CheckPoint 156-315.81 Online Practice Questions and Exam Preparation

CheckPoint 156-315.81 Online Questions & Answers

• Question 111:

  Using AD Query, the security gateway connections to the Active Directory Domain Controllers using what protocol?

  A. Windows Management Instrumentation (WMI)
  B. Hypertext Transfer Protocol Secure (HTTPS)
  C. Lightweight Directory Access Protocol (LDAP)
  D. Remote Desktop Protocol (RDP)
  A. Windows Management Instrumentation (WMI)

  ---

  Explanation/Reference:

  Windows Management Instrumentation (WMI) is a protocol that allows remote management and monitoring of Windows systems. It is used by AD Query to connect to the Active Directory Domain Controllers and query them for user and computer information. AD Query uses WMI to get real-time updates on user logon events, group membership changes, and computer status changes. WMI is not the same as LDAP, which is a protocol for accessing and modifying directory services. HTTPS and RDP are also different protocols that are not used by AD Query. References: Check Point R81 Identity Awareness Administration Guide, page 17

• Question 112:

  To fully enable Dynamic Dispatcher with Firewall Priority Queues on a Security Gateway, run the following command in Expert mode then reboot:

  A. fw ctl multik set_mode 1
  B. fw ctl Dynamic_Priority_Queue on
  C. fw ctl Dynamic_Priority_Queue enable
  D. fw ctl multik set_mode 9
  D. fw ctl multik set_mode 9

  ---

  Explanation/Reference:

  Dynamic Dispatcher is a feature that optimizes the performance of Security Gateways with multiple CPU cores by dynamically allocating traffic to different cores based on their load and priority. Firewall Priority Queues is a feature that prioritizes traffic based on its type and importance by assigning it to different queues with different weights and limits. To fully enable Dynamic Dispatcher with Firewall Priority Queues on a Security Gateway, you need to run the following command in Expert mode then reboot:

  

  This command sets the multi-core mode to 9, which means that Dynamic Dispatcher is enabled with Firewall Priority Queues. The other commands are not valid or do not enable both features. References: R81 Performance Tuning Administration Guide

• Question 113:

  To fully enable Dynamic Dispatcher on a Security Gateway:

  A. run fw ctl multik set_mode 9 in Expert mode and then Reboot.
  B. Using cpconfig, update the Dynamic Dispatcher value to "full" under the CoreXL menu.
  C. Edit/proc/interrupts to include multik set_mode 1 at the bottom of the file, save, and reboot.
  D. run fw multik set_mode 1 in Expert mode and then reboot.
  A. run fw ctl multik set_mode 9 in Expert mode and then Reboot.

  ---

  Explanation/Reference:

  To fully enable Dynamic Dispatcher on a Security Gateway, you need to run the following command in Expert mode then reboot:

  

  This command sets the multi-core mode to 9, which means that Dynamic Dispatcher is enabled without Firewall Priority Queues. Dynamic Dispatcher is a feature that optimizes the performance of Security Gateways with multiple CPU cores by dynamically allocating traffic to different cores based on their load and priority. Dynamic Dispatcher can improve the throughput and scalability of the Security Gateway, especially for traffic that is not accelerated by SecureXL. The other commands are not valid or do not enable Dynamic Dispatcher. References: R81 Performance Tuning Administration Guide

• Question 114:

  If a "ping"-packet is dropped by FW1 Policy n how many inspection Points do you see this packet in "fw monitor"?

  A. "i", "l" and "o"
  B. I don't see it in fw monitor
  C. "i" only
  D. "i" and "l"
  C. "i" only

  ---

  Explanation/Reference:

  If a "ping"-packet is dropped by FW1 Policy, you will see this packet in "fw monitor" on one inspection point only: "i". The "i" inspection point represents the inbound traffic before any rule processing. Since the packet is dropped by FW1 Policy, it will not pass through any other inspection points, such as "l" (after rule processing), "o" (outbound before rule processing), or "O" (outbound after rule processing). References: : Check Point Software, Getting Started, fw monitor.

• Question 115:

  Which option, when applied to a rule, allows traffic to VPN gateways in specific VPN communities?

