CheckPoint 156-315.81.20 Online Practice Questions and Exam Preparation

CheckPoint 156-315.81.20 Online Questions & Answers

• Question 1:

  Which application should you use to install a contract file?

  A. SmartView Monitor
  B. WebUI
  C. SmartUpdate
  D. SmartProvisioning
  C. SmartUpdate

  ---

  Explanation

  According to the Check Point website, SmartUpdate is the application that should be used to install a contract file. A contract file contains information about the licenses and services that are purchased from Check Point. SmartUpdate can also be used to install software packages and patches on Security Gateways and Management Servers. The other applications are either not relevant or not capable of installing a contract file.

• Question 2:

  With Mobile Access enabled, administrators select the web-based and native applications that can be accessed by remote users and define the actions that users can perform the applications. Mobile Access encrypts all traffic using:

  A. HTTPS for web-based applications and 3DES or RC4 algorithm for native applications. For end users to access the native applications, they need to install the SSL Network Extender.
  B. HTTPS for web-based applications and AES or RSA algorithm for native applications. For end users to access the native application, they need to install the SSL Network Extender.
  C. HTTPS for web-based applications and 3DES or RC4 algorithm for native applications. For end users to access the native applications, no additional software is required.
  D. HTTPS for web-based applications and AES or RSA algorithm for native applications. For end users to access the native application, no additional software is required.
  A. HTTPS for web-based applications and 3DES or RC4 algorithm for native applications. For end users to access the native applications, they need to install the SSL Network Extender.

  ---

  Explanation

  Mobile Access encrypts all traffic using HTTPS for web-based applications and 3DES or RC4 algorithm for native applications. For end users to access the native applications, they need to install the SSL Network Extender, which is a lightweight VPN client that creates a secure SSL tunnel to the Mobile Access gateway. The SSL Network Extender supports various types of native applications, such as email clients, file sharing, and remote desktop.

  References:

  Mobile Access Administration Guide, SSL Network Extender

• Question 3:

  What is the command to check the status of the SmartEvent Correlation Unit?

  A. fw ctl get int cpsead_stat
  B. cpstat cpsead
  C. fw ctl stat cpsemd
  D. cp_conf get_stat cpsemd
  B. cpstat cpsead

  ---

  Explanation

  The SmartEvent Correlation Unit is responsible for analyzing the log entries and identifying events from them. It runs on the Log Server machine or on a dedicated machine 1. To check the status of the SmartEvent Correlation Unit, you can use the command cpstat cpsead on the machine where it is installed.

  This command will show you information such as the number of logs processed, the number of events generated, the CPU and memory usage, and the status of the connection to the SmartEvent Server23.

  References:

  SmartEvent Administration Guide R76, SmartEvent Administration Guide R75, SmartEvent Performance Tuning Guide

• Question 4:

  You can access the ThreatCloud Repository from:

  A. R81.20 SmartConsole and Application Wiki
  B. Threat Prevention and Threat Tools
  C. Threat Wiki and Check Point Website
  D. R81.20 SmartConsole and Threat Prevention
  D. R81.20 SmartConsole and Threat Prevention

  ---

  Explanation

  According to the Check Point R81 release notes, you can access the ThreatCloud Repository from R81.20

  SmartConsole and Threat Prevention. The ThreatCloud Repository is a cloud-based service that provides real-time threat intelligence and updates to Check Point products. The other options are either outdated or nonexistent.

  References:

  Check Point R81

• Question 5:

  What is required for a site-to-site VPN tunnel that does not use certificates?

  A. Pre-Shared Secret
  B. RSA Token
  C. Unique Passwords
  D. SecurelD
  A. Pre-Shared Secret

  ---

  Explanation

  A pre-shared secret is a secret key that is shared between the two VPN peers before establishing a secure connection. It is used to authenticate the VPN peers and encrypt the VPN traffic. A pre-shared secret is required for a site-to-site VPN tunnel that does not use certificates, because certificates are another way of authenticating the VPN peers using public key cryptography. Without certificates, the VPN peers need to have a common secret key that only they know.

  References:

  Check Point R81 VPN Administration Guide, page 13

• Question 6:

  Which of the following blades is NOT subscription-based and therefore does not have to be renewed on a regular basis?

  A. Application Control
  B. Threat Emulation
  C. Anti-Virus
  D. Advanced Networking Blade
  D. Advanced Networking Blade

  ---

  Explanation

  The Advanced Networking Blade is not subscription-based and therefore does not have to be renewed on a regular basis. The Advanced Networking Blade is a software blade that provides advanced routing capabilities for Check Point Security Gateways. It supports dynamic routing protocols such as OSPF, BGP, RIP, and PIM, as well as features such as Policy-Based Routing (PBR), Multicast Routing, and IPv6 support. The Advanced Networking Blade is included in the Next Generation Firewall (NGFW) package and does not require a separate license.

• Question 7:

  John is using Management HA.

  Which Security Management Server should he use for making changes?

  A. Primary LogServer
  B. connect virtual IP of Smartcenter HA
  C. active SmartConsole
  D. secondary Smartcenter
  C. active SmartConsole

• Question 8:

  What CLI command compiles and installs a Security Policy on the target's Security Gateways?

  A. fwm compile
  B. fwm load
  C. fwm fetch
  D. fwm install
  B. fwm load

  ---

  Explanation

  The CLI command that compiles and installs a Security Policy on the target Security Gateways is fwm load. Fwm stands for FireWall Management, and it is a command that allows administrators to perform various management tasks on the Security Management Server or Multi-Domain Server. The fwm load command takes two arguments: the name of the Security Policy and the name or IP address of the target Security Gateway or Gateway Cluster. For example:

  [Expert@SMS]# fwm load Standard_Policy fw1

  This command compiles and installs the Standard_Policy on the Security Gateway named fw1. The other commands are either invalid or perform different functions.

• Question 9:

  You plan to automate creating new objects using new R81 Management API. You decide to use GAIA CLI for this task.

  What is the first step to run management API commands on GAIA's shell?

  A. mgmt_admin@teabag > id.txt
  B. mgmt_login
  C. login user admin password teabag
  D. mgmt_cli login user "admin" password "teabag" > id.txt
  B. mgmt_login

  ---

  Explanation

  You plan to automate creating new objects using new R81 Management API. You decide to use GAIA CLI for this task.

  The first step to run management API commands on GAIA's shell is mgmt_login. This command allows you to login to the management server and obtain a session ID, which is required for running other management API commands. You can also specify the user name and password as parameters, or enter them interactively. The session ID is stored in the file $CPDIR/tmp/.api_session by default, unless you specify a different file name.

  References:

  R81 Management API Reference Guide, page 15.

• Question 10:

  Which statement is false in respect of the SmartConsole after upgrading the management server to R81.20?

  A. Yes. You can download the SmartConsole directly from the Download Center
  B. As far as you use version R80.40, no upgrade is needed due to compatibility mode
  C. Yes, using CPUSE you can make the installer available in the Web Portal of the Management Server
  D. Yes, the SmartConsole Upgrade package can be installed using CPUSE
  B. As far as you use version R80.40, no upgrade is needed due to compatibility mode

  ---

  Explanation

  The statement that is false in respect of the SmartConsole after upgrading the management server to R81.20 is that as far as you use version R80.40, no upgrade is needed due to compatibility mode. This is false because SmartConsole R80.40 is not compatible with R81.20 management server and you need to upgrade your SmartConsole to R81.20 as well. The other statements are true and valid ways to obtain the SmartConsole upgrade package.

  References:

  [Check Point Security Expert R81 Installation and Upgrade Guide], page 18.