CheckPoint 156-315.81.20 Online Practice Questions and Exam Preparation

CheckPoint 156-315.81.20 Online Questions & Answers

• Question 311:

  Which command gives us a perspective of the number of kernel tables?

  A. fw tab -t
  B. fw tab -s
  C. fw tab -n
  D. fw tab -k
  B. fw tab -s

  ---

  Explanation

  The command "fw tab -s" is used to display information about the state of various kernel tables in a Check Point firewall. It provides a perspective on the number and status of these tables, which can be helpful for troubleshooting and monitoring firewall performance. Option B correctly identifies the command that gives a perspective of the number of kernel tables, making it the verified answer.

  Check Point Certified Security Expert (CCSE) R81 documentation and learning resources.

• Question 312:

  Which command shows CPU core distribution and affinity?

  A. fw ctl affinity -l -a -r -v
  B. fw ctl multik stat
  C. cpstat os
  D. top
  A. fw ctl affinity -l -a -r -v

  ---

  Explanation

  The command fw ctl affinity -l -a -r -v provides detailed information about CPU core assignments for firewall instances and network interfaces.

• Question 313:

  In Advanced Permanent Tunnel Configuration, to set the amount of time the tunnel test runs without a response before the peer host is declared 'down', you would set the_________?

  A. life sign polling interval
  B. life sign timeout
  C. life_sign_polling_interval
  D. life_sign_timeout
  D. life_sign_timeout

  ---

  Explanation

  In Advanced Permanent Tunnel Configuration, the life_sign_timeout parameter sets the amount of time the tunnel test runs without a response before the peer host is declared 'down'. The life_sign_polling_interval parameter sets the interval between each tunnel test packet sent to the peer host.

  https://sc1.checkpoint.com/documents/R77/CP_R77_VPN_AdminGuide/html_frameset.htm?topic=documents/R77/CP_R77_VPN_AdminGuide/14018:AdvancedPermanentTunnelConfiguration

• Question 314:

  What will be the effect of running the following command on the Security Management Server?

  

  A. Remove the installed Security Policy.
  B. Remove the local ACL lists.
  C. No effect.
  D. Reset SIC on all gateways.
  A. Remove the installed Security Policy.

  ---

  Explanation

  Running the command fw unloadlocal on the Security Management Server will remove the installed Security Policy from the local firewall module. This command is useful for troubleshooting purposes when there is a problem with the policy installation or enforcement. However, it will also expose the Security Management Server to potential attacks, so it should be used with caution.

  References:

  Training & Certification | Check Point Software, R81 CCSA & CCSE exams released featuring Promo for...

  - Check Point...

• Question 315:

  Which view is NOT a valid CPVIEW view?

  A. IDA
  B. RAD
  C. PDP
  D. VPN
  C. PDP

  ---

  Explanation

  PDP is not a valid CPVIEW view. CPVIEW is a command-line tool that shows the status of different system parameters, such as CPU, memory, disk, network, and firewall. The valid views are IDA, RAD, VPN, FW, QoS, and others. PDP is a process that handles identity awareness and authentication.

  References:

  Check Point R81 Gaia Administration Guide, Check Point Identity Awareness Administration Guide R81

• Question 316:

  What are the different command sources that allow you to communicate with the API server?

  A. API_cliTool,GaiaCLI,WebServices
  B. SmartConsole GUI Console, API_cli Tool, Gaia CLI, Web Services
  C. SmartView Monitor, API_cli Tool, Gaia CLI, Web Services
  D. SmartConsole GUI Console, mgmt._cli Tool, Gaia CLI, Web Services
  D. SmartConsole GUI Console, mgmt._cli Tool, Gaia CLI, Web Services

• Question 317:

  Aaron is a Cyber Security Engineer working for Global Law Firm with large scale deployment of Check Point Enterprise Appliances running GAiA R80.X. The Network Security Developer Team is having an issue testing the API with a newly deployed R80.X Security Management Server.

  Aaron wants to confirm API services are working properly.

  What should he do first?

  A. Aaron should check API Server status with "api status" from Expert mode. If services are stopped, he should start them with "api start".
  B. Aaron should check API Server status with "cpapi status" from Expert mode. If services are stopped, he should start them with "cpapi start".
  C. Aaron should check API Server status with "fwm api status" from Expert mode. If services are stopped, he should start them with "fwm api start".
  D. Aaron should check API Server status with "cpm api status" from Expert mode. If services are stopped, he should start them with "cpi api start".
  A. Aaron should check API Server status with "api status" from Expert mode. If services are stopped, he should start them with "api start".

• Question 318:

  What needs to be configured if the NAT property 'Translate destination or client side' is not enabled in Global Properties?

  A. A host route to route to the destination IP.
  B. Use the file local.arp to add the ARP entries for NAT to work.
  C. Nothing, the Gateway takes care of all details necessary.
  D. Enabling 'Allow bi-directional NAT' for NAT to work correctly.
  C. Nothing, the Gateway takes care of all details necessary.

  ---

  Explanation

  The NAT property 'Translate destination or client side' is used to determine whether the destination IP address of a packet should be translated on the client side or the server side of a connection. If this property is not enabled, then the destination IP address is translated on the server side, which means that the gateway takes care of all details necessary for NAT to work. The gateway will send an ARP request for the translated IP address and will reply to any ARP requests for that address. Therefore, there is no need to configure a host route, use the local.arp file, or enable bi-directional NAT for NAT to work correctly.

  References:

  R81 Security Management Administration Guide, page 1010.

• Question 319:

  Which tool is used to collect system configuration for support?

  A. cpview
  B. cpinfo
  C. fw monitor
  D. tcpdump
  B. cpinfo

  ---

  Explanation

  cpinfo collects system configuration and diagnostic information for troubleshooting.

• Question 320:

  A user complains that some Internet resources are not available. The Administrator is having issues seeing if packets are being dropped at the firewall (not seeing drops in logs).

  What is the solution to troubleshoot the issue?

  A. run "fw ctl zdebug drop" on the relevant gateway
  B. run "cpstop" on the relevant gateway and check the ping again
  C. run "fw unloadlocal" on the relevant gateway and check the ping again
  D. run "fw log" on the relevant gateway
  A. run "fw ctl zdebug drop" on the relevant gateway