156-315.81 Exam Questions
668 real 156-315.81 exam questions with expert-verified answers and explanations. Page 1 of 14.
- Question #1
Check Point Management (cpm) is the main management process in that it provides the architecture for a consolidates management console. CPM allows the GUI client and management ser...
- Question #2Scalability and Redundancy (ClusterXL)
Which command is used to set the CCP protocol to Multicast?
CCP protocolmulticastcphaconfClusterXL commands - Question #3
Which packet info is ignored with Session Rate Acceleration?
- Question #4Multi-Domain Security Management
Which is the least ideal Synchronization Status for Security Management Server High Availability deployment?
Management HAsynchronization statuscollision stateSecurity Management Server - Question #5
During inspection of your Threat Prevention logs you find four different computers having one event each with a Critical Severity. Which of those hosts should you try to remediate...
- Question #6Advanced Firewall Configuration
In R81 spoofing is defined as a method of:
IP spoofinganti-spoofingpacket forgerysecurity concepts - Question #7Scalability and Redundancy (ClusterXL)
Full synchronization between cluster members is handled by Firewall Kernel. Which port is used for this?
cluster synchronizationTCP port 256firewall kernelClusterXL - Question #8
Fill in the blank: The command ___________ provides the most complete restoration of a R81 configuration.
- Question #9
Check Point Management (cpm) is the main management process in that it provides the architecture for a consolidated management console. It empowers the migration from legacy Client...
- Question #10
Which of the following type of authentication on Mobile Access can NOT be used as the first authentication method?
- Question #11
Which of the SecureXL templates are enabled by default on Security Gateway?
- Question #12Threat Prevention Advanced Features
What happen when IPS profile is set in Detect Only Mode for troubleshooting?
IPS detect modeIPS profileDetect Onlytraffic blocking - Question #13Scalability and Redundancy (ClusterXL)
What is true about VRRP implementations?
VRRPvirtual router redundancydeployment modesstandalone deployment - Question #14
The Security Gateway is installed on GAIA R81. The default port for the Web User interface is ______.
- Question #15Threat Prevention
Fill in the blank: The R81 feature ______ permits blocking specific IP addresses for a specific time period.
Suspicious Activity MonitoringIP blockingR81 featuresthreat prevention - Question #16
In a Client to Server scenario, which represents that the packet has already checked against the tables and the Rule Base?
- Question #17
What is the mechanism behind Threat Extraction?
- Question #18Threat Prevention
You want to gather and analyze threats to your mobile device. It has to be a lightweight app. Which application would you use?
Check Point Protectmobile securitythreat analysislightweight app - Question #19
Which view is NOT a valid CPVIEW view?
- Question #20
Which of the following is a new R81.10 Gateway feature that had not been available in R77.X and older?
- Question #21
fwssd is a child process of which of the following Check Point daemons?
- Question #22
Sticky Decision Function (SDF) is required to prevent which of the following? Assume you set up an Active-Active cluster.
- Question #23
CPM process stores objects, policies, users, administrators, licenses and management data in a database. The database is:
- Question #24
If you needed the Multicast MAC address of a cluster, what command would you run?
- Question #25Automation and Orchestration
Which is NOT an example of a Check Point API?
Check Point APIManagement APIThreat Prevention APIOPSEC SDK - Question #26
What are the three components for Check Point Capsule?
- Question #27System Management
Which of the following Check Point processes within the Security Management Server is responsible for the receiving of log records from Security Gateway?
fwd processlog processingSecurity Management Serverdaemon processes - Question #28
The fwd process on the Security Gateway sends logs to the fwd process on the Management Server via which 2 processes?
- Question #29
You have successfully backed up Check Point configurations without the OS information. What command would you use to restore this backup?
- Question #30Automation and Orchestration
The Firewall Administrator is required to create 100 new host objects with different IP addresses. What API command can he use in the script to achieve the requirement?
Management APIadd host commandAPI scriptinghost objects - Question #31System Management
Tom has been tasked to install Check Point R81 in a distributed deployment. Before Tom installs the systems this way, how many machines will he need if he does NOT include a SmartC...
distributed deploymentSecurity Management ServerSecurity Gatewaydeployment architecture - Question #32Threat Prevention
You can select the file types that are sent for emulation for all the Threat Prevention profiles. Each profile defines a(n) _____ or ______ action for the file types.
Threat Prevention profilesfile emulationInspect/Bypassthreat emulation - Question #33System Management
When doing a Stand-Alone Installation, you would install the Security Management Server with which other Check Point architecture component?
stand-alone installationSecurity GatewaySecurity Management Serverdeployment modes - Question #34
On R81.10 when configuring Third-Party devices to read the logs using the LEA (Log Export API) the default Log Server uses port:
- Question #35
How many images are included with Check Point TE appliance in Recommended Mode?
- Question #36Performance Tuning and Optimization
What is the least amount of CPU cores required to enable CoreXL?
CoreXLCPU coresmulti-core processingminimum requirements - Question #37
You are working with multiple Security Gateways enforcing an extensive number of rules. To simplify security administration, which action would you choose?
- Question #38Remote Access VPN
Which of the following authentication methods ARE NOT used for Mobile Access?
Mobile AccessTACACS+authentication methodsunsupported methods - Question #39
What is the correct command to observe the Sync traffic in a VRRP environment?
- Question #40
What has to be taken into consideration when configuring Management HA?
- Question #41
What is the difference between an event and a log?
- Question #42
What are the attributes that SecureXL will check after the connection is allowed by Security Policy?
- Question #43Scalability and Redundancy (ClusterXL)
Which statement is NOT TRUE about Delta synchronization?
Delta synchronizationClusterXLUDP port 8116cluster sync - Question #44
The Event List within the Event tab contains:
- Question #45Scalability and Redundancy (ClusterXL)
Which statement is correct about the Sticky Decision Function?
Sticky Decision FunctionLoad SharingSecureXL accelerationClusterXL - Question #46
Which statement is true regarding redundancy?
- Question #47
NAT rules are prioritized in which order? 1. Automatic Static NAT 2. Automatic Hide NAT 3. Manual/Pre-Automatic NAT 4. Post-Automatic/Manual NAT rules
- Question #48Remote Access VPN
In R81.10, how do you manage your Mobile Access Policy?
Mobile Access PolicySmartDashboardR81.10policy management - Question #49
R81.10 management server can manage gateways with which versions installed?
- Question #50Advanced Troubleshooting
Which command can you use to verify the number of active concurrent connections?
fw ctl pstatconcurrent connectionsconnection tableCLI commands