CheckPoint 156-315.80 Online Practice Questions and Exam Preparation

CheckPoint 156-315.80 Online Questions & Answers

• Question 61:

  Can Check Point and Third-party Gateways establish a certificate-based Site-to-Site VPN tunnel?

  A. Yes, but they need to have a mutually trusted certificate authority
  B. Yes, but they have to have a pre-shared secret key
  C. No, they cannot share certificate authorities
  D. No, Certificate based VPNs are only possible between Check Point devices
  A. Yes, but they need to have a mutually trusted certificate authority

  ---

  Reference: https://community.checkpoint.com/t5/Security-Gateways/HowTo-Set-Up-Certificate-Based-VPNs-with-Check-Point-Appliances/td-p/73299

• Question 62:

  What two ordered layers make up the Access Control Policy Layer?

  A. URL Filtering and Network
  B. Network and Threat Prevention
  C. Application Control and URL Filtering
  D. Network and Application Control
  B. Network and Threat Prevention

• Question 63:

  There are 4 ways to use the Management API for creating host object with R80 Management API. Which one is NOT correct?

  A. Using Web Services
  B. Using cpconfig
  C. Using CLISH
  D. Using SmartConsole GUI console
  B. Using cpconfig

• Question 64:

  Check Point Support in many cases asks you for a configuration summary of your Check Point system. This is also called:

  A. cpexport
  B. sysinfo
  C. cpsizeme
  D. cpinfo
  C. cpsizeme

• Question 65:

  What is mandatory for ClusterXL to work properly?

  A. The number of cores must be the same on every participating cluster node
  B. The Magic MAC number must be unique per cluster node
  C. The Sync interface must not have an IP address configured
  D. If you have "Non-monitored Private" interfaces, the number of those interfaces must be the same on all cluster members
  B. The Magic MAC number must be unique per cluster node

• Question 66:

  How many layers make up the TCP/IP model?

  A. 2
  B. 7
  C. 6
  D. 4
  D. 4

• Question 67:

  What cloud-based SandBlast Mobile application is used to register new devices and users?

  A. Check Point Protect Application
  B. Management Dashboard
  C. Behavior Risk Engine
  D. Check Point Gateway
  D. Check Point Gateway

• Question 68:

  You have enabled "Full Log" as a tracking option to a security rule. However, you are still not seeing any data type information. What is the MOST likely reason?

  A. Logging has disk space issues. Change logging storage options on the logging server or Security Management Server properties and install database.
  B. Data Awareness is not enabled.
  C. Identity Awareness is not enabled.
  D. Logs are arriving from Pre-R80 gateways.
  A. Logging has disk space issues. Change logging storage options on the logging server or Security Management Server properties and install database.

• Question 69:

  You can access the ThreatCloud Repository from:

  A. R80.10 SmartConsole and Application Wiki
  B. Threat Prevention and Threat Tools
  C. Threat Wiki and Check Point Website
  D. R80.10 SmartConsole and Threat Prevention
  D. R80.10 SmartConsole and Threat Prevention

  ---

  Reference: https://sc1.checkpoint.com/documents/R80.10/WebAdminGuides/EN/CP_R80.10_ThreatPrevention_AdminGuide/html_frameset.htm?topic=documents/R80.10/WebAdminGuides/EN/ CP_R80.10_ThreatPrevention_AdminGuide/131285

• Question 70:

  You have successfully backed up Check Point configurations without the OS information. What command would you use to restore this backup?

  A. restore_backup
  B. import backup
  C. cp_merge
  D. migrate import
  D. migrate import