CheckPoint 156-315.81.20 Online Practice Questions and Exam Preparation

CheckPoint 156-315.81.20 Online Questions & Answers

• Question 491:

  Which feature accelerates traffic processing by using templates?

  A. CoreXL
  B. SecureXL
  C. IPS
  D. ClusterXL
  B. SecureXL

  ---

  Explanation

  SecureXL uses templating to accelerate packet processing by applying previously learned decisions to new packets in the same flow.

• Question 492:

  What are the types of Software Containers?

  A. Three; security management, Security Gateway, and endpoint security
  B. Three; Security Gateway, endpoint security, and gateway management
  C. Two; security management and endpoint security
  D. Two; endpoint security and Security Gateway
  A. Three; security management, Security Gateway, and endpoint security

  ---

  Explanation

  References:

  The Software Container is a logical component in the Software Blade Architecture. There are three types of Software Containers: Security Management, Security Gateway, and Endpoint Security. The container enables the server functionality, and defines its purpose - e.g, management or gateway. (https://downloads.checkpoint.com/dc/download.htm?ID=11608)

• Question 493:

  Which command is used to capture packets at multiple inspection points in the firewall?

  A. tcpdump
  B. fw monitor
  C. cpview
  D. fw ctl zdebug
  B. fw monitor

  ---

  Explanation

  The fw monitor tool captures packets at different inspection points within the firewall kernel, making it a powerful troubleshooting tool for traffic flow issues.

• Question 494:

  Which of the following is NOT an alert option?

  A. SNMP
  B. High alert
  C. Mail
  D. User defined alert
  B. High alert

  ---

  Explanation

  High alert is not an alert option in Check Point. Alert options are ways to notify the administrator or other parties when a security event occurs. The available alert options are SNMP, Mail, User defined alert, Log, Popup alert, and User alert.

  References:

  Training & Certification | Check Point Software, Check Point Resource Library

• Question 495:

  Which command shows VPN tunnel status?

  A. vpn tu
  B. fw stat
  C. cpstat vpn
  D. netstat
  A. vpn tu

  ---

  Explanation

  The vpn tu command is used to manage and view VPN tunnel status.

• Question 496:

  The Firewall Administrator is required to create 100 new host objects with different IP addresses.

  What API command can he use in the script to achieve the requirement?

  A. add hostname ip-address
  B. set hostname ip-address
  C. set host name ip-address
  D. mgmt_cli-m add host name ip-address
  D. mgmt_cli-m add host name ip-address

• Question 497:

  What are the three components for Check Point Capsule?

  A. Capsule Docs, Capsule Cloud, Capsule Connect
  B. Capsule Workspace, Capsule Cloud, Capsule Connect
  C. Capsule Workspace, Capsule Docs, Capsule Connect
  D. Capsule Workspace, Capsule Docs, Capsule Cloud
  D. Capsule Workspace, Capsule Docs, Capsule Cloud

  ---

  Explanation

  The three components for Check Point Capsule are Capsule Workspace, Capsule Docs, and Capsule Cloud. Capsule Workspace is a secure container app that allows users to access corporate data and applications from their mobile devices. Capsule Docs is a solution that protects documents with encryption and granular access control. Capsule Cloud is a cloud-based security service that enforces security policies on devices that are outside the corporate network.

  References:

  Check Point Capsule

• Question 498:

  Check Point APIs allow system engineers and developers to make changes to their organization's security policy with CLI tools and Web Services for all the following except:

  A. Create new dashboards to manage 3rd party task
  B. Create products that use and enhance 3rd party solutions
  C. Execute automated scripts to perform common tasks
  D. Create products that use and enhance the Check Point Solution
  A. Create new dashboards to manage 3rd party task

  ---

  Explanation

  Check Point APIs let system administrators and developers make changes to the security policy with CLI tools and web-services. You can use an API to:

  1. Use an automated script to perform common tasks 2. Integrate Check Point products with 3rd party solutions

  3. Create products that use and enhance the Check Point solution

• Question 499:

  Which packet info is masked with Session Rate Acceleration?

  A. source ip
  B. source port ranges
  C. source port
  D. same info from Packet Acceleration is used
  D. same info from Packet Acceleration is used

• Question 500:

  How many layers make up the TCP/IP model?

  A. 2
  B. 7
  C. 6
  D. 4
  D. 4

  ---

  Explanation

  The TCP/IP model is a four-layer model that describes how data is transmitted over a network. The four layers are: Application, Transport, Internet, and Network Access. The Application layer provides services and protocols for applications to communicate with each other. The Transport layer provides reliable or unreliable data delivery between hosts. The Internet layer provides routing and addressing of packets across networks. The Network Access layer provides physical and logical access to the network media.

  References:

  Training & Certification | Check Point Software, Check Point Resource Library