CheckPoint Checkpoint Certifications 156-315.81 Questions & Answers

• Question 181:

  CoreXL is supported when one of the following features is enabled:

  A. Route-based VPN

  B. IPS

  C. IPv6

  D. Overlapping NAT

  Correct Answer: B

  CoreXL is supported when one of the following features is enabled: IPS. CoreXL does not support Check Point Suite with these features: Route-based VPN, IPv6, Overlapping NAT, QoS, Content Awareness, Application Control, URL Filtering, Identity Awareness, HTTPS Inspection, DLP, Anti-Bot, Anti-Virus, Threat Emulation. References: CoreXL

• Question 182:

  Your manager asked you to check the status of SecureXL, and its enabled templates and features. What command will you use to provide such information to manager?

  A. fw accel stat

  B. fwaccel stat

  C. fw acces stats

  D. fwaccel stats

  Correct Answer: B

  The fwaccel stat command displays the status of SecureXL, and its enabled templates and features. The other commands are either incorrect or incomplete. References: [SecureXL Commands]

• Question 183:

  Which Mobile Access Application allows a secure container on Mobile devices to give users access to internal website, file share and emails?

  A. Check Point Remote User

  B. Check Point Capsule Workspace

  C. Check Point Mobile Web Portal

  D. Check Point Capsule Remote

  Correct Answer: C

  Check Point Mobile Web Portal is a Mobile Access Application that allows a secure container on mobile devices to give users access to internal websites, file shares and emails. The Mobile Web Portal is a web-based application that can be accessed from any browser on any device. It provides a user-friendly interface to access various resources on the corporate network without requiring a VPN client or additional software installation. The Mobile Web Portal supports authentication methods such as user name and password, certificate, one-time password (OTP), etc. The Mobile Web Portal also supports security features such as encryption, data leakage prevention (DLP), threat prevention, etc. References: R81 Mobile Access Administration Guide

• Question 184:

  Which command would disable a Cluster Member permanently?

  A. clusterXL_admin down

  B. cphaprob_admin down

  C. clusterXL_admin down-p

  D. set clusterXL down-p

  Correct Answer: C

  The clusterXL_admin down -p command disables a Cluster Member permanently, meaning that it will not rejoin the cluster even after a reboot. The other commands either disable a Cluster Member temporarily or are invalid. References: [ClusterXL Administration Guide]

• Question 185:

  What Factor preclude Secure XL Templating?

  A. Source Port Ranges/Encrypted Connections

  B. IPS

  C. ClusterXL in load sharing Mode

  D. CoreXL

  Correct Answer: A

  SecureXL Templating is a feature that accelerates the processing of packets that belong to the same connection or session by creating a template for the first packet and applying it to the subsequent packets. SecureXL Templating is precluded by factors that prevent the creation of a template, such as source port ranges, encrypted connections, NAT, QoS, etc. References: SecureXL Mechanism

• Question 186:

  Where do you create and modify the Mobile Access policy in R81?

  A. SmartConsole

  B. SmartMonitor

  C. SmartEndpoint

  D. SmartDashboard

  Correct Answer: A

  In R81, the Mobile Access policy is created and modified in SmartConsole. SmartConsole is the management interface for configuring and managing various security policies, including Mobile Access policies. References: Check Point Certified Security Expert R81 documentation and learning resources.

• Question 187:

  You find one of your cluster gateways showing "Down" when you run the "cphaprob stat" command. You then run the "clusterXL_admin up" on the down member but unfortunately the member continues to show down. What command do you run to determine the cause?

  A. cphaprob register

  B. cphaprob report

  C. cpstat all

  D. cphaprob list

  Correct Answer: D

  To determine the cause of a cluster gateway showing "Down" despite running "clusterXL_admin up" on the down member, you can run the following command:

  

  This command will provide a list of cluster members along with their statuses and can help diagnose the issue with the down member. References: Check Point documentation or training materials related to High Availability and ClusterXL.

• Question 188:

  What is the most recommended way to install patches and hotfixes?

  A. CPUSE Check Point Update Service Engine

  B. rpm -Uv

  C. Software Update Service

  D. UnixinstallScript

  Correct Answer: A

  The most recommended way to install patches and hotfixes is CPUSE (Check Point Update Service Engine). CPUSE is a tool that automates the process of upgrading and installing software packages on Check Point devices. CPUSE can work in online mode or offline mode. Online mode requires an Internet connection to download the packages from Check Point servers. Offline mode allows you to download the packages manually from another device and transfer them to the target device using a USB drive or SCP. References: Check Point Security Expert R81 Course, CPUSE Administration Guide

• Question 189:

  When installing a dedicated R81 SmartEvent server. What is the recommended size of the root partition?

  A. Any size

  B. Less than 20GB

  C. More than 10GB and less than 20GB

  D. At least 20GB

  Correct Answer: D

  At least 20GB is the recommended size of the root partition when installing a dedicated R81 SmartEvent server. The root partition is the primary partition that contains the operating system files and other essential files for booting and running the system. The SmartEvent server requires at least 20GB of free space on the root partition to install and operate properly. If the root partition size is less than 20GB, you may encounter errors or performance issues with SmartEvent. References: Check Point Security Expert R81 Course, SmartEvent Administration Guide

• Question 190:

  How do Capsule Connect and Capsule Workspace differ?

  A. Capsule Connect provides a Layer3 VPN. Capsule Workspace provides a Desktop with usable applications.

  B. Capsule Workspace can provide access to any application.

  C. Capsule Connect provides Business data isolation.

  D. Capsule Connect does not require an installed application at client.

  Correct Answer: A

  Capsule Connect and Capsule Workspace are both components of Check Point's remote access solution, but they serve different purposes and have distinct features:

  A. Capsule Connect provides a Layer 3 VPN, which allows remote users to connect securely to their corporate network. It typically provides network-level access, allowing users to access resources on the corporate network. On the other hand, Capsule Workspace provides a secure workspace environment, including a virtual desktop with usable applications. It is more focused on providing application-level access to users in a secure manner.

  B. This statement is partially true. Capsule Workspace is designed to provide secure access to a wide range of applications and resources, not limited to specific applications.

  C. Capsule Connect does provide business data isolation by creating a secure VPN tunnel for remote users, ensuring that their network traffic is isolated from the public internet.

  D. Capsule Connect usually requires an installed application or VPN client on the client device to establish a secure connection to the corporate network. This statement is not entirely accurate because an installed application or client is typically required.

  Therefore, option A is the correct answer as it accurately distinguishes between Capsule Connect and Capsule Workspace based on their primary functionalities. References: Check Point Certified Security Expert (CCSE) R81 documentation and learning resources.