  A. All Connections (Clear or Encrypted)
  B. Accept all encrypted traffic
  C. Specific VPN Communities
  D. All Site-to-Site VPN Communities
  C. Specific VPN Communities

  ---

  Explanation/Reference:

  The option that allows traffic to VPN gateways in specific VPN communities is Specific VPN Communities. This option lets you specify which VPN communities are allowed or denied by the rule. A VPN community is a group of VPN gateways or hosts that share the same VPN policy and keys. You can create different types of VPN communities, such as star, meshed, or remote access, depending on your network topology and security requirements. You can also use tags to group VPN gateways or hosts into logical categories.

• Question 116:

  Where do you create and modify the Mobile Access policy in R81?

  A. SmartConsole
  B. SmartMonitor
  C. SmartEndpoint
  D. SmartDashboard
  A. SmartConsole

  ---

  Explanation/Reference:

  In R81, the Mobile Access policy is created and modified in SmartConsole. SmartConsole is the management interface for configuring and managing various security policies, including Mobile Access policies.

  References: Check Point Certified Security Expert R81 documentation and learning resources.

• Question 117:

  Using mgmt_cli, what is the correct syntax to import a host object called Server_1 from the CLI?

  A. mgmt_cli add-host "Server_1" ip_address "10.15.123.10" --format txt
  B. mgmt_cli add host name "Server_1" ip-address "10.15.123.10" --format json
  C. mgmt_cli add object-host "Server_1" ip-address "10.15.123.10" --format json
  D. mgmt._cli add object "Server-1" ip-address "10.15.123.10" --format json
  B. mgmt_cli add host name "Server_1" ip-address "10.15.123.10" --format json

  ---

  Explanation/Reference:

  The correct syntax to import a host object using mgmt_cli is mgmt_cli add host name ip-address --format 1. The name and ip-address parameters are mandatory, while the format parameter is optional and can be either json or txt. The other options are incorrect because they either use wrong parameters, wrong hyphens, or wrong object types. References: 1: Check Point Resource Library2

• Question 118:

  The customer has about 150 remote access user with a Windows laptops. Not more than 50 Clients will be connected at the same time. The customer want to use multiple VPN Gateways as entry point and a personal firewall. What will be the best license for him?

  A. He will need Capsule Connect using MEP (multiple entry points).
  B. Because the customer uses only Windows clients SecuRemote will be sufficient and no additional license is needed
  C. He will need Harmony Endpoint because of the personal firewall.
  D. Mobile Access license because he needs only a 50 user license, license count is per concurrent user.
  C. He will need Harmony Endpoint because of the personal firewall.

  ---

  Explanation/Reference:

  Harmony Endpoint is a solution that provides comprehensive protection for endpoint devices against cyber threats. Harmony Endpoint includes a personal firewall that controls the network traffic to and from the endpoint device, based on predefined rules and policies. Harmony Endpoint also integrates with Check Point's VPN solutions to provide secure remote access to corporate resources1. Therefore, the customer will need Harmony Endpoint because of the personal firewall requirement. References: 1: Harmony Endpoint Administration Guide

• Question 119:

  What API command below creates a new host with the name "New Host" and IP address of "192.168.0.10"?

  A. new host name "New Host" ip-address "192.168.0.10"
  B. set host name "New Host" ip-address "192.168.0.10"
  C. create host name "New Host" ip-address "192.168.0.10"
  D. add host name "New Host" ip-address "192.168.0.10"
  D. add host name "New Host" ip-address "192.168.0.10"

  ---

  Explanation/Reference:

  The API command to create a new host with the name "New Host" and IP address "192.168.0.10" is:

  

  This command adds a host object with the specified name and IP address to the Check Point configuration. References: Check Point documentation or training materials related to API commands.

• Question 120:

  Check Point ClusterXL Active/Active deployment is used when:

  A. Only when there is Multicast solution set up.
  B. There is Load Sharing solution set up.
  C. Only when there is Unicast solution set up.
  D. There is High Availability solution set up.
  B. There is Load Sharing solution set up.

  ---

  Explanation/Reference:

  Check Point ClusterXL Active/Active deployment is used when there is Load Sharing solution set up. Load Sharing is a ClusterXL mode that allows distributing the network traffic between all cluster members, while still providing high availability in case of failures. Load Sharing can be configured as either Unicast or Multicast, depending on the network topology and switches support. References: R81 ClusterXL Administration Guide, page 9.