CheckPoint 156-315.80 Online Practice Questions and Exam Preparation

CheckPoint 156-315.80 Online Questions & Answers

• Question 441:

  Which of the following Windows Security Events will not map a username to an IP address in Identity Awareness?

  A. Kerberos Ticket Renewed
  B. Kerberos Ticket Requested
  C. Account Logon
  D. Kerberos Ticket Timed Out
  D. Kerberos Ticket Timed Out

• Question 442:

  An administrator would like to troubleshoot why templating is not working for some traffic. How can he determine at which rule templating is disabled?

  A. He can use the fw accel stat command on the gateway.
  B. He can use the fw accel statistics command on the gateway.
  C. He can use the fwaccel stat command on the Security Management Server.
  D. He can use the fwaccel stat command on the gateway
  D. He can use the fwaccel stat command on the gateway

• Question 443:

  Packet acceleration (SecureXL) identifies connections by several attributes. Which of the attributes is NOT used for identifying connection?

  A. Source Address
  B. Destination Address
  C. TCP Acknowledgement Number
  D. Source Port
  C. TCP Acknowledgement Number

  ---

  Connections are identified by the 5 tuple attributes: source address, destination address, source port, destination port, protocol. When the packets in a connection match all the 5 tuple attributes, the traffic flow can be processed on the accelerated path.

• Question 444:

  Fill in the blanks. There are ________ types of software containers: ___________.

  A. Three; security management, Security Gateway, and endpoint security
  B. Three; Security Gateway, endpoint security, and gateway management
  C. Two; security management and endpoint security
  D. Two; endpoint security and Security Gateway
  A. Three; security management, Security Gateway, and endpoint security

  ---

  Reference: http://downloads.checkpoint.com/dc/download.htm?ID=11608

• Question 445:

  Using Threat Emulation technologies, what is the best way to block .exe and .bat file types?

  A. enable DLP and select.exe and .bat file type
  B. enable .exe and .bat protection in IPS Policy
  C. create FW rule for particular protocol
  D. tecli advanced attributes set prohibited_file_types exe.bat
  A. enable DLP and select.exe and .bat file type

• Question 446:

  Session unique identifiers are passed to the web api using which http header option?

  A. X-chkp-sid
  B. Accept-Charset
  C. Proxy-Authorization
  D. Application
  C. Proxy-Authorization

• Question 447:

  Which blades and or features are not supported in R80?

  A. SmartEvent Maps
  B. SmartEvent
  C. Identity Awareness
  D. SmartConsole Toolbars
  A. SmartEvent Maps

• Question 448:

  When attempting to start a VPN tunnel, in the logs the error "no proposal chosen" is seen numerous times. No other VPN-related entries are present. Which phase of the VPN negotiations has failed?

  A. IKE Phase 1
  B. IPSEC Phase 2
  C. IPSEC Phase 1
  D. IKE Phase 2
  A. IKE Phase 1

• Question 449:

  What are types of Check Point APIs available currently as part of R80.10 code?

  A. Security Gateway API Management API, Threat Prevention API and Identity Awareness Web Services API
  B. Management API, Threat Prevention API, Identity Awareness Web Services API and OPSEC SDK API
  C. OSE API, OPSEC SDK API, Threat Extraction API and Policy Editor API
  D. CPMI API, Management API, Threat Prevention API and Identity Awareness Web Services API
  B. Management API, Threat Prevention API, Identity Awareness Web Services API and OPSEC SDK API

  ---

  Reference: http://dl3.checkpoint.com/paid/29/29532b9eec50d0a947719ae631f640d0/CP_R80_CheckPoint_API_ReferenceGuide.pdf?HashKey=1517088487_4c0acda205460a92f44c83d399826a7bandxtn=.pdf

• Question 450:

  Which tool provides a list of trusted files to the administrator so they can specify to the Threat Prevention blade that these files do not need to be scanned or analyzed?

  A. ThreatWiki
  B. Whitelist Files
  C. AppWiki
  D. IPS Protections
  B. Whitelist Files

  ---

  Reference: https://sc1.checkpoint.com/documents/R77/CP_R77_ThreatPrevention_WebAdmin/101703.htm