CheckPoint 156-315.81.20 Online Practice Questions and Exam Preparation

CheckPoint 156-315.81.20 Online Questions & Answers

• Question 351:

  Which feature prevents IP spoofing?

  A. NAT
  B. Anti-Spoofing
  C. IPS
  D. QoS
  B. Anti-Spoofing

  ---

  Explanation

  Anti-Spoofing ensures that packets originate from valid networks, preventing IP spoofing attacks.

• Question 352:

  What command verifies that the API server is responding?

  A. api stat
  B. show api_status
  C. api_get_status
  D. api status
  D. api status

• Question 353:

  Which method below is NOT one of the ways to communicate using the Management API's?

  A. Typing API commands using Gaia's secure shell (clish)
  B. Typing API commands from a dialog box inside the SmartConsole GUI application
  C. Sending API commands over an http connection using web-services
  D. Typing API commands using the "mgmt._cli" command
  C. Sending API commands over an http connection using web-services

• Question 354:

  There are multiple types of licenses for the various VPN components and types.

  License type related to management and functioning of Remote Access VPNs are - which of the following license requirement statement is NOT true?

  A. IPSecVPNLicense - This license is installed on the VPN Gateway and is a basic requirement for a Remote Access VPN solution
  B. EndpointPolicyManagementLicense - The Endpoint Security Suite includes blades other than the Remote Access VPN, hence this license is required to manage the suite
  C. EndpointContainerLicense - The Endpoint Software Blade Licenses does not require an Endpoint Container License as the base
  D. MobileAccessLicense - This license is required on the Security Gateway for the following Remote Access solutions
  C. EndpointContainerLicense - The Endpoint Software Blade Licenses does not require an Endpoint Container License as the base

• Question 355:

  Which component is NOT required to communicate with the Web Services API?

  A. API key
  B. session ID token
  C. content-type
  D. Request payload
  A. API key

  ---

  Explanation

  The component that is not required to communicate with the Web Services API is the API key. The Web Services API uses a session ID token for authentication, which is obtained by sending a login request with a valid username and password. The other components are required for sending requests and receiving responses from the Web Services API. The content-type specifies the format of the data being sent or received, such as JSON or XML. The request payload contains the data and parameters for the API call, such as command name, object name, etc.

  References:

  [Web Services API Reference Guide]

• Question 356:

  Which command would disable a Cluster Member permanently?

  A. clusterXL_admin_down
  B. cphaprob_admin down
  C. clusterXL_admin down-p
  D. set clusterXL down-p
  C. clusterXL_admin down-p

• Question 357:

  What is false regarding a Management HA environment?

  A. SmartConsole can connect to any management server in ReadOnly mode.
  B. It is not necessary to establish SIC between the primary and secondary management server, since the latter gets the exact same copy of the management database from the prior.
  C. Only one Management Server should be active, while any others be in standby mode
  D. Synchronization will occur automatically with each Publish event if the Standby servers are available.
  B. It is not necessary to establish SIC between the primary and secondary management server, since the latter gets the exact same copy of the management database from the prior.

• Question 358:

  Which statement is WRONG regarding the usage of the Central Deployment in SmartConsole?

  A. Only Hotfixes can be installed with the Central Deployment in SmartConsole
  B. You can install Hotfixes with the Central Deployment in SmartConsole
  C. You can upgrade your cluster without user intervention with the Central Deployment in SmartConsole from R80.40 to R81.20.
  D. You can install Jumbo Hotfix accumulators with the Central Deployment in SmartConsole.
  A. Only Hotfixes can be installed with the Central Deployment in SmartConsole

• Question 359:

  Automatic affinity means that if SecureXL is running, the affinity for each interface is automatically reset every_________.

  A. 15 sec
  B. 60 sec
  C. 5 sec
  D. 30 sec
  B. 60 sec

  ---

  Explanation

  Automatic affinity means that if SecureXL is running, the affinity for each interface is automatically reset every 60 seconds based on the current traffic load. This ensures optimal performance and load balancing of SecureXL instances.

  References:

  SecureXL Mechanism

• Question 360:

  You have successfully backed up your Management Server database without the OS information.

  What command would you use to restore this backup?

  A. restore_backup
  B. import backup
  C. cp_merge
  D. migrate_server import
  D. migrate_server import

  ---

  Explanation