CheckPoint 156-315.81.20 Online Practice Questions and Exam Preparation

CheckPoint 156-315.81.20 Online Questions & Answers

• Question 271:

  What is the amount of Priority Queues by default?

  A. There are 8 priority queues and this number cannot be changed.
  B. There is no distinct number of queues since it will be changed in a regular basis based on its system requirements.
  C. There are 7 priority queues by default and this number cannot be changed.
  D. There are 8 priority queues by default, and up to 8 additional queues can be manually configured
  D. There are 8 priority queues by default, and up to 8 additional queues can be manually configured

  ---

  Explanation

  There are 8 priority queues by default, and up to 8 additional queues can be manually configured. Priority Queues are a feature of SecureXL that accelerates the performance of the Security Gateway by offloading CPU-intensive operations to the SecureXL device. Priority Queues are used to prioritize traffic when the Security Gateway is stressed and needs to drop packets. By default, there are 8 priority queues, each with a different priority level and type of connections. You can manually configure up to 8 additional queues by setting the relevant kernel parameters in $FWDIR/boot/modules/fwkern.conf file. You can also customize the queue length, the load balancing method, and the services that are considered as control connections.

  References:

  Firewall Priority Queues in R80.x / R81.x - Check Point Software, SecureXL - Check Point Software

• Question 272:

  Session unique identifiers are passed to the web api using which http header option?

  A. X-chkp-sid
  B. Accept-Charset
  C. Proxy-Authorization
  D. Application
  A. X-chkp-sid

  ---

  Explanation

  Session unique identifiers are passed to the web API using the X-chkp-sid HTTP header option. The web API is a service that runs on the Security Management Server and enables external applications to communicate with the Check Point management database using REST APIs. To use the web API, you need to create a session with the management server by sending a login request with your credentials.

  The management server will respond with a session unique identifier (SID) that represents your session.

  You need to pass this SID in every subsequent request to the web API using the X-chkp-sid HTTP header option. This way, the management server can identify and authenticate your session and perform the requested operations.

  References:

  Check Point R81 REST API Reference Guide

• Question 273:

  After some changes in the firewall policy, you run into some issues. You want to test if the policy from two weeks ago has the same issue. You don't want to lose the changes from the last weeks.

  What is the best way to do it?

  A. In SmartConsole under Security Policies go to the Installation History view of the Gateway, select the policy version from two weeks ago and press the `Install specific version' button
  B. Use the Gaia WebUI to take a backup of the Gateway. In SmartConsole under Security Policies go to the Installation History view of the Gateway, select the policy version from two weeks ago and press the `Install specific version' button
  C. In SmartConsole under Manage & Settings go to Sessions -> Revisions and select the revision from two weeks ago. Run the action `Revert to this revision...'.
  D. Use the Gaia WebUI to take a snapshot of management. In the In SmartConsole under Manage & Settings go to Sessions -> Revisions and select the revision from two weeks ago. Run the action `Revert to this revision...' Restore the management snapshot.
  A. In SmartConsole under Security Policies go to the Installation History view of the Gateway, select the policy version from two weeks ago and press the `Install specific version' button

• Question 274:

  What are the services used for Cluster Synchronization?

  A. 256H-CP tor Full Sync and 8116/UDP for Delta Sync
  B. 8116/UDP for Full Sync and Delta Sync
  C. TCP/256 for Full Sync and Delta Sync
  D. No service needed when using Broadcast Mode
  A. 256H-CP tor Full Sync and 8116/UDP for Delta Sync

  ---

  Explanation

  Cluster Synchronization is a mechanism that allows cluster members to share state information and maintain a consistent security policy. Cluster Synchronization uses two types of synchronization: Full Synchronization and Delta Synchronization. Full Synchronization transfers the entire Security Policy and state tables from one cluster member to another. Delta Synchronization transfers only the changes in the state tables. Cluster Synchronization uses two services for communication: TCP port 256 (CPHA) for Full Synchronization and UDP port 8116 for Delta Synchronization3. Therefore, the correct answer is A.

  References:

  3: Cluster Synchronization

• Question 275:

  Customer's R81 management server needs to be upgraded to R81.20.

  What is the best upgrade method when the management server is not connected to the Internet?

