CheckPoint 156-315.80 Online Practice Questions and Exam Preparation

CheckPoint 156-315.80 Online Questions & Answers

• Question 421:

  What command would show the API server status?

  A. cpm status
  B. api restart
  C. api status
  D. show api status
  C. api status

  ---

  Reference: https://community.checkpoint.com/thread/6524-can-anybody-let-me-know-how-can-we-import-policyrules-via-csv-file

• Question 422:

  What is the difference between an event and a log?

  A. Events are generated at gateway according to Event Policy
  B. A log entry becomes an event when it matches any rule defined in Event Policy
  C. Events are collected with SmartWorkflow form Trouble Ticket systems
  D. Log and Events are synonyms
  B. A log entry becomes an event when it matches any rule defined in Event Policy

• Question 423:

  What is the purpose of Priority Delta in VRRP?

  A. When a box up, Effective Priority = Priority + Priority Delta
  B. When an Interface is up, Effective Priority = Priority + Priority Delta
  C. When an Interface fail, Effective Priority = Priority - Priority Delta
  D. When a box fail, Effective Priority = Priority - Priority Delta
  C. When an Interface fail, Effective Priority = Priority - Priority Delta

  ---

  Each instance of VRRP running on a supported interface may monitor the link state of other interfaces. The monitored interfaces do not have to be running VRRP. If a monitored interface loses its link state, then VRRP will decrement its

  priority over a VRID by the specified delta value and then will send out a new VRRP HELLO packet. If the new effective priority is less than the priority a backup platform has, then the backup platform will beging to send out its own HELLO

  packet.

  Once the master sees this packet with a priority greater than its own, then it releases the VIP.

  Reference: https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=andsolutionid=sk38524

• Question 424:

  John is using Management HA. Which Smartcenter should be connected to for making changes?

  A. secondary Smartcenter
  B. active Smartenter
  C. connect virtual IP of Smartcenter HA
  D. primary Smartcenter
  B. active Smartenter

• Question 425:

  Which Check Point daemon monitors the other daemons?

  A. fwm
  B. cpd
  C. cpwd
  D. fwssd
  C. cpwd

  ---

  Reference: https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=andsolutionid=sk97638

• Question 426:

  You want to gather and analyze threats to your mobile device. It has to be a lightweight app. Which application would you use?

  A. SmartEvent Client Info
  B. SecuRemote
  C. Check Point Protect
  D. Check Point Capsule Cloud
  C. Check Point Protect

  ---

  Reference: https://www.insight.com/content/dam/insight-web/en_US/pdfs/check-point/mobile-threat-prevention-behavioral-risk-analysis.pdf

• Question 427:

  Aaron is a Cyber Security Engineer working for Global Law Firm with large scale deployment of Check Point Enterprise Appliances running GaiA R80.X. The Network Security Developer Team is having an issue testing the API with a newly deployed R80.X Security Management Server. Aaron wants to confirm API services are working properly. What should he do first?

  A. Aaron should check API Server status with "fwm api status" from Expert mode. If services are stopped, he should start them with "fwm api start".
  B. Aaron should check API Server status with "cpapi status" from Expert mode. If services are stopped, he should start them with "cpapi start".
  C. Aaron should check API Server status with "api status" from Expert mode. If services are stopped, he should start them with "api start".
  D. Aaron should check API Server status with "cpm api status" from Expert mode. If services are stopped, he should start them with "cpi api start".
  C. Aaron should check API Server status with "api status" from Expert mode. If services are stopped, he should start them with "api start".

• Question 428:

  Check Point Management (cpm) is the main management process in that it provides the architecture for a consolidated management console. It empowers the migration from legacy Client-side logic to Server-side logic. The cpm process: A. Allow GUI Client and management server to communicate via TCP Port 19001

  B. Allow GUI Client and management server to communicate via TCP Port 18191
  C. Performs database tasks such as creating, deleting, and modifying objects and compiling policy.
  D. Performs database tasks such as creating, deleting, and modifying objects and compiling as well as policy code generation.
  C. Performs database tasks such as creating, deleting, and modifying objects and compiling policy.

• Question 429:

  Sticky Decision Function (SDF) is required to prevent which of the following? Assume you set up an Active-Active cluster.

  A. Symmetric routing
  B. Failovers
  C. Asymmetric routing
  D. Anti-Spoofing
  C. Asymmetric routing

• Question 430:

  What is the correct Syntax for adding an access-rule via R80 API?

  A. add rule position 1 name "Rule 1" policy-package "Standard" add service "http"
  B. add access-rule and follow the wizard
  C. add access-rule layer "Network" action "Allow"
  D. add access-rule layer "Network" position 1 name "Rule 1" service 1 "SMTP" service 2 "http"
  D. add access-rule layer "Network" position 1 name "Rule 1" service 1 "SMTP" service 2 "http"

  ---

  Reference: https://sc1.checkpoint.com/documents/latest/APIs/index.html#gui-cli/add-access-rule~v1.1%20