Feb-2022 CheckPoint 156-315.80 Actual Questions and Braindumps
156-315.80 Dumps To Pass CheckPoint Exam in 24 Hours - ValidTorrent
Check Point Certified Security Expert - R80 156-315.80 Exam
Check Point Certified Security Expert - R80 156-315.80 Exam is related to Check Point Certified Security Expert Certification.156-215.80 Exam test candidates skills to build, modify, deploy and troubleshoot Check Point Security Systems on the GAIA Operating System, This exam also verify the candidate have the knowledge to debug Firewall Processes, Optimize VPN Performance and Upgrade Management Servers. System Security Consultant and Server Managers usually hold or pursue this certification and candidate can expect the same job roles after completion of this certification.
NEW QUESTION 257
View the rule below. What does the lock-symbol in the left column mean? (Choose the BEST answer.)
- A. The current administrator has read-only permissions to Threat Prevention Policy.
- B. Another user has locked the rule for editing.
- C. The current administrator is logged in as read-only because someone else is editing the policy.
- D. Configuration lock is present. Click the lock symbol to gain read-write access.
Answer: B
Explanation:
https://sc1.checkpoint.com/documents/R80/CP_R80_SecMGMT/html_frameset.htm?topic=documents/R80/CP_R80_SecMGMT/124265
NEW QUESTION 258
You have a Geo-Protection policy blocking Australia and a number of the countries. You network now
requires a Check point Firewall to be installed in Sydney, Australia. What must you do to get SIC to
work?
- A. Create a rule at the top in the Sydney firewall to also control traffic from your network.
- B. Nothing-Check Point control connection function regardless of Geo-Protection policy
- C. Remove Goe-Protection as the IP-to-country database externally and you have no control of this.
- D. Create a rule at the top in your point firewall to bypass the Goe-Protection
Answer: A
NEW QUESTION 259
SandBlast Mobile identifies threats in mobile devices by using on-device, network, and cloud-based algorithms and has four dedicated components that constantly work together to protect mobile devices and their data.
Which component is NOT part of the SandBlast Mobile solution?
- A. Personal User Storage
- B. Gateway
- C. Management Dashboard
- D. Behavior Risk Engine
Answer: A
NEW QUESTION 260
On the following picture an administrator configures Identity Awareness:
After clicking "Next" the above configuration is supported by:
- A. Based on Active Directory integration which allows the Security Gateway to correlate Active Directory users and machines to IP addresses in a method that is completely transparent to the user.
- B. Kerberos SSO which will be working for Active Directory integration
- C. Obligatory usage of Captive Portal.
- D. The ports 443 or 80 what will be used by Browser-Based and configured Authentication.
Answer: A
NEW QUESTION 261
Which web services protocol is used to communicate to the Check Point R80 Identity Awareness Web API?
- A. XLANG
- B. SOAP
- C. XML-RPC
- D. REST
Answer: D
Explanation:
Explanation
The Identity Web API uses the REST protocol over SSL. The requests and responses are HTTP and in JSON format.
References:
NEW QUESTION 262
Which process is used mainly for backward compatibility of gateways in R80.X? It provides communication with GUI-client, database manipulation, policy compilation and Management HA synchronization.
- A. cpd
- B. cpm
- C. fwm
- D. fwd
Answer: C
NEW QUESTION 263
Which tool is used to enable ClusterXL?
- A. SmartUpdate
- B. cpconfig
- C. sysconfig
- D. SmartConsole
Answer: B
Explanation:
Explanation/Reference: https://sc1.checkpoint.com/documents/R77/CP_R77_ClusterXL_WebAdminGuide/html_frameset.htm?topic=documents/R77/CP_R77_ClusterXL_WebAdminGuide/161105
NEW QUESTION 264
Which of the following is NOT an attribute of packet acceleration?
- A. Source address
- B. VLAN tag
- C. Destination port
- D. Protocol
Answer: B
Explanation:
Connections are identified by the 5 tuple attributes: source address, destination address, source port, destination port, protocol. When the packets in a connection match all the 5 tuple attributes, the traffic flow can be processed on the accelerated path.
NEW QUESTION 265
You need to see which hotfixes are installed on your gateway, which command would you use?
- A. cpinfo -l hotfix
- B. cpinfo -y all
- C. cpinfo -o hotfix
- D. cpinfo -h all
Answer: B
NEW QUESTION 266
Which one of these features is NOT associated with the Check Point URL Filtering and Application Control Blade?
- A. Make rules to allow or block applications and Internet sites for individual applications, categories, and risk levels.
- B. Detects and blocks malware by correlating multiple detection engines before users are affected.
- C. Configure rules to limit the available network bandwidth for specified users or groups.
- D. Use UserCheck to help users understand that certain websites are against the company's security policy.
Answer: B
Explanation:
Explanation/Reference: https://sc1.checkpoint.com/documents/R76/CP_R76_AppControl_WebAdmin/60902.htm
NEW QUESTION 267
Which statement is NOT TRUE about Delta synchronization?
- A. Transfers changes in the Kernel tables between cluster members.
- B. Using UDP Multicast or Broadcast on port 8161
- C. Using UDP Multicast or Broadcast on port 8116
- D. Quicker than Full sync
Answer: B
Explanation:
Explanation/Reference:
Reference: https://sc1.checkpoint.com/documents/R76/CP_R76_ClusterXL_AdminGuide/7288.htm
NEW QUESTION 268
Hit Count is a feature to track the number of connections that each rule matches, which one is not benefit of Hit Count.