  A. Export R81 configuration, clean install R81.20 and import the configuration
  B. CPUSE offline upgrade
  C. CPUSE online upgrade
  D. SmartUpdate upgrade
  C. CPUSE online upgrade

  ---

  Explanation

  CPUSE offline upgrade is the best upgrade method when the management server is not connected to the Internet. CPUSE (Check Point Upgrade Service Engine) is a tool that automates the process of upgrading and installing software packages on Check Point devices. CPUSE can work in online mode or offline mode. Online mode requires an Internet connection to download the packages from Check Point servers.

  Offline mode allows you to download the packages manually from another device and transfer them to the management server using a USB drive or SCP.

  References:

  Check Point Security Expert R81 Course, CPUSE Administration Guide

• Question 276:

  Why is a Central License the preferred and recommended method of licensing?

  A. Central Licensing actually not supported with Gaia.
  B. Central Licensing is the only option when deploying Gala.
  C. Central Licensing ties to the IP address of a gateway and can be changed to any gateway if needed.
  D. Central Licensing ties to the IP address of the management server and is not dependent on the IP of any gateway in the event it changes.
  D. Central Licensing ties to the IP address of the management server and is not dependent on the IP of any gateway in the event it changes.

  ---

  Explanation

  Central Licensing is the preferred and recommended method of licensing because it simplifies the license management process and reduces the risk of license issues. Central Licensing ties to the IP address of the management server and is not dependent on the IP of any gateway in the event it changes. This means that you can easily add, remove, or replace gateways without affecting your license status. Central Licensing also allows you to view and manage all your licenses from one central location using SmartConsole or SmartUpdate. Central Licensing is supported with Gaia and is not the only option when deploying Gaia. Central Licensing does not tie to the IP address of a gateway and cannot be changed to any gateway if needed.

  Check Point R81 Licensing and Contract Administration Guide, page 7

• Question 277:

  Bob has finished to setup provisioning a secondary security management server. Now he wants to check if the provisioning has been correct.

  Which of the following Check Point command can be used to check if the security management server has been installed as a primary or a secondary security management server?

  A. cpprod_util MgmtIsPrimary
  B. cpprod_util FwIsSecondary
  C. cpprod_util FwIsPrimary
  D. cpprod_util MgmtIsSecondary
  A. cpprod_util MgmtIsPrimary

• Question 278:

  Which encryption algorithm is the least secured?

  A. AES-128
  B. AES-256
  C. DES
  D. 3DES
  C. DES

  ---

  Explanation

  DES (Data Encryption Standard) is a symmetric block cipher that uses a 56-bit key to encrypt and decrypt 64-bit blocks of data. It was developed by IBM in 1975 and adopted by the US government as a standard for encryption. However, DES has been proven to be insecure and vulnerable to various attacks, such as brute force, differential cryptanalysis, and linear cryptanalysis. A brute force attack can break DES in a matter of hours using modern hardware. Differential cryptanalysis can reduce the number of keys to be searched by a factor of four, and linear cryptanalysis can reduce it by a factor of two. Therefore, DES is the least secure encryption algorithm among the options given.

  References:

  Types of Encryption, Secure Organization's Data With These Encryption Algorithms, Comparative study of symmetric cryptographic algorithms

• Question 279:

  What is the correct order of the default "fw monitor" inspection points?

  A. i, o, l, O
  B. i, l, o, O
  C. 1, 2, 3, 4
  D. l, i, O, o
  B. i, l, o, O

  ---

  Explanation

  https://community.checkpoint.com/t5/General-Topics/Check-Point-Inspection-points-iIoO/td-p/34938

  The default order of the "fw monitor" inspection points is: i (input): this is the first inspection point, where packets enter the firewall. l (local): this is the second inspection point, where packets are processed locally by the firewall before being forwarded to the next hop. o (output): this is the third inspection point, where packets are sent out to their final destination.

  O (offload): this is the fourth inspection point, where packets are offloaded to hardware acceleration for faster processing.

• Question 280:

  Joey want to configure NTP on R81 Security Management Server. He decided to do this via WebUI.

  What is the correct address to access the Web UI for Gaia platform via browser?

  A. https://<Device_IP_Adress>
  B. http://<Device IP_Address>:443
  C. https://<Device_IP_Address>:10000
  D. https://<Device_IP_Address>:4434
  A. https://<Device_IP_Adress>

  ---

  Explanation

  The correct address to access the Web UI for Gaia platform via browser is

  https://<Device_IP_Adress>.

  This will open the Gaia Portal login page, where you can enter your username and password to access the Gaia configuration options. By default, the Web UI listens on port 443 for HTTPS connections, but you can change it using the CLISH command set web ssl-port <port number>.