CheckPoint 156-315.81.20 Online Practice Questions and Exam Preparation

CheckPoint 156-315.81.20 Online Questions & Answers

• Question 31:

  Which options are given on features, when editing a Role on Gaia Platform?

  A. Read/Write, Read Only
  B. Read/Write, Read Only, None
  C. Read/Write, None
  D. Read Only, None
  B. Read/Write, Read Only, None

  ---

  Explanation

  The options that are given on features, when editing a Role on Gaia Platform are Read/Write, Read Only, and None. These options determine the level of access that a user has to a specific feature or command in Gaia. If a user has Read/ Write access to a feature, they can view and modify the settings of that feature. If a user has Read Only access to a feature, they can only view the settings of that feature, but not change them. If a user has None access to a feature, they cannot view or modify the settings of that feature.

• Question 32:

  Capsule Connect and Capsule Workspace both offer secure connections for remote users using mobile devices. However, there are differences between the two.

  Which of the following statements correctly identify each product's capabilities?

  A. Workspace supports iOS, Android, and Windows Phone 8, whereas Connect supports iOS and Android only
  B. For compliance/host checking, Workspace offers MDM cooperative enforcement, whereas Connect offers both jailbreak/root detection and MDM cooperative enforcement
  C. For credential protection, Connect supports One-Time Password (OTP) authentication, while Workspace supports both OTP and Single Sign-On (SSO) for supported applications.
  D. Workspace supports any application, whereas Connect supports a limited number of application types
  C. For credential protection, Connect supports One-Time Password (OTP) authentication, while Workspace supports both OTP and Single Sign-On (SSO) for supported applications.

  ---

  Explanation

  Capsule Connect provides secure network-level VPN connectivity for mobile devices and supports standard authentication methods such as One-Time Password (OTP).

  Capsule Workspace provides application-level secure containerization and supports both OTP and Single Sign-On (SSO) for supported enterprise applications, enabling a more seamless and integrated user experience.

  The key difference is that Workspace is designed for secure access to enterprise applications with enhanced identity integration, while Connect focuses on network-level VPN access.

• Question 33:

  When Dynamic Dispatcher is enabled, connections are assigned dynamically with the exception of:

  A. Threat Emulation
  B. HTTPS
  C. QOS
  D. VoIP
  D. VoIP

  ---

  Explanation

  When Dynamic Dispatcher is enabled, it dynamically assigns connections, but there are exceptions. The exception mentioned in the question is:

  VoIP (Option D): VoIP connections are an exception when Dynamic Dispatcher is enabled. They are not assigned dynamically but follow a different rule set to ensure quality and reliability for VoIP traffic. The other options, Option A,

  Option B and Option C are dynamically assigned when Dynamic Dispatcher is enabled.

  References:

  Check Point Certified Security Expert (CCSE) R81 training materials and documentation.

• Question 34:

  How would you deploy TE250X Check Point appliance just for email traffic and in-line mode without a Check Point Security Gateway?

  A. Install appliance TE250X on SpanPort on LAN switch in MTA mode.
  B. Install appliance TE250X in standalone mode and setup MTA.
  C. You can utilize only Check Point Cloud Services for this scenario.
  D. It is not possible, always Check Point SGW is needed to forward emails to SandBlast appliance.
  C. You can utilize only Check Point Cloud Services for this scenario.

  ---

  Explanation

  To deploy a TE250X Check Point appliance just for email traffic and in-line mode without a Check Point Security Gateway, you can utilize Check Point Cloud Services. In this scenario, you can leverage cloud-based email security services provided by Check Point without the need for an on-premises Security Gateway. Option C correctly states that you can use only Check Point Cloud Services for this scenario, making it the verified answer.

  References:

  Check Point Certified Security Expert (CCSE) R81 documentation and learning resources.

• Question 35:

  You are investigating issues with to gateway cluster members are not able to establish the first initial cluster synchronization.

  What service is used by the FWD daemon to do a Full Synchronization?

  A. TCP port 443
  B. TCP port 257
  C. TCP port 256
  D. UDP port 8116
  C. TCP port 256

  ---

  Explanation

  The FWD daemon uses TCP port 256 to do a Full Synchronization between gateway cluster members.

