CheckPoint 156-915.80 Online Practice Questions and Exam Preparation

CheckPoint 156-915.80 Online Questions & Answers

• Question 301:

  Which features are only supported with R80.10 Gateways but not R77.x?

  A. Access Control policy unifies the Firewall, Application Control and URL Filtering, Data Awareness, and Mobile Access Software Blade policies.
  B. Limits the upload and download throughput for streaming media in the company to 1 Gbps.
  C. The rule base can be built of layers, each containing a set of the security rules. Layers are inspected in the order in which they are defined, allowing control over the rule base flow and which security functionalities take precedence.
  D. Time object to a rule to make the rule active only during specified times.
  C. The rule base can be built of layers, each containing a set of the security rules. Layers are inspected in the order in which they are defined, allowing control over the rule base flow and which security functionalities take precedence.

• Question 302:

  Fill in the blank. To verify the SecureXL status, you would enter command _____________ .

  fwaccel stat

• Question 303:

  Fill in the blank. To remove site-to-site IKE and IPSEC keys you would enter command ____ ___ and select the option to delete all IKE and IPSec SA's.

  vpn tu

• Question 304:

  What makes Anti-Bot unique compared to other Threat Prevention mechanisms, such as URL Filtering, Anti-Virus, IPS, and Threat Emulation?

  A. Anti-Bot is the only countermeasure against unknown malware
  B. Anti-Bot is the only protection mechanism which starts a counter-attack against known Command and Control Centers
  C. Anti-Bot is the only signature-based method of malware protection
  D. Anti-Bot is a post-infection malware protection to prevent a host from establishing a connection to a Command and Control Center
  D. Anti-Bot is a post-infection malware protection to prevent a host from establishing a connection to a Command and Control Center

• Question 305:

  Which of the following is a new R80.10 Gateway feature that had not been available in R77.X and older?

  A. The rule base can be built of layers, each containing a set of the security rules. Layers are inspected in the order in which they are defined, allowing control over the rule base flow and which security functionalities take precedence.
  B. Limits the upload and download throughout for streaming media in the company to 1 Gbps.
  C. Time object to a rule to make the rule active only during specified times.
  D. Sub Policies are sets of rules that can be created and attached to specific rules. If the rule is matched, inspection will continue in the sub policy attached to it rather than in the next rule
  A. The rule base can be built of layers, each containing a set of the security rules. Layers are inspected in the order in which they are defined, allowing control over the rule base flow and which security functionalities take precedence.

• Question 306:

  NAT rules are prioritized in which order?

  1.

  Automatic Static NAT

  2.

  Automatic Hide NAT

  3.

  Manual/Pre-Automatic NAT

  4.

  Post-Automatic/Manual NAT rules

  A. 1, 2, 3, 4
  B. 1, 4, 2, 3
  C. 3, 1, 2, 4
  D. 4, 3, 1, 2
  C. 3, 1, 2, 4

• Question 307:

  An internal host initiates a session to the Google.com website and is set for Hide NAT behind the Security Gateway. The initiating traffic is an example of __________.

  A. client side NAT
  B. source NAT
  C. destination NAT
  D. None of these
  B. source NAT

• Question 308:

  Tom has been tasked to install Check Point R80 in a distributed deployment. Before Tom installs the systems this way, how many machines will be need if he does NOT include a SmartConsole machine in his calculations?

  A. One machine, but it needs to be installed using SecurePlatform for compatibility purposes.
  B. One machine
  C. Two machines
  D. Three machines
  C. Two machines

• Question 309:

  How would you deploy TE250X Check Point appliance just for email traffic and in-line mode without a Check Point Security Gateway?

  A. Install appliance TE250X on SpanPort on LAN switch in MTA mode
  B. Install appliance TE250X in standalone mode and setup MTA
  C. You can utilize only Check Point Cloud Services for this scenario
  D. It is not possible, always Check Point SGW is needed to forward emails to SandBlast appliance
  C. You can utilize only Check Point Cloud Services for this scenario

• Question 310:

  A ClusterXL configuration is limited to ___ members.

  A. There is no limit.
  B. 16
  C. 6
  D. 2
  C. 6