CheckPoint 156-315.81.20 Online Practice Questions and Exam Preparation

CheckPoint 156-315.81.20 Online Questions & Answers

• Question 151:

  SmartConsole R81 requires the following ports to be open for SmartEvent R81 management:

  A. 19090,22
  B. 19190,22
  C. 18190,80
  D. 19009,443
  D. 19009,443

  ---

  Explanation

  To use SmartConsole R81 for managing SmartEvent R81, you need to have the following ports open: Port 19009 for communication over HTTPS (443) Port 19009 for communication over HTTP (80) These ports are necessary for the SmartConsole to communicate with SmartEvent for management and monitoring purposes.

  References:

  Check Point Certified Security Expert R81 documentation and learning resources.

• Question 152:

  SSL Network Extender (SNX) is a thin SSL VPN on-demand client that is installed on the remote user's machine via the web browser.

  What are the two modes of SNX?

  A. Network and Layers
  B. Application and Client Service
  C. Network and Application
  D. Virtual Adapter and Mobile App
  C. Network and Application

• Question 153:

  To optimize Rule Base efficiency, the most hit rules should be where?

  A. Removed from the Rule Base.
  B. Towards the middle of the Rule Base.
  C. Towards the top of the Rule Base.
  D. Towards the bottom of the Rule Base.
  C. Towards the top of the Rule Base.

  ---

  Explanation

  To optimize Rule Base efficiency, the most hit rules should be towards the top of the Rule Base. This is because the Rule Base is processed from top to bottom, and the first rule that matches the traffic is applied. Therefore, placing the most hit rules at the top reduces the number of rules that need to be checked and improves the performance of the firewall.

  References:

  R81 Security Management Administration Guide, page 97.

• Question 154:

  What is the difference between an event and a log?

  A. Events are generated at gateway according to Event Policy
  B. A log entry becomes an event when it matches any rule defined in Event Policy
  C. Events are collected with SmartWorkflow form Trouble Ticket systems
  D. Log and Events are synonyms
  B. A log entry becomes an event when it matches any rule defined in Event Policy

  ---

  Explanation

  The difference between an event and a log is that a log entry becomes an event when it matches any rule defined in Event Policy. A log entry is a record of a network activity that is generated by a Security

  Gateway or a Management Server. An event is a log entry that meets certain criteria and triggers an action or a notification. The other options are either not true or not accurate definitions of events and logs.

  References:

  Check Point R81 Logging and Monitoring Administration Guide

• Question 155:

  What is the command to show SecureXL status?

  A. fwaccel status
  B. fwaccel stats -m
  C. fwaccel -s
  D. fwaccel stat
  D. fwaccel stat

  ---

  Explanation

  The command to show SecureXL status is fwaccel stat. This command displays information about SecureXL acceleration, such as the number of accelerated and non-accelerated connections, the reason for non-acceleration, and the SecureXL device name and mode. The other commands are either invalid or

  show different statistics.

• Question 156:

  How can you make sure that the old logs will be available after updating the Management to version R81.20 using the Advanced Upgrade Method?

  A. Use the WebUI -> Maintenance > System Backup and store the backup on a remote FTP server
  B. The logs will be included running $FWDIR/scripts/migrate_server export-v R81.10
  C. Use the WebUI to save a snapshot before updating the Management -> Maintenance > Snapshot Management
  D. Use the migrate_server tool with the option `-l' for the logs and `-x' for the index
  D. Use the migrate_server tool with the option `-l' for the logs and `-x' for the index

• Question 157:

  When doing a Stand-Alone Installation, you would install the Security Management Server with which other Check Point architecture component?

  A. None, Security Management Server would be installed by itself.
  B. SmartConsole
  C. SecureClient
  D. Security Gateway
  E. SmartEvent
  D. Security Gateway

  ---

  Explanation

  When doing a Stand-Alone Installation, you would install the Security Management Server with the Security Gateway as the other Check Point architecture component. A Stand-Alone Installation is where the Security Management Server and the Security Gateway are installed on the same machine. The other options are either not Check Point architecture components, or not suitable for a Stand-Alone Installation.

  References:

  Check Point R81 Installation and Upgrade Guide

• Question 158:

  Connections to the Check Point R80 Web API use what protocol?

  A. SIC
  B. SOAP
  C. HTTPS
  D. HTTP
  C. HTTPS

• Question 159:

  fwssd is a child process of which of the following Check Point daemons?

  A. fwd
  B. cpwd
  C. fwm
  D. cpd
  A. fwd

  ---

  Explanation

  fwssd is a child process of fwd, which is the firewall daemon that handles policy installation, logging, and state synchronization. cpwd is the watchdog process that monitors and restarts other processes. fwm is the management server process that handles communication with GUI clients. cpd is the infrastructure daemon that handles SIC, licensing, and policy code generation.

  References:

  Check Point Processes Cheat Sheet -LazyAdmins, Check Point R81 Gaia Administration Guide, Certified Security Expert (CCSE) R81.20 Course Overview

• Question 160:

  Which command is used to display firewall policy status?

  A. fw stat
  B. fw ctl stat
  C. cpstat fw
  D. fwaccel stat
  A. fw stat

  ---

  Explanation

  The fw stat command displays the installed firewall policy name and status on the gateway.