  This port is also used for other synchronization types, such as Delta Synchronization and Accelerated Synchronization. The FWD daemon is responsible for synchronizing the connections table, NAT table, and VPN keys between cluster members.

  ClusterXL Administration Guide, SK25977 - Ports Used by Check Point Software

• Question 36:

  NAT rules are prioritized in which order?

  1. Automatic Static NAT

  2. Automatic Hide NAT

  3. Manual/Pre-Automatic NAT

  4. Post-Automatic/Manual NAT rules

  A. 1, 2, 3, 4
  B. 1, 4, 2, 3
  C. 3, 1, 2, 4
  D. 4, 3, 1, 2
  A. 1, 2, 3, 4

  ---

  Explanation

  NAT rules are prioritized in the following order: Automatic Static NAT: This is the highest priority NAT rule and it translates the source or destination IP address to a different IP address without changing the port number. It is configured in the network object properties. Automatic Hide NAT: This is the second highest priority NAT rule and it translates the source IP address and port number to a different IP address and port number. It is configured in the network object properties. Manual/Pre-Automatic NAT: This is the third highest priority NAT rule and it allows you to create custom NAT rules that are not possible with automatic NAT. It is configured in the NAT policy rulebase before the automatic NAT rules. Post- Automatic/Manual NAT rules: This is the lowest priority NAT rule and it allows you to create custom NAT rules that are not possible with automatic NAT. It is configured in the NAT policy rulebase after the automatic NAT rules.

• Question 37:

  Fill in the blank: Identity Awareness AD-Query is using the Microsoft _______________ API to learn users from AD.

  A. WMI
  B. Eventvwr
  C. XML
  D. Services.msc
  A. WMI

  ---

  Explanation

  Identity Awareness AD-Query is using the Microsoft WMI API to learn users from AD. WMI stands for Windows Management Instrumentation, and it is an API that allows remote management and monitoring of Windows systems. Identity Awareness AD-Query is a feature that enables the Security Gateway to query Active Directory servers for user and computer information, such as login events, group membership, and IP addresses. By using the WMI API, Identity Awareness AD-Query can receive real-time notifications from Active Directory servers without installing any agents or scripts on them.

• Question 38:

  Which member of a high-availability cluster should be upgraded first in a Zero downtime upgrade?

  A. The Standby Member
  B. The Active Member
  C. The Primary Member
  D. The Secondary Member
  A. The Standby Member

  ---

  Explanation

  In a Zero downtime upgrade, you should upgrade the Standby Member first. This is because the Standby Member does not process traffic and can be upgraded without affecting the cluster availability. After upgrading the Standby Member, you can perform a failover and make it the Active Member. Then you can upgrade the original Active Member, which becomes the Standby Member after the failover.

  References:

  Getting Started - Check Point Software, section "Upgrading Cluster Members with Zero Downtime"

• Question 39:

  While using the Gaia CLI, what is the correct command to publish changes to the management server?

  A. json publish
  B. mgmt publish
  C. mgmt._clicommit
  D. commit
  B. mgmt publish

• Question 40:

  As a valid Mobile Access Method, what feature provides Capsule Connect/VPN?

  A. That is used to deploy the mobile device as a generator of one-time passwords for authenticating to an RSA Authentication Manager.
  B. Fill Layer4 VPN -SSL VPN that gives users network access to all mobile applications.
  C. Full Layer3 VPN -IPSec VPN that gives users network access to all mobile applications.
  D. You can make sure that documents are sent to the intended recipients only.
  C. Full Layer3 VPN -IPSec VPN that gives users network access to all mobile applications.

  ---

  Explanation

  The feature that provides Full Layer3 VPN -IPSec VPN, giving users network access to all mobile applications, is the correct answer. Capsule Connect/VPN is used to establish secure VPN connections for mobile devices, and the Full Layer3 VPN (IPSec VPN) option provides comprehensive network access.

  References:

  Check Point documentation or training materials related to Mobile Access Methods and VPN configurations.