156-315.80 Exam Questions
504 real 156-315.80 exam questions with expert-verified answers and explanations. Page 1 of 11.
- Question #1
Check Point Management (cpm) is the main management process in that it provides the architecture for a consolidates management console. CPM allows the GUI client and management ser...
- Question #2High Availability with ClusterXL
Which command is used to set the CCP protocol to Multicast?
CCP protocolcphaconfMulticastcluster configuration - Question #3
Which packet info is ignored with Session Rate Acceleration?
- Question #4High Availability with ClusterXL
Which is the least ideal Synchronization Status for Security Management Server High Availability deployment?
Management HAsynchronization statuscollisionSecurity Management Server - Question #5
During inspection of your Threat Prevention logs you find four different computers having one event each with a Critical Severity. Which of those hosts should you try to remediate...
- Question #6Advanced Firewall and NAT
In R80 spoofing is defined as a method of:
IP spoofinganti-spoofingfirewall concepts - Question #7High Availability with ClusterXL
Full synchronization between cluster members is handled by Firewall Kernel. Which port is used for this?
cluster synchronizationTCP port 256Firewall KernelClusterXL - Question #8
Fill in the blank: The command ___________ provides the most complete restoration of a R80 configuration.
- Question #9
Check Point Management (cpm) is the main management process in that it provides the architecture for a consolidated management console. It empowers the migration from legacy Client...
- Question #10Advanced VPN (Site-to-Site, Remote Access)
Which of the following type of authentication on Mobile Access can NOT be used as the first authentication method?
Mobile AccessDynamic IDauthentication methodsfirst factor - Question #11
Which of the SecureXL templates are enabled by default on Security Gateway?
- Question #12Advanced Threat Prevention (IPS, Anti-Bot, Anti-Virus)
What happen when IPS profile is set in Detect Only Mode for troubleshooting?
IPSDetect Only Modethreat prevention troubleshootingIPS profile - Question #13High Availability with ClusterXL
What is true about VRRP implementations?
VRRPClusterXLhigh availabilitydeployment modes - Question #14
The Security Gateway is installed on GAIA R80. The default port for the Web User interface is ______.
- Question #15Advanced Firewall and NAT
Fill in the blank: The R80 feature ______ permits blocking specific IP addresses for a specific time period.
SAMSuspicious Activity MonitoringIP blockingfirewall - Question #16
In a Client to Server scenario, which represents that the packet has already checked against the tables and the Rule Base?
- Question #17
What is the mechanism behind Threat Extraction?
- Question #18Advanced Threat Prevention (IPS, Anti-Bot, Anti-Virus)
You want to gather and analyze threats to your mobile device. It has to be a lightweight app. Which application would you use?
Check Point Protectmobile securitythreat analysismobile app - Question #19
Which view is NOT a valid CPVIEW view?
- Question #20Advanced Firewall and NAT
Which of the following is a new R80.10 Gateway feature that had not been available in R77.X and older?
R80.10Sub Policiesordered layerspolicy management - Question #21
fwssd is a child process of which of the following Check Point daemons?
- Question #22
Sticky Decision Function (SDF) is required to prevent which of the following? Assume you set up an Active-Active cluster.
- Question #23Troubleshooting Check Point Security Systems
CPM process stores objects, policies, users, administrators, licenses and management data in a database. The database is:
CPM processPostgreSQLmanagement databaseR80 architecture - Question #24
If you needed the Multicast MAC address of a cluster, what command would you run?
- Question #25Monitoring and Reporting Advanced Features
Which is NOT an example of a Check Point API?
Check Point APIManagement APIThreat Prevention APIOPSC SDK - Question #26
What are the three components for Check Point Capsule?
- Question #27Advanced Troubleshooting
Which of the following Check Point processes within the Security Management Server is responsible for the receiving of log records from Security Gateway?
fwd processlog collectionSecurity GatewaySecurity Management Server - Question #28
The fwd process on the Security Gateway sends logs to the fwd process on the Management Server via which 2 processes?
- Question #29
You have successfully backed up Check Point configurations without the OS information. What command would you use to restore this backup?
- Question #30Automation and Orchestration
The Firewall Administrator is required to create 100 new host objects with different IP addresses. What API command can he use in the script to achieve the requirement?
Management APIhost objectautomation scriptingbulk configuration - Question #31Advanced Firewall Configuration
Tom has been tasked to install Check Point R80 in a distributed deployment. Before Tom installs the systems this way, how many machines will he need if he does NOT include a SmartC...
distributed deploymentSecurity Management ServerSecurity Gatewayarchitecture - Question #32Threat Prevention Advanced Features
You can select the file types that are sent for emulation for all the Threat Prevention profiles. Each profile defines a(n) _____ or ______ action for the file types.
file emulationThreat Prevention profilesInspect actionBypass action - Question #33Advanced Firewall Configuration
When doing a Stand-Alone Installation, you would install the Security Management Server with which other Check Point architecture component?
stand-alone installationSecurity GatewaySecurity Management Serverdeployment - Question #34Advanced Troubleshooting
On R80.10 when configuring Third-Party devices to read the logs using the LEA (Log Export API) the default Log Server uses port:
LEAlog exportport 18184third-party integration - Question #35
How many images are included with Check Point TE appliance in Recommended Mode?
- Question #36Performance Tuning and Optimization
What is the least amount of CPU cores required to enable CoreXL?
CoreXLCPU coresmulti-core processingperformance - Question #37
You are working with multiple Security Gateways enforcing an extensive number of rules. To simplify security administration, which action would you choose?
- Question #38Advanced VPN (IPsec, Remote Access)
Which of the following authentication methods ARE NOT used for Mobile Access?
Mobile AccessTACACS+authentication methodsremote access - Question #39
What is the correct command to observe the Sync traffic in a VRRP environment?
- Question #40
What has to be taken into consideration when configuring Management HA?
- Question #41
What is the difference between an event and a log?
- Question #42
What are the attributes that SecureXL will check after the connection is allowed by Security Policy?
- Question #43Scalability and Redundancy (ClusterXL)
Which statement is NOT TRUE about Delta synchronization?
delta synchronizationClusterXLUDP multicastcluster sync port - Question #44Advanced Troubleshooting
The Event List within the Event tab contains:
SmartEventEvent Listlog monitoringquery results - Question #45Scalability and Redundancy (ClusterXL)
Which statement is correct about the Sticky Decision Function?
Sticky Decision FunctionPerformance Packhardware acceleratorLoad Sharing - Question #46
Which statement is true regarding redundancy?
- Question #47
NAT rules are prioritized in which order? 1. Automatic Static NAT 2. Automatic Hide NAT 3. Manual/Pre-Automatic NAT 4. Post-Automatic/Manual NAT rules
- Question #48
In R80.10, how do you manage your Mobile Access Policy?
- Question #49Advanced Firewall Configuration
R80.10 management server can manage gateways with which versions installed?
R80.10version compatibilitygateway managementbackward compatibility - Question #50Advanced Troubleshooting
Which command can you use to verify the number of active concurrent connections?
fw ctl pstatconcurrent connectionsconnection tableCLI diagnostics