- A. Improve Firewall performance - You can move a rule that has hot count to a higher position in the Rule Base
- B. Better understand the behavior of the Access Control Policy
- C. Automatically rearrange Access Control Policy based on Hit Count Analysis
- D. Analyze a Rule Base - You can delete rules that have no matching connections
Answer: C
Explanation:
References:
NEW QUESTION 269
Fill in the blank: The R80 utility fw monitoris used to troubleshoot ________.
- A. Traffic issues
- B. User data base corruption
- C. Phase two key negotiations
- D. LDAP conflicts
Answer: A
Explanation:
Explanation/Reference:
Check Point's FW Monitor is a powerful built-in tool for capturing network traffic at the packet level. The FW Monitor utility captures network packets at multiple capture points along the FireWall inspection chains. These captured packets can be inspected later using the WireShark Reference: https://supportcenter.checkpoint.com/supportcenter/portal?
eventSubmit_doGoviewsolutiondetails=&solutionid=sk30583
NEW QUESTION 270
Fill in the blank: The R80 feature ______ permits blocking specific IP addresses for a specific time period.
- A. Block Port Overflow
- B. Adaptive Threat Prevention
- C. Suspicious Activity Monitoring
- D. Local Interface Spoofing
Answer: C
Explanation:
Explanation
Suspicious Activity Rules Solution
Suspicious Activity Rules is a utility integrated into SmartView Monitor that is used to modify access privileges upon detection of any suspicious network activity (for example, several attempts to gain unauthorized access).
The detection of suspicious activity is based on the creation of Suspicious Activity rules. Suspicious Activity rules are Firewall rules that enable the system administrator to instantly block suspicious connections that are not restricted by the currently enforced security policy. These rules, once set (usually with an expiration date), can be applied immediately without the need to perform an operation
NEW QUESTION 271
SmartEvent provides a convenient way to run common command line executables that can assist in investigating events. Right-clicking the IP address, source or destination, in an event provides a list of default and customized commands. They appear only on cells that refer to IP addresses because the IP address of the active cell is used as the destination of the command when run. The default commands are:
- A. ping, nslookup, Telnet, and route
- B. ping, traceroute, netstat, and nslookup
- C. ping, traceroute, netstat, and route
- D. ping, whois, nslookup, and Telnet
Answer: D
Explanation:
Explanation/Reference: https://sc1.checkpoint.com/documents/R76/CP_R76_SmartEventIntro_AdminGuide/17468.htm
NEW QUESTION 272
Fill in the blank: The R80 utility fw monitor is used to troubleshoot ________.
- A. Traffic issues
- B. User data base corruption
- C. Phase two key negotiations
- D. LDAP conflicts
Answer: A
Explanation:
Explanation
Check Point's FW Monitor is a powerful built-in tool for capturing network traffic at the packet level. The FW Monitor utility captures network packets at multiple capture points along the FireWall inspection chains.
These captured packets can be inspected later using the WireShark
NEW QUESTION 273
Check Pont Central Deployment Tool (CDT) communicates with the Security Gateway / Cluster Members over Check Point SIC _____________ .
- A. TCP Port 18209
- B. TCP Port 18191
- C. TCP Port 19009
- D. TCP Port 18190
Answer: B
NEW QUESTION 274
Check Pont Central Deployment Tool (CDT) communicates with the Security Gateway / Cluster Members
over Check Point SIC _____________ .
- A. TCP Port 18209
- B. TCP Port 18191
- C. TCP Port 19009
- D. TCP Port 18190
Answer: B
NEW QUESTION 275
What scenario indicates that SecureXL is enabled?
- A. Dynamic objects are available in the Object Explorer
- B. SecureXL can be disabled in cpconfig
- C. Only one packet in a stream is seen in a fw monitor packet capture
- D. fwaccel commands can be used in clish
Answer: D
NEW QUESTION 276
Due to high CPU workload on the Security Gateway, the administrator decided to purchase a new
multicore CPU top replace the existing single core CPU, After installatin, is the administrator required
to perform any additional tasks?
- A. Go to class-Run cpconfig| Configure CoreXL to make use of the additional Cores| Exist cpconfig |
Reboot security Gateway. - B. Administrator does not need to perform any task. Check Point will make use of the newly installed
CPU and Cores. - C. Go to class-run cpstop| Run cpstar
- D. Go to clash-cpconf| Configure CoreXl to make use of the additional Core |Exit cpconfig| Reboot
Gateway| install security policy.
Answer: D
NEW QUESTION 277
Which process is available on any management product and on products that require direct GUI access, such as SmartEvent and provides GUI client communications, database manipulation, policy compilation and Management HA synchronization?
- A. cpd
- B. fwm
- C. fwd
- D. cpwd
Answer: B
Explanation:
Explanation/Reference:
Explanation:
Firewall Management (fwm) is available on any management product, including Multi-Domain and on products that requite direct GUI access, such as SmartEvent, It provides the following:
- GUI Client communication
- Database manipulation
- Policy Compilation
- Management HA sync
NEW QUESTION 278
......
Download the Latest 156-315.80 Dump - 2022 156-315.80 Exam Question Bank: https://troytec.validtorrent.com/156-315.80-valid-exam-torrent.html