CheckPoint Check Point Certified Security Expert - R81.20 - 156-315.81.20 Exam Practice Test

A. Web Mail, Forward to SandBlast Appliance, SNMP Trap, External Script

B. Web Mail, Block Service. SNMP Trap. SmartTask, Geo Protection

C. Web Mail. Block Destination, SNMP Trap. SmartTask

D. Mail. SNMP Trap, Block Source. Block Event Activity, External Script

A. Server, SCP, Username, Password, Path, Comment, Member

B. Server, TFTP, Username, Password, Path, Comment, All Members

C. Server, Protocol, username Password, Path, Comment, Member

D. Server, Protocol, Username, Password, Path, Comment, All Members

A. Light

B. Custom

C. Terminal

D. Full

A. Connections destined to or originated from the Security gateway

B. Multicast packets

C. Connections that have a Handler (ICMP, FTP, H.323, etc.)

D. A 5-tuple match

A. cphaprob -a if

B. cphaprob all show stat

C. cphaprob stat

D. cphaprob -l list

A. Yes, the SmartConsole Upgrade package can be installed using CPUSE

B. Yes. You can download the SmartConsole directly from the Download Center

C. As far as you use version R80.40, no upgrade is needed due to compatibility mode

D. Yes, using CPUSE you can make the installer available in the Web Portal of the Management Server

A. F2F (Slow path). Templated Path. PQX and F2V

B. F2F (Slow path). PXL, QXL and F2V

C. F2F (Slow path), Accelerated Path, Medium Path and F2V

D. F2F (Slow path), Accelerated Path, PQX and F2V

A. The IPS Protection engine on the replacement hardware is too old. Before pushing the Threat Prevention Policy use SmartConsole -> Security Policies -> Updates -> IPS 'Update Now' to update the engine.

B. The admin forgot to reestablish the SIC for the new hardware. That is typically the case when configure only the interfaces of the replacement hardware instead restoring a backup.

C. The admin forgot to apply the new license. The Access Control license is included by default but the service subscriptions for the Threat Prevention Blades are missing.

D. The Threat Prevention Policy can't be installed on a Gateway without an already installed Access Control Policy. First install only the Access Control Policy.

A. TCP Port 18191

B. TCP Port 19009

C. TCP Port 18190

D. TCP Port 18209

A. Use the VIP in SmartConsole you always reach the active Management Server.

B. The Secondary will take over automatically Change the IP in SmartConsole to logon to the private IP of the Secondary Management Server.

C. Run the 'promote_util' to activate the Secondary Management server

D. Logon with SmartConsole to the Secondary Management Server and choose "Make Active' under Actions in the HA Management Menu

A. Command and Control traffic to servers with reputation for hosting malware

B. Command and Control traffic from hosts that have been identified as infected

C. Network traffic that is directed to unknown or malicious servers

D. Network traffic to hosts that have been identified as infected

A. ACCEPT Templates are generated to achieve high session rate for NAT. These templates store the NAT attributes of connections matched by rulebase so that similar new connections can take advantage of this information and do NAT without the expensive rulebase lookup. These are disabled by default and work only if NAT Templates are disabled.

B. NAT Templates are generated to achieve high session rate for NAT. These templates store the NAT attributes of connections matched by rulebase so that similar new connections can take advantage of this information and do NAT without the expensive rulebase lookup. These are disabled by default and work only if Accept Templates are disabled.

C. NAT Templates are generated to achieve high session rate for NAT. These templates store the NAT attributes of connections matched by rulebase so that similar new connections can take advantage of this information and do NAT without the expensive rulebase lookup. These are enabled by default and work only if Accept Templates are enabled.

D. DROP Templates are generated to achieve high session rate for NAT. These templates store the NAT attributes of connections matched by rulebase so that similar new connections can take advantage of this information and do NAT without the expensive rulebase lookup. These are disabled by default and work only if NAT Templates are disabled.