2022 The Most Effective 156-315.80 with 465 Questions Answers
Try Free and Start Using Realistic Verified 156-315.80 Dumps Instantly.
NEW QUESTION 170
What are the available options for downloading Check Point hotfixes in Gala WebUI (CPUSE)?
- A. Manually, Automatic, Disabled
- B. Manually, Scheduled, Automatic
- C. Manually, Scheduled, Disabled
- D. Manually, Scheduled, Enabled
Answer: B
NEW QUESTION 171
When an encrypted packet is decrypted, where does this happen?
- A. Outbound chain
- B. Decryption is not supported
- C. Inbound chain
- D. Security policy
Answer: D
NEW QUESTION 172
ClusterXL is fully supported by Gaia and available to all Check Point appliances. Which command is NOT related to redundancy and functions?
- A. cphaprob all show stat
- B. cphaprob -a if
- C. cphaprob -I list
- D. cphaprob stat
Answer: A
NEW QUESTION 173
When Configuring Endpoint Compliance Settings for Applications and Gateways within Mobile Access, which of the three approaches will allow you to configure individual policies for each application?
- A. Basic Approach
- B. Very Advanced Approach
- C. Medium Approach
- D. Strong Approach
Answer: B
NEW QUESTION 174
You want to gather and analyze threats to your mobile device. It has to be a lightweight app. Which
application would you use?
- A. SmartEvent Client Info
- B. Check Point Capsule Cloud
- C. SecuRemote
- D. Check Point Protect
Answer: D
NEW QUESTION 175
Choose the correct syntax to add a new host named "emailserver1" with IP address 10.50.23.90 using GAiA Management CLI?
- A. mgmt_cli add host name ip-address 10.50.23.90
- B. mgmt_cli add host "emailserver1" address 10.50.23.90
- C. mgmt_cli add host name "emailserver1" ip-address 10.50.23.90
- D. mgmt_cli add host name "myHost12 ip" address 10.50.23.90
Answer: C
NEW QUESTION 176
Which method below is NOT one of the ways to communicate using the Management API's?
- A. Typing API commands using the "mgmt_cli" command
- B. Sending API commands over an http connection using web-services
- C. Typing API commands from a dialog box inside the SmartConsole GUI application
- D. Typing API commands using Gaia's secure shell(clish)19+
Answer: B
NEW QUESTION 177
With MTA (Mail Transfer Agent) enabled the gateways manages SMTP traffic and holds external email with
potentially malicious attachments. What is required in order to enable MTA (Mail Transfer Agent)
functionality in the Security Gateway?
- A. Threat Cloud Intelligence
- B. Threat Prevention Software Blade Package
- C. Traffic on port 25
- D. Endpoint Total Protection
Answer: B
NEW QUESTION 178
CoreXL is supported when one of the following features is enabled:
- A. Route-based VPN
- B. Overlapping NAT
- C. IPv6
- D. IPS
Answer: D
Explanation:
Explanation
CoreXL does not support Check Point Suite with these features:
References:
NEW QUESTION 179
SecureXL improves non-encrypted firewall traffic throughput and encrypted VPN traffic throughput.
- A. This statement is true because SecureXL does improve all traffic.
- B. This statement is false because SecureXL does not improve this traffic but CoreXL does.
- C. This statement is true because SecureXL does improve this traffic.
- D. This statement is false because encrypted traffic cannot be inspected.
SecureXL improved non-encrypted firewall traffic throughput, and encrypted VPN traffic throughput, by nearly an order-of-magnitude- particularly for small packets flowing in long duration connections.
Answer: C
NEW QUESTION 180
CoreXL is supported when one of the following features is enabled:
- A. Route-based VPN
- B. Overlapping NAT
- C. IPv6
- D. IPS
Answer: D
NEW QUESTION 181
Which of the following authentication methods ARE NOT used for Mobile Access?
- A. RADIUS server
- B. TACACS+
- C. Username and password (internal, LDAP)
- D. SecurID
Answer: B
Explanation:
Reference:
https://sc1.checkpoint.com/documents/R77/CP_R77_Mobile_Access_WebAdmin/41587.htm
NEW QUESTION 182
As a valid Mobile Access Method, what feature provides Capsule Connect/VPN?
- A. Full Layer3 VPN -IPSec VPN that gives users network access to all mobile applications.
- B. That is used to deploy the mobile device as a generator of one-time passwords for authenticating to an RSA Authentication Manager.
- C. You can make sure that documents are sent to the intended recipients only.
