CheckPoint 156-315.81.20 Online Practice Questions and Exam Preparation

CheckPoint 156-315.81.20 Online Questions & Answers

• Question 461:

  Which command is used to set the CCP protocol to Multicast?

  A. cphaprob set_ccp multicast
  B. cphaconf set_ccp multicast
  C. cphaconf set_ccp no_broadcast
  D. cphaprob set_ccp no_broadcast
  B. cphaconf set_ccp multicast

  ---

  Explanation

  The cphaconf set_ccp multicast command is used to set the Cluster Control Protocol (CCP) to Multicast mode. This mode allows cluster members to communicate with each other using multicast packets. The other commands are either incorrect or set the CCP to Broadcast mode.

  References:

  ClusterXL Administration Guide

• Question 462:

  SecureXL improves non-encrypted firewall traffic throughput and encrypted VPN traffic throughput.

  A. True, because SecureXL does improve all traffic
  B. True, because SecureXL does improve this traffic
  C. False, because encrypted traffic cannot be inspected
  D. False, because SecureXL does not improve this traffic but CoreXL does
  B. True, because SecureXL does improve this traffic

• Question 463:

  Rugged appliances are small appliances with ruggedized hardware and like Quantum Spark appliance they use which operating system?

  A. Centos Linux
  B. Gaia embedded.
  C. Gaia
  D. Red Hat Enterprise Linux version 5
  B. Gaia embedded.

  ---

  Explanation

  Rugged appliances are small appliances with ruggedized hardware that are designed for harsh environments. Like Quantum Spark appliances, they use Gaia embedded as their operating system. Gaia embedded is a lightweight version of Gaia that supports a subset of features and commands.

  References:

  [Check Point R81 Gaia Embedded Administration Guide]

• Question 464:

  What is the SandBlast Agent designed to do?

  A. Performs OS-level sandboxing for SandBlast Cloud architecture
  B. Ensure the Check Point SandBlast services is running on the end user's system
  C. If malware enters an end user's system, the SandBlast Agent prevents the malware from spreading with the network
  D. Clean up email sent with malicious attachments
  C. If malware enters an end user's system, the SandBlast Agent prevents the malware from spreading with the network

  ---

  Explanation

  The SandBlast Agent is designed to prevent malware from spreading within the network if it enters an end user's system. SandBlast Agent is a lightweight endpoint security solution that protects devices from advanced threats such as ransomware, phishing, zero-day attacks, and data exfiltration. SandBlast Agent uses various technologies such as behavioral analysis, anti-exploitation, anti-ransomware, threat emulation, threat extraction, and forensics to detect and block malware before it can harm the device or the network. The other options are either not the main purpose or not the functionality of SandBlast Agent.

• Question 465:

  What processes does CPM control?

  A. Object-Store, Database changes, CPM Process and web-services
  B. web-services, CPMI process, DLEserver, CPM process
  C. DLEServer, Object-Store, CP Process and database changes
  D. web_services, dle_server and object_Store
  D. web_services, dle_server and object_Store

  ---

  Explanation

  CPM stands for Check Point Management, which is a process that runs on the Security Management server and controls the management operations, such as policy installation, object creation, configuration backup, etc. CPM also controls other processes that are related to the management functions, such as: web_services: This process is responsible for providing web services for the communication between SmartConsole and the Security Management server. It handles requests from SmartConsole clients and forwards them to CPM or other processes. dle_server: This process is responsible for managing the log files and indexes. It handles queries from SmartLog and SmartEvent and provides log data to CPM or other processes.

  object_Store: This process is responsible for storing and retrieving objects from the database. It handles requests from CPM or other processes and provides object data. Therefore, the correct answer is Option

  D. The other options are incorrect because: Option A: Object-Store, Database changes, CPM Process and web-services: This option includes some processes that are controlled by CPM, such as Object-Store, CPM Process, and web-services, but it also includes Database changes, which is not a process but an action performed by CPM or other processes. Option B: web-services, CPMI process, DLEserver, CPM process: This option includes some processes that are controlled by CPM, such as web-services, DLEserver, and CPM process, but it also includes CPMI process, which is not a process but a protocol used by CPM or other processes to communicate with each other. Option C: DLEServer, Object-Store, CP Process and database changes: This option includes some processes that are controlled by CPM, such as DLEServer and Object-Store, but it also includes CP Process and database changes, which are not processes but a generic term for any Check Point process and an action performed by CPM or other processes respectively.

  References:

  Check Point Processes and Daemons, Check Point Processes Cheat Sheet, Check Point Firewall Security Solution

• Question 466:

  Which of the following is true regarding the Proxy ARP feature for Manual NAT?

  A. The local.arp file must always be configured
  B. Automatic proxy ARP configuration can be enabled
  C. fw ctl proxy should be configured
  D. Translate Destination on Client Side should be configured
  B. Automatic proxy ARP configuration can be enabled

• Question 467:

  Which command shows the current connections distributed by CoreXL FW instances?

  A. fw ctl iflist
  B. fw ctl instances -v
  C. fw ctl multik stat
  D. fw ctl affinity -1
  C. fw ctl multik stat

• Question 468:

  What is false regarding prerequisites for the Central Deployment usage?

  A. The Security Gateway must have a policy installed
  B. The administrator must have write permission on SmartUpdate
  C. No need to establish SIC between gateways and the management server, since the CDT tool will take care about SIC automatically
  D. Security Gateway must have the latest CPUSE Deployment Agent
  C. No need to establish SIC between gateways and the management server, since the CDT tool will take care about SIC automatically

• Question 469:

  Alice & Bob are going to deploy Management Data Plane Separation (MDPS) for all their Check Point Security Gateway(s)/Cluster(s).

  Which of the following statement is true?

  A. Data Plane - To access, provision and monitor the Security Gateway
  B. Management Plane - for all other network traffic and processing
  C. Each network environment is dependent and includes interfaces, routes, sockets, and processes
  D. Management Plane - To access, provision and monitor the Security Gateway
  D. Management Plane - To access, provision and monitor the Security Gateway

• Question 470:

  In SmartConsole, objects are used to represent physical and virtual network components and also some logical components. These objects are divided into several categories.

  Which of the following is NOT an objects category?

  A. Limit
  B. Resource
  C. Custom Application / Site
  D. Network Object
  B. Resource

  ---

  Explanation

  Resource is not an objects category in SmartConsole. Objects are used to represent physical and virtual network components and also some logical components. These objects are divided into several categories, such as Network Object, Host, Gateway, Service, Time Object, Custom Application / Site, Limit, and Group. A resource is a type of object that represents an application or content that is accessible through HTTP or HTTPS protocols. A resource can be used to define access rules for users who connect through Identity Awareness or Mobile Access blades.