CheckPoint 156-315.81.20 Study Guide Archives Updated on Oct 01, 2024 [Q199-Q222]

Rate this post

CheckPoint 156-315.81.20 Study Guide Archives Updated on Oct 01, 2024

Download 156-315.81.20 Mock Test Study Material

NEW QUESTION 199
Which one of these features is NOT associated with the Check Point URL Filtering and Application Control Blade?

Detects and blocks malware by correlating multiple detection engines before users are affected.

Configure rules to limit the available network bandwidth for specified users or groups.

Use UserCheck to help users understand that certain websites are against the company’s security policy.

Make rules to allow or block applications and Internet sites for individual applications, categories, and risk levels.

NEW QUESTION 200
What does the “unknown” SIC status shown on SmartConsole mean?

SIC activation key requires a reset

Administrator input the wrong SIC key

The management can contact the Security Gateway but cannot establish Secure Internal Communication

There is no connection between the Security Gateway and Security Management Server

NEW QUESTION 201
What a valid SecureXL paths in R81.20?

F2F (Slow path). Templated Path. PQX and F2V

F2F (Slow path). PXL, QXL and F2V

F2F (Slow path), Accelerated Path, PQX and F2V

F2F (Slow path), Accelerated Path, Medium Path and F2V

NEW QUESTION 202
Alice & Bob are concurrently logged In via SSH on the same Check Point Security Gateway as user “admin* however Bob was first logged in and acquired the lock Alice Is not aware that Bob is also togged in to the same Security Management Server as she is but she needs to perform very urgent configuration changes – which of the following GAlAclish command is true for overriding Bobs configuration database lock:

lock database override

unlock override database

unlock database override

database unlock override

NEW QUESTION 203
What is the minimum amount of RAM needed for a Threat Prevention Appliance?

6GB

8GB with Gaia in 64-bit mode

4GB

It depends on the number of software blades enabled

NEW QUESTION 204
Gaia has two default user accounts that cannot be deleted.
What are those user accounts?

Admin and Default

Expert and Clish

Control and Monitor

Admin and Monitor

NEW QUESTION 205
What is true about VRRP implementations?

VRRP membership is enabled in cpconfig

VRRP can be used together with ClusterXL, but with degraded performance

You cannot have a standalone deployment

You cannot have different VRIDs in the same physical network

NEW QUESTION 206
Bob has finished io setup provisioning a secondary security management server. Now he wants to check if the provisioning has been correct.
Which of the following Check Point command can be used to check if the security management server has been installed as a primary or a secondary security management server?

cpprod_util MgmtlsPrimary

cpprod_util FwlsSecondary

cpprod_util MgmtlsSecondary

cpprod_util FwlsPrimary

NEW QUESTION 207
What is the recommended way to have a redundant Sync connection between the cluster nodes?

In the SmartConsole / Gateways & Servers -> select Cluster Properties / Network Management and define two Sync interfaces per node. Connect both Sync interfaces without using a switch.

Use a group of bonded interfaces. In the SmartConsole / Gateways & Servers -> select Cluster Properties / Network Management and define a Virtual IP for the Sync interface.

In the SmartConsole / Gateways & Servers -> select Cluster Properties / Network Management and define two Sync interfaces per node. Use two different Switches to connect both Sync interfaces.

Use a group of bonded interfaces connected to different switches. Define a dedicated sync interface, only one interface per node using the SmartConsole / Gateways & Servers -> select Cluster Properties / Network Management.

NEW QUESTION 208
If a “ping”-packet is dropped by FW1 Policy -on how many inspection Points do you see this packet in “fw monitor”?

“i”, “l” and “o”

I don’t see it in fw monitor

“i” only

“i” and “l”

NEW QUESTION 209
What solution is multi-queue intended to provide?

Improve the efficiency of traffic handling by SecureXL SNDs

Reduce the confusion for traffic capturing in FW Monitor

Improve the efficiency of CoreXL Kernel Instances

Reduce the performance of network interfaces

NEW QUESTION 210
What are possible Automatic Reactions in SmartEvent?

Mail. SNMP Trap, Block Source. Block Event Activity, External Script

Web Mail. Block Destination, SNMP Trap. SmartTask

Web Mail, Block Service. SNMP Trap. SmartTask, Geo Protection

Web Mail, Forward to SandBlast Appliance, SNMP Trap, External Script

NEW QUESTION 211
What is the best method to upgrade a Security Management Server to R81.x when it is not connected to the Internet?

CPUSE offline upgrade only

Advanced upgrade or CPUSE offline upgrade

Advanced Upgrade only

SmartUpdate offline upgrade

NEW QUESTION 212
What is the command used to activated Multi-Version Cluster mode?

set cluster member mvc on in Clish

set mvc on on Clish

set cluster MVC on in Expert Mode

set cluster mvc on in Expert Mode

NEW QUESTION 213
Which of the following process pulls application monitoring status?

fwd

fwm

cpwd

cpd

NEW QUESTION 214
Fill in the blank. Once a certificate is revoked from the Security Gateway by the Security Management Server, the certificate information is ________ .

Sent to the Internal Certificate Authority.

Sent to the Security Administrator.

Stored on the Security Management Server.

Stored on the Certificate Revocation List.

NEW QUESTION 215
In what way is Secure Network Distributor (SND) a relevant feature of the Security Gateway?

SND is a feature to accelerate multiple SSL VPN connections

SND is an alternative to IPSec Main Mode, using only 3 packets

SND is used to distribute packets among Firewall instances

SND is a feature of fw monitor to capture accelerated packets

NEW QUESTION 216
How many layers make up the TCP/IP model?

NEW QUESTION 217
Sieve is a Cyber Security Engineer working for Global Bank with a large scale deployment of Check Point Enterprise Appliances Steve’s manager. Diana asks him to provide firewall connection table details from one of the firewalls for which he is responsible.
Which of these commands may impact performance briefly and should not be used during heavy traffic times of day?

fw tab -t connections -s

fw tab -t connections

fw tab -t connections -c

fw tab -t connections -f

NEW QUESTION 218
What is the limitation of employing Sticky Decision Function?

With SDF enabled, the involved VPN Gateways only supports IKEv1

Acceleration technologies, such as SecureXL and CoreXL are disabled when activating SDF

With SDF enabled, only ClusterXL in legacy mode is supported

With SDF enabled, you can only have three Sync interfaces at most

NEW QUESTION 219
To enable Dynamic Dispatch on Security Gateway without the Firewall Priority Queues, run the following command in Expert mode and reboot:

fw ctl Dyn_Dispatch on

fw ctl Dyn_Dispatch enable

fw ctl multik set_mode 4

fw ctl multik set_mode 1

NEW QUESTION 220
Which web services protocol is used to communicate to the Check Point R81 Identity Awareness Web API?

SOAP

REST

XLANG

XML-RPC

NEW QUESTION 221
Which statement is NOT TRUE about Delta synchronization?

Using UDP Multicast or Broadcast on port 8161

Using UDP Multicast or Broadcast on port 8116

Quicker than Full sync

Transfers changes in the Kernel tables between cluster members.

NEW QUESTION 222
What is the responsibility of SOLR process on R81.20 management server?

Validating all data before it’s written into the database

It generates indexes of data written to the database

Communication between SmartConsole applications and the Security Management Server

Writing all information into the database

156-315.81.20 Questions Prepare with Learning Information: https://www.prepawaytest.com/CheckPoint/156-315.81.20-practice-exam-dumps.html

Leave a Reply Cancel reply