CheckPoint 156-315.81.20 Online Practice Questions and Exam Preparation

CheckPoint 156-315.81.20 Online Questions & Answers

• Question 371:

  What key is used to save the current CPView page in a filename format cpview_"cpview process ID".

  cap" number of captures"?

  A. S
  B. W
  C. C
  D. Space bar
  C. C

  ---

  Explanation

  The key C is used to save the current CPView page in a filename format cpview_"cpview process ID".cap" number of captures". This is a feature of CPView that allows the user to capture the current page for later analysis or troubleshooting.

  The file is saved in the /var/log directory on the Security Gateway.

  References:

  Check Point Resource Library, page 3.

• Question 372:

  Which of the following Check Point processes within the Security Management Server is responsible for the receiving of log records from Security Gateway?

  A. cpd
  B. fwm
  C. logd
  D. fwd
  D. fwd

• Question 373:

  Mobile Access Gateway can be configured as a reverse proxy for Internal Web Applications. Reverse proxy users browse to a URL that is resolved to the Security Gateway IP address.

  Which of the following Check Point command is true for enabling the Reverse Proxy:

  A. ReverseProxy
  B. ReverseCLIProxy
  C. ReverseProxyCLI
  D. ProxyReverseCLI
  C. ReverseProxyCLI

• Question 374:

  Which Mobile Access Application allows a secure container on Mobile devices to give users access to internal website, file share and emails?

  A. Check Point Capsule Workspace
  B. Check Point Capsule Remote
  C. Check Point Mobile Web Portal
  D. Check Point Remote User
  A. Check Point Capsule Workspace

• Question 375:

  Native Applications require a thin client under which circumstances?

  A. If you want to have assigned a particular Office Mode IP address
  B. If you are about to use a client (FTP, RDP, ...) that is installed on the endpoint.
  C. If you want to use a VPN Client that is not officially supported by the underlying operating system
  D. If you want to use a legacy 32-Bit Windows OS
  B. If you are about to use a client (FTP, RDP, ...) that is installed on the endpoint.

• Question 376:

  When performing a minimal effort upgrade, what will happen to the network traffic?

  A. All connections that were initiated before the upgrade will be dropped, causing network downtime
  B. All connections that were initiated before the upgrade will be handled normally
  C. All connections that were initiated before the upgrade will be handled by the standby gateway
  D. All connections that were initiated before the upgrade will be handled by the active gateway
  B. All connections that were initiated before the upgrade will be handled normally

  ---

  Explanation

  A minimal effort upgrade is a process of upgrading the Security Gateway software without changing the configuration or policy. It is done by using the CPUSE (Check Point Update Service Engine) tool, which is available in the Gaia Portal or CLI. The CPUSE tool performs a pre-upgrade verification to check the compatibility and readiness of the system for the upgrade. If the verification passes, the CPUSE tool installs the new software package and reboots the system. During the reboot, there is a short network downtime, but it does not affect the existing connections. All connections that were initiated before the upgrade will be handled normally by the upgraded gateway. The minimal effort upgrade preserves the existing configuration and policy, so there is no need to reinstall the policy or reconfigure the gateway after

  the upgrade.

  References:

  Check Point Upgrade Path and Management Servers and Security Gateways Compatibility Maps, section "Minimal Effort Upgrade" INSTALLATION AND UPGRADE GUIDE R81, page 21-22

• Question 377:

  Which blade is responsible for detecting communication with Command & Control servers?

  A. IPS
  B. Anti-Virus
  C. Anti-Bot
  D. URL Filtering
  C. Anti-Bot

  ---

  Explanation

  Anti-Bot detects infected hosts attempting to communicate with Command & Control (C&C) servers, providing post-infection protection.

• Question 378:

  Which of the following type of authentication on Mobile Access can NOT be used as the first authentication method?

  A. Username and Password
  B. Dynamic ID
  C. RADIUS
  D. Certificate
  B. Dynamic ID

• Question 379:

  What is the port used for SmartConsole to connect to the Security Management Server?

  A. CPMI port 18191/TCP
  B. CPM port/TCP port 19009
  C. SIC port 18191/TCP
  D. https port 4434/TCP
  A. CPMI port 18191/TCP

  ---

  Explanation

  The port used for SmartConsole to connect to the Security Management Server is CPMI port 18191/TCP.

  CPMI stands for Check Point Management Interface, which is a proprietary protocol that enables secure communication between the SmartConsole and the Security Management Server. CPMI uses SSL encryption and authentication to protect the data exchange.

  References:

  Check Point Security Expert R81 Course, SK52421 - Ports used by Check Point software

• Question 380:

  You are working with multiple Security Gateways enforcing an extensive number of rules.

  To simplify security administration, which action would you choose?

  A. Eliminate all possible contradictory rules such as the Stealth or Cleanup rules.
  B. Create a separate Security Policy package for each remote Security Gateway.
  C. Create network objects that restricts all applicable rules to only certain networks.
  D. Run separate SmartConsole instances to login and configure each Security Gateway directly.
  B. Create a separate Security Policy package for each remote Security Gateway.

  ---

  Explanation

  To simplify security administration when working with multiple Security Gateways enforcing an extensive number of rules, you would choose to create a separate Security Policy package for each remote Security Gateway. A Security Policy package is a set of rules and objects that can be assigned to one or more Security Gateways. This allows you to manage different policies for different gateways from the same Management Server. The other options are either not effective or not feasible for simplifying security administration.

  References:

  Check Point R81 Security Management Administration Guide