- D. Fill Layer4 VPN -SSL VPN that gives users network access to all mobile applications.
Answer: A
Explanation:
Explanation
Explanation/Reference: https://sc1.checkpoint.com/documents/R77/CP_R77_Mobile_Access_WebAdmin/82201.htm
NEW QUESTION 183
Which of the following Check Point processes within the Security Management Server is responsible for the
receiving of log records from Security Gateway?
- A. fwm
- B. logd
- C. fwd
- D. cpd
Answer: C
NEW QUESTION 184
The back end database for Check Point R80 Management uses:
- A. PostgreSQL
- B. DBMS
- C. MySQL
- D. MongoDB
Answer: A
NEW QUESTION 185
Office mode means that:
- A. Allows a security gateway to assign a remote client an IP address. After the user authenticates for a tunnel, the VPN gateway assigns a routable IP address to the remote client.
- B. SecurID client assigns a routable MAC address. After the user authenticates for a tunnel, the VPN gateway assigns a routable IP address to the remote client.
- C. Users authenticate with an Internet browser and use secure HTTPS connection.
- D. Local ISP (Internet service Provider) assigns a non-routable IP address to the remote user.
Answer: A
Explanation:
Explanation/Reference: https://supportcenter.checkpoint.com/supportcenter/portal?
eventSubmit_doGoviewsolutiondetails=&solutionid=sk30545
NEW QUESTION 186
Which command show the current connection distributd byCoreXL FW instances?
- A. Fw cti lists
- B. Fw cti instances -v
- C. Fw cti affinity -I
- D. Fw ctl multi state
Answer: D
NEW QUESTION 187
Exhibit:
What can we infer about the recent changes made to the Rule Base?
- A. The rules 1, 5 and 6 cannot be edited by the 'admin' administrator
- B. Rule 7 was created by the 'admin' administrator in the current session
- C. 8 changes have been made by administrators since the last policy installation
- D. Rule 1 and object webserver are locked by another administrator
Answer: D
NEW QUESTION 188
You noticed that CPU cores on the Security Gateway are usually 100% utilized and many packets were
dropped. You don't have a budget to perform a hardware upgrade at this time. To optimize drops you decide to
use Priorities Queues and fully enable Dynamic Dispatcher. How can you enable them?
- A. fw ctl multik pq enable
- B. fw ctl multik dynamic_dispatching set_mode 9
- C. fw ctl multik set_mode 9
- D. fw ctl multik dynamic_dispatching on
Answer: C
NEW QUESTION 189
Which web services protocol is used to communicate to the Check Point R80 Identity Awareness Web API?
- A. REST
- B. XML-RPC
- C. SOAP
- D. XLANG
Answer: A
Explanation:
The Identity Web API uses the REST protocol over SSL. The requests and responses are HTTP and in JSON format.
Reference: https://sc1.checkpoint.com/documents/R80.10/WebAdminGuides/EN/ CP_R80.10_IdentityAwareness_AdminGuide/html_frameset.htm?topic=documents/R80.10/WebAdminGuides/ EN/CP_R80.10_IdentityAwareness_AdminGuide/148699
NEW QUESTION 190
Which TCP-port does CPM process listen to?
- A. 0
- B. 1
- C. 2
- D. 3
Answer: B
Explanation:
Explanation/Reference:
Reference: https://www.checkpoint.com/downloads/products/r80.10-security-management-architecture- overview.pdf
NEW QUESTION 191
Which packet info is ignored with Session Rate Acceleration?
- A. same info from Packet Acceleration is used
- B. source port
- C. source port ranges
- D. source ip
Answer: B
Explanation:
Reference: http://trlj.blogspot.com/2015/10/check-point-acceleration.html
NEW QUESTION 192
Joey wants to upgrade from R75.40 to R80 version of Security management. He will use Advanced Upgrade with Database Migration method to achieve this.
What is one of the requirements for his success?
- A. Size of the /var/log folder of the target machine must be at least 25% of the size of the /var/log directory on the source machine
- B. Size of the /var/log folder of the source machine must be at least 25% of the size of the /var/log directory on the target machine
- C. Size of the /var/log folder of the target machine must be at least 25GB or more
- D. Size of the $FWDIR/log folder of the target machine must be at least 30% of the size of the $FWDIR/log directory on the source machine
Answer: A
NEW QUESTION 193
......
Download Free Latest Exam 156-315.80 Certified Sample Questions: https://www.fast2test.com/156-315.80-premium-file.html