CheckPoint 156-315.81.20 Online Practice Questions and Exam Preparation

CheckPoint 156-315.81.20 Online Questions & Answers

• Question 281:

  What is the name of the secure application for Mail/Calendar for mobile devices?

  A. Secure Workspace
  B. Capsule Mail
  C. Capsule Workspace
  D. Capsule VPN
  C. Capsule Workspace

• Question 282:

  ob works for a big security outsourcing provider company and as he receives a lot of change requests per day he wants to use for scripting daily tasks the API services (torn Check Point for the GAIA API. Firstly he needs to be aware if the API services are running for the GAIA operating system.

  Which of the following Check Point Command is true?

  A. gala_dlish status
  B. status gaiaapi
  C. api_gala status
  D. gala_api status
  D. gala_api status

  ---

  Explanation

  The correct Check Point command to check if the API services are running for the GAIA operating system is gala_api status. The gala_api command is used to manage the API services in the GAIA operating system, and the status option is used to check the status of the API services.

• Question 283:

  Which statement is most correct regarding about "CoreXL Dynamic Dispatcher"?

  A. The CoreXL FW instances assignment mechanism is based on IP Protocol type.
  B. The CoreXL FW instances assignment mechanism is based on the utilization of CPU cores
  C. The CoreXL FW instances assignment mechanism is based on Source MAC addresses, Destination MAC addresses
  D. The CoreXL FW instances assignment mechanism is based on Source IP addresses, Destination IP addresses, and the IP `Protocol' type.
  B. The CoreXL FW instances assignment mechanism is based on the utilization of CPU cores

• Question 284:

  Choose the correct syntax to add a new host named "emailserver1" with IP address 10.50.23.90 using GAiA Management CLI?

  A. mgmt_cli add host name "emailserver1" ip-address 10.50.23.90
  B. mgmt_cli add host "emailserver1" address 10.50.23.90
  C. mgmt_cli add host name "myHost12 ip" address 10.50.23.90
  D. mgmt_cli add host name ip-address 10.50.23.90
  A. mgmt_cli add host name "emailserver1" ip-address 10.50.23.90

  ---

  Explanation

  The correct syntax for adding a host object using GAiA Management CLI (mgmt_cli) is:

  mgmt_cli add host name "emailserver1" ip-address 10.50.23.90

  The mgmt_cli tool is the official Check Point CLI utility used to manage objects on the Security Management Server in R80 and later versions. The parameters must follow the exact structure:

  "name" specifies the object name

  "ip-address" specifies the IPv4 address

  The other options are incorrect due to invalid parameter names or missing required syntax (for example, "address" is not a valid parameter, and missing object name values).

• Question 285:

  In Logging and Monitoring, the tracking options are Log, Detailed Log and Extended Log.

  Which of the following options can you add to each Log, Detailed Log and Extended Log?

  A. Accounting
  B. Suppression
  C. Accounting/Suppression
  D. Accounting/Extended
  C. Accounting/Suppression

  ---

  Explanation

  In Logging and Monitoring, the tracking options are Log, Detailed Log and Extended Log. The option that can be added to each Log, Detailed Log and Extended Log is Accounting/Suppression. Accounting / Suppression is a feature that allows administrators to control how often logs are generated for certain rules or connections. Accounting means that logs are generated periodically based on a specified interval or volume. Suppression means that logs are generated only for the first and last packet of a connection or session. Accounting/Suppression can be added to any tracking option to reduce the number of logs and

  save disk space.

• Question 286:

  Which User-mode processis responsible for the FW CLI commands?

  A. cpm
  B. cpd
  C. fwm
  D. fwd
  C. fwm

• Question 287:

  How can you see historical data with cpview?

  A. cpview -e
  B. cpview -d
  C. cpview -f
  D. cpview -t
  D. cpview -t

• Question 288:

  DLP and Geo Policy are examples of what type of Policy?

  A. Standard Policies
  B. Shared Policies
  C. Inspection Policies
  D. Unified Policies
  B. Shared Policies

  ---

  Explanation

  DLP and Geo Policy are examples of Shared Policies. Shared Policies are policies that can be applied to multiple gateways or clusters, regardless of their Access Control policy. Shared Policies allow administrators to manage common security settings across different gateways or clusters, such as Data Loss Prevention, Geo Protection, Threat Prevention, HTTPS Inspection, etc.

  R81 Security Management Administration Guide, page 31.

• Question 289:

  An administrator is creating an IPsec site-to-site VPN between his corporate office and branch office. Both offices are protected by Check Point Security Gateway managed by the same Security Management Server. While configuring the VPN community to specify the pre-shared secret the administrator found that the check box to enable pre-shared secret and cannot be enabled.

  Why does it not allow him to specify the pre-shared secret?

  A. IPsec VPN blade should be enabled on both Security Gateway.
  B. Pre-shared can only be used while creating a VPN between a third party vendor and Check Point Security Gateway.
  C. Certificate based Authentication is the only authentication method available between two Security Gateway managed by the same SMS.
  D. The Security Gateways are pre-R75.40.
  C. Certificate based Authentication is the only authentication method available between two Security Gateway managed by the same SMS.

  ---

  Explanation

  When two Security Gateways are managed by the same Security Management Server, they use certificate based authentication to establish a VPN tunnel. This is because the Security Management Server acts as an internal certificate authority (ICA) that can issue and revoke certificates for the Security Gateways. The Security Management Server also maintains a trust relationship with the Security Gateways, which is based on a one-time password (OTP) that is used to initialize secure internal communication (SIC).

  Therefore, there is no need to use a pre-shared secret for authentication between two Security Gateways managed by the same SMS.

• Question 290:

  Which upgrade method you should use upgrading from R80.40 to R81.20 to avoid any downtime?

  A. Multi-Version Cluster Upgrade (MVC)
  B. Zero Downtime Upgrade (ZDU)
  C. Connectivity Upgrade (CU)
  D. Minimal Effort Upgrade (ME)
  A. Multi-Version Cluster Upgrade (MVC)