CheckPoint CCSE 156-315.81 Questions & Answers

• Question 41:

  Which components allow you to reset a VPN tunnel?

  A. vpn tu command or SmartView monitor

  B. delete vpn ike sa or vpn she11 command

  C. vpn tunnelutil or delete vpn ike sa command

  D. SmartView monitor only

  Correct Answer: D

• Question 42:

  What are the available options for downloading Check Point hotfixes in Gala WebUI (CPUSE)?

  A. Manually, Scheduled, Automatic

  B. Manually, Automatic, Disabled

  C. Manually, Scheduled, Disabled

  D. Manually, Scheduled, Enabled

  Correct Answer: A

  Reference:

  https://sc1.checkpoint.com/documents/R77/CP_R77_Gaia_AdminWebAdminGuide/ html_frameset.htm?topic=documents/R77/CP_R77_Gaia_AdminWebAdminGuide/112109

• Question 43:

  Which command is used to add users to or from existing roles?

  A. Add rba user roles

  B. Add rba user

  C. Add user roles

  D. Add user

  Correct Answer: A

• Question 44:

  Which Queue in the Priority Queue has the maximum priority?

  A. High Priority

  B. Control

  C. Routing

  D. Heavy Data Queue

  Correct Answer: C

  https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolution details=andsolutionid=sk105762

• Question 45:

  What is required for a site-to-site VPN tunnel that does not use certificates?

  A. Pre-Shared Secret

  B. RSA Token

  C. Unique Passwords

  D. SecurelD

  Correct Answer: A

• Question 46:

  Which two Identity Awareness daemons are used to support identity sharing?

  A. Policy Activation Point (PAP) and Policy Decision Point (PDP)

  B. Policy Manipulation Point (PMP) and Policy Activation Point (PAP)

  C. Policy Enforcement Point (PEP) and Policy Manipulation Point (PMP)

  D. Policy Decision Point (PDP) and Policy Enforcement Point (PEP)

  Correct Answer: D

  Source:

  https://sc1.checkpoint.com/documents/R81/WebAdminGuides/EN/CP_R81_IdentityAwaren ess_AdminGuide/Topics-IDAG/Identity-Awareness-Config-Identity-Sharing.htm

• Question 47:

  Within the Check Point Firewall Kernel resides Chain Modules, which are individually responsible for the inspection of a specific blade or feature that has been enabled in the configuration of the gateway. For Wire mode configuration, chain modules marked with _______ will not apply.

  A. ffffffff

  B. 00000001

  C. 00000002

  D. 00000003

  Correct Answer: B

• Question 48:

  The Compliance Blade allows you to search for text strings in many windows and panes, to search for a value in a field, what would your syntax be?

  A. field_name:string

  B. name field:string

  C. name_field:string

  D. field name:string

  Correct Answer: A

• Question 49:

  Which upgrade method you should use upgrading from R80.40 to R81.10 to avoid any downtime?

  A. Zero Downtime Upgrade (ZDU)

  B. Connectivity Upgrade (CU)

  C. Minimal Effort Upgrade (ME)

  D. Multi-Version Cluster Upgrade (MVC)

  Correct Answer: D

  https://sc1.checkpoint.com/documents/R81/WebAdminGuides/EN/CP_R81_Installation_an d_Upgrade_Guide/Topics-IUG/Planning-Cluster-Upgrade.htm?tocpath=Upgrade%20of%20Security%20Gateways%20and%20Clusters%7 CUpgrading%20ClusterXL%252C%20VSX%20Cluster%252C%20or%20VRRP%20Cluster %7C_____1

• Question 50:

  What component of Management is used tor indexing?

  A. DBSync

  B. API Server

  C. fwm

  D. SOLR

  Correct Answer: D

  https://sc1.checkpoint.com/documents/R80.30/WebAdminGuides/EN/CP_R80.30_Multi- DomainSecurityManagement_AdminGuide/124911.htm