CheckPoint CCSE 156-315.81 Questions & Answers

• Question 31:

  You had setup the VPN Community VPN-Stores'with 3 gateways. There are some issues with one remote gateway(1.1.1.1) and an your local gateway. What will be the best log filter to see only the IKE Phase 2 agreed networks for both gateways?

  A. action:"Key Install" AND 1.1.1.1 AND Main Mode

  B. action:"Key Install- AND 1.1.1.1 ANDQuick Mode

  C. Blade:"VPN" AND VPN-Stores AND Main Mode

  D. Blade:"VPN" AND VPN-Stores AND Quick Mode

  Correct Answer: C

• Question 32:

  Which software blade does NOT accompany the Threat Prevention policy?

  A. Anti-virus

  B. IPS

  C. Threat Emulation

  D. Application Control and URL Filtering

  Correct Answer: D

• Question 33:

  Which command lists firewall chain?

  A. fwctl chain

  B. fw list chain

  C. fw chain module

  D. fw tab -t chainmod

  Correct Answer: A

  https://sc1.checkpoint.com/documents/R81/WebAdminGuides/EN/CP_R81_NextGenSecur ityGateway_Guide/Topics-FWG/CLI/fw-ctl-chain.htm#:~:text=Shows%20the%20list%20of%20Firewall%20Chain%20Modules.

• Question 34:

  An established connection is going to www.google.com. The Application Control Blade Is inspecting the traffic. If SecureXL and CoreXL are both enabled, which path is handling the traffic?

  A. Slow Path

  B. Fast Path

  C. Medium Path

  D. Accelerated Path

  Correct Answer: D

• Question 35:

  When Identity Awareness is enabled, which identity source(s) is(are) used for Application Control?

  A. RADIUS

  B. Remote Access and RADIUS

  C. AD Query

  D. AD Query and Browser-based Authentication

  Correct Answer: D

  Identity Awareness gets identities from these acquisition sources:

• Question 36:

  What is Dynamic Balancing?

  A. It is a ClusterXL feature that switches an HA cluster into an LS cluster if required to maximize throughput

  B. It is a feature that uses a daemon to balance the required number of firewall instances and SNDs based on the current load

  C. It is a new feature that is capable of dynamically reserve the amount of Hash kernel memory to reflect the resource usage necessary for maximizing the session rate.

  D. It is a CoreXL feature that assigns the SND to network interfaces to balance the RX Cache of the interfaces

  Correct Answer: B

• Question 37:

  The back end database for Check Point R81 Management uses:

  A. DBMS

  B. MongoDB

  C. PostgreSQL

  D. MySQL

  Correct Answer: C

• Question 38:

  What is the correct description for the Dynamic Balancing / Split feature?

  A. Dynamic Balancing / Split dynamically change the number of SND's and firewall instances based on the current load. It is only available on Quantum Appliances and Open Server (not on Quantum Spark)

  B. Dynamic Balancing / Split dynamically distribute the traffic from one network interface to multiple SND's. The interface must support Multi-Queue. It is only available on Quantum Appliances and Open Server (not on Quantum Spark)

  C. Dynamic Balancing / Split dynamically distribute the traffic from one network interface to multiple SND's. The interface must support Multi-Queue. It is only available on Quantum Appliances (not on Quantum Spark or Open Server)

  D. Dynamic Balancing / Split dynamically change the number of SND's and firewall instances based on the current load. It is only available on Quantum Appliances (not on Quantum Spark or Open Server)

  Correct Answer: D

• Question 39:

  What is false regarding prerequisites for the Central Deployment usage?

  A. The administrator must have write permission on SmartUpdate

  B. Security Gateway must have the latest CPUSE Deployment Agent

  C. No need to establish SIC between gateways and the management server, since the CDT tool will take care about SIC automatically.

  D. The Security Gateway must have a policy installed

  Correct Answer: C

  Explanation: Establishing SIC between gateways and the management server is a prerequisite for Central Deployment usage, as the CDT tool will not take care of this automatically. The administrator must have write permission on SmartUpdate, the Security Gateway must have the latest CPUSE Deployment Agent, and the Security Gateway must have a policy installed.

• Question 40:

  Alice and Bob are going to deploy Management Data Plane Separation (MDPS) for all their Check Point Security Gateway(s)/Cluster(s). Which of the following statement is true?

  A. Each network environment is dependent and includes interfaces, routes, sockets, and processes

  B. Management Plane -To access, provision and monitor the Security Gateway

  C. Data Plane -To access, provision and monitor the Security Gateway

  D. Management Plane -for all other network traffic and processing

  Correct Answer: B

  https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolution details=andsolutionid=sk138672