CheckPoint Checkpoint Certifications 156-315.81 Questions & Answers

• Question 111:

  You noticed that CPU cores on the Security Gateway are usually 100% utilized and many packets were dropped. You don't have a budget to perform a hardware upgrade at this time. To optimize drops you decide to use Priority Queues and fully enable Dynamic Dispatcher. How can you enable them?

  A. fw ctl multik dynamic_dispatching on

  B. fw ctl multik dynamic_dispatching set_mode 9

  C. fw ctl multik set_mode 9

  D. fw ctl multik pq enable

  Correct Answer: C

  To optimize drops you decide to use Priority Queues and fully enable Dynamic Dispatcher. You can enable them by using the command fw ctl multik set_mode

  9. This command sets the SecureXL mode to 9, which means that Priority Queues are enabled and Dynamic Dispatcher is fully enabled. References: SecureXL Mechanism

• Question 112:

  Identify the API that is not supported by Check Point currently.

  A. R81 Management API

  B. Identity Awareness Web Services API

  C. Open REST API

  D. OPSEC SDK

  Correct Answer: C

  Check Point currently supports four types of APIs: R81 Management API, Identity Awareness Web Services API, OPSEC SDK, and Gaia REST API. The Open REST API is not a valid option. References: Check Point APIs

• Question 113:

  CPM process stores objects, policies, users, administrators, licenses and management data in a database. The database is:

  A. MySQL

  B. Postgres SQL

  C. MarisDB

  D. SOLR

  Correct Answer: B

  CPM process stores objects, policies, users, administrators, licenses and management data in a Postgres SQL database. This database is located in $FWDIR/conf and can be accessed using the pg_client command2. The other options are not the correct database type for CPM. References: Check Point R81 Security Management Administration Guide

• Question 114:

  Which is NOT an example of a Check Point API?

  A. Gateway API

  B. Management API

  C. OPSC SDK

  D. Threat Prevention API

  Correct Answer: A

  Gateway API is not an example of a Check Point API. Check Point APIs are interfaces that enable interactions with Check Point products using automation scripts or external applications. The examples of Check Point APIs are Management API, OPSEC SDK, Threat Prevention API, Identity Awareness Web Services API, and others4. Gateway API is not a valid Check Point API name. References: Check Point R81 Security Management Administration Guide, Check Point APIs

• Question 115:

  Which of the following type of authentication on Mobile Access can NOT be used as the first authentication method?

  A. Dynamic ID

  B. RADIUS

  C. Username and Password

  D. Certificate

  Correct Answer: A

• Question 116:

  Connections to the Check Point R81 Web API use what protocol?

  A. HTTPS

  B. RPC

  C. VPN

  D. SIC

  Correct Answer: A

  Connections to the Check Point R81 Web API use the HTTPS protocol. The Web API is a RESTful web service that allows you to perform management tasks on the Security Management Server using HTTP requests. References: Check Point Management APIs

• Question 117:

  To fully enable Dynamic Dispatcher with Firewall Priority Queues on a Security Gateway, run the following command in Expert mode then reboot:

  A. fw ctl multik set_mode 1

  B. fw ctl Dynamic_Priority_Queue on

  C. fw ctl Dynamic_Priority_Queue enable

  D. fw ctl multik set_mode 9

  Correct Answer: D

  Dynamic Dispatcher is a feature that optimizes the performance of Security Gateways with multiple CPU cores by dynamically allocating traffic to different cores based on their load and priority. Firewall Priority Queues is a feature that prioritizes traffic based on its type and importance by assigning it to different queues with different weights and limits. To fully enable Dynamic Dispatcher with Firewall Priority Queues on a Security Gateway, you need to run the following command in Expert mode then reboot:

  

  This command sets the multi-core mode to 9, which means that Dynamic Dispatcher is enabled with Firewall Priority Queues. The other commands are not valid or do not enable both features. References: R81 Performance Tuning Administration Guide

• Question 118:

  fwssd is a child process of which of the following Check Point daemons?

  A. fwd

  B. cpwd

  C. fwm

  D. cpd

  Correct Answer: A

  fwssd is a child process of fwd, which is the firewall daemon that handles policy installation, logging, and state synchronization. cpwd is the watchdog process that monitors and restarts other processes. fwm is the management server process that handles communication with GUI clients. cpd is the infrastructure daemon that handles SIC, licensing, and policy code generation. References: Check Point Processes Cheat Sheet ?LazyAdmins, Check Point R81 Gaia Administration Guide, Certified Security Expert (CCSE) R81.20 Course Overview

• Question 119:

  Which command shows actual allowed connections in state table?

  A. fw tab StateTable

  B. fw tab connections

  C. fw tab connection

  D. fw tab connections

  Correct Answer: B

  The correct command to show actual allowed connections in the state table is option B: fw tab connections. This command displays the contents of the "connections" table, which contains information about the active connections being

  tracked by the firewall.

  Option A (fw tab StateTable) is incorrect as there is no "StateTable" table; it should be "connections."

  Option C (fw tab connection) is also incorrect, as it should be "connections." Option D (fw tab connections) is not the correct syntax for the command.

  References: Check Point Certified Security Expert (CCSE) R81 documentation and learning resources.

• Question 120:

  Which method below is NOT one of the ways to communicate using the Management API's?

  A. Typing API commands using the "mgmt_cli" command

  B. Typing API commands from a dialog box inside the SmartConsole GUI application

  C. Typing API commands using Gaia's secure shell(clish)19+

  D. Sending API commands over an http connection using web-services

  Correct Answer: D

  The Management API supports three methods of communication: mgmt_cli command, SmartConsole GUI dialog box, and Gaia CLI. Sending API commands over an http connection using web-services is not a supported method. References: Check Point Management APIs