D. JSON

• Question 419:

  Which of the following commands shows the status of processes?

  A. cpwd_admin -l
  B. cpwd -l
  C. cpwd admin_list
  D. cpwd_admin list
  D. cpwd_admin list

  ---

  Reference: https://community.checkpoint.com/thread/8054-cpwdadmin-list-overview-sms

• Question 420:

  The fwd process on the Security Gateway sends logs to the fwd process on the Management Server via which 2 processes?

  A. fwd via cpm
  B. fwm via fwd
  C. cpm via cpd
  D. fwd via cpd
  A. fwd via cpm