CheckPoint CCSE 156-315.81 Questions & Answers

• Question 11:

  What should the admin do in case the Primary Management Server is temporary down?

  A. Use the VIP in SmartConsole you always reach the active Management Server.

  B. The Secondary will take over automatically Change the IP in SmartConsole to logon to the private IP of the Secondary Management Server.

  C. Run the 'promote_util' to activate the Secondary Management server

  D. Logon with SmartConsole to the Secondary Management Server and choose "Make Active' under Actions in the HA Management Menu

  Correct Answer: A

• Question 12:

  John detected high load on sync interface. Which is most recommended solution?

  A. For FTP connections ?do not sync

  B. Add a second interface to handle sync traffic

  C. For short connections like http service ?do not sync

  D. For short connections like icmp service ?delay sync for 2 seconds

  Correct Answer: A

• Question 13:

  Can Check Point and Third-party Gateways establish a certificate-based Site-to-Site VPN tunnel?

  A. Yes, but they need to have a mutually trusted certificate authority

  B. Yes, but they have to have a pre-shared secret key

  C. No, they cannot share certificate authorities

  D. No, Certificate based VPNs are only possible between Check Point devices

  Correct Answer: A

• Question 14:

  Due to high CPU workload on the Security Gateway, the security administrator decided to purchase a new CPU to replace the existing single core CPU. After installation, is the administrator required to perform any additional tasks?

  A. Go to clash-Run cpstop | Run cpstart

  B. Go to clash-Run cpconfig | Configure CoreXL to make use of the additional Cores | Exit cpconfig | Reboot Security Gateway

  C. Administrator does not need to perform any task. Check Point will make use of the newly installed CPU and Cores

  D. Go to clash-Run cpconfig | Configure CoreXL to make use of the additional Cores | Exit cpconfig | Reboot Security Gateway | Install Security Policy

  Correct Answer: B

• Question 15:

  What is the command switch to specify the Gaia API context?

  A. You have to specify it in the YAML file api.yml which is located underneath the /etc directory of the security management server

  B. You have to change to the zsh-Shell which defaults to the Gaia API context.

  C. No need to specify a context, since it defaults to the Gaia API context.

  D. mgmt_cli --context gaia_api

  Correct Answer: D

• Question 16:

  To find records in the logs that shows log records from the Application and URL Filtering Software Blade where traffic was dropped, what would be the query syntax?

  A. blada: application control AND action:drop

  B. blade."application control AND action;drop

  C. (blade: application control AND action;drop)

  D. blade;"application control AND action:drop

  Correct Answer: D

• Question 17:

  How can you switch the active log file?

  A. Run fw logswitch on the gateway

  B. Run fwm logswitch on the Management Server

  C. Run fwm logswitch on the gateway

  D. Run fw logswitch on the Management Server

  Correct Answer: D

  https://sc1.checkpoint.com/documents/R81/WebAdminGuides/EN/CP_R81_NextGenSecur ityGateway_Guide/Topics-FWG/CLI/fw-logswitch.htm

• Question 18:

  DLP and Geo Policy are examples of what type of Policy?

  A. Standard Policies

  B. Shared Policies

  C. Inspection Policies

  D. Unified Policies

  Correct Answer: B

• Question 19:

  The log server sends what to the Correlation Unit?

  A. Authentication requests

  B. CPMI dbsync

  C. Logs

  D. Event Policy

  Correct Answer: C

• Question 20:

  Which one is not a valid Package Option In the Web GUI for CPUSE?

  A. Clean Install

  B. Export Package

  C. Upgrade

  D. Database Conversion to R81.10 only

  Correct Answer: B