CheckPoint CCSE 156-315.81 Questions & Answers

• Question 21:

  What is "Accelerated Policy Installation"?

  A. Starting R81, the Desktop Security Policy installation process is accelerated thereby reducing the duration of the process significantly

  B. Starting R81, the QoS Policy installation process is accelerated thereby reducing the duration of the process significantly

  C. Starting R81, the Access Control Policy installation process is accelerated thereby reducing the duration of the process significantly

  D. Starting R81, the Threat Prevention Policy installation process is accelerated thereby reducing the duration of the process significantly

  Correct Answer: C

• Question 22:

  What is the best method to upgrade a Security Management Server to R81.x when it is not connected to the Internet?

  A. CPUSE offline upgrade only

  B. Advanced upgrade or CPUSE offline upgrade

  C. Advanced Upgrade only

  D. SmartUpdate offline upgrade

  Correct Answer: B

• Question 23:

  How is communication between different Check Point components secured in R81? As with all questions, select the BEST answer.

  A. By using IPSEC

  B. By using SIC

  C. By using ICA

  D. By using 3DES

  Correct Answer: B

• Question 24:

  Joey want to configure NTP on R81 Security Management Server. He decided to do this via WebUI. What is the correct address to access the Web UI for Gaia platform via browser?

  A. https://

  B. http://:443

  C. https://:10000

  D. https://:4434

  Correct Answer: A

• Question 25:

  SmartEvent uses it's event policy to identify events. How can this be customized?

  A. By modifying the firewall rulebase

  B. By creating event candidates

  C. By matching logs against exclusions

  D. By matching logs against event rules

  Correct Answer: D

• Question 26:

  You need to change the MAC-address on eth2 interface of the gateway. What command and what mode will you use to achieve this goal?

  A. set interface eth2 mac-addr 11:11:11:11:11:11; CLISH

  B. ifconfig eth1 hw 11:11:11:11:11:11; expert

  C. set interface eth2 hw-addr 11:11:11:11:11:11; CLISH

  D. ethtool -i eth2 mac 11:11:11:11:11:11; expert

  Correct Answer: A

• Question 27:

  What two ordered layers make up the Access Control Policy Layer?

  A. URL Filtering and Network

  B. Network and Threat Prevention

  C. Application Control and URL Filtering

  D. Network and Application Control

  Correct Answer: D

• Question 28:

  What state is the Management HA in when both members have different policies/databases?

  A. Synchronized

  B. Never been synchronized

  C. Lagging

  D. Collision

  Correct Answer: D

  https://sc1.checkpoint.com/documents/R77/CP_R77_SecurityManagement_WebAdminGui de/html_frameset.htm?topic=documents/R77/CP_R77_SecurityManagement_WebAdminGuid e/98838

• Question 29:

  Which of the following is NOT supported by CPUSE?

  A. Automatic download of full installation and upgrade packages

  B. Automatic download of hotfixes

  C. Installation of private hotfixes

  D. Offline installations

  Correct Answer: D

  https://sc1.checkpoint.com/documents/R77/CP_R77_Gaia_AdminWebAdminGuide/ html_frameset.htm?topic=documents/R77/CP_R77_Gaia_AdminWebAdminGuide/112109

• Question 30:

  SmartConsole R81 x requires the following ports to be open for SmartEvent.

  A. 19009, 19090 and 443

  B. 19009, 19004 and 18190

  C. 18190 and 443

  D. 19009, 18190 and 443

  Correct Answer: D