All About 100% Guarantee 156-315.80 Exams

NEW QUESTION 1
Which Check Point software blade provides Application Security and identity control?

• A. Identity Awareness
• B. Data Loss Prevention
• C. URL Filtering
• D. Application Control

Answer: D

NEW QUESTION 2
You need to change the number of firewall Instances used by CoreXL. How can you achieve this goal?

• A. edit fwaffinity.conf; reboot required
• B. cpconfig; reboot required
• C. edit fwaffinity.conf; reboot not required
• D. cpconfig; reboot not required

Answer: B

NEW QUESTION 3
Fill in the blank: Browser-based Authentication sends users to a web page to acquire identities using ______ .

• A. User Directory
• B. Captive Portal and Transparent Kerberos Authentication
• C. Captive Portal
• D. UserCheck

Answer: B

NEW QUESTION 4
Which command is used to set the CCP protocol to Multicast?

• A. cphaprob set_ccp multicast
• B. cphaconf set_ccp multicast
• C. cphaconf set_ccp no_broadcast
• D. cphaprob set_ccp no_broadcast

Answer: B

NEW QUESTION 5
What is mandatory for ClusterXL to work properly?

• A. The number of cores must be the same on every participating cluster node
• B. The Magic MAC number must be unique per cluster node
• C. The Sync interface must not have an IP address configured
• D. If you have “Non-monitored Private” interfaces, the number of those interfaces must be the same on all cluster members

Answer: B

NEW QUESTION 6
You work as a security administrator for a large company. CSO of your company has attended a security conference where he has learnt how hackers constantly modify their strategies and techniques to evade detection and reach corporate resources. He wants to make sure that his company has the tight protections in place. Check Point has been selected for the security vendor.
Which Check Point product protects BEST against malware and zero-day attacks while ensuring quick delivery of safe content to your users?

• A. IPS AND Application Control
• B. IPS, anti-virus and anti-bot
• C. IPS, anti-virus and e-mail security
• D. SandBlast

Answer: D

NEW QUESTION 7
Which component is NOT required to communicate with the Web Services API?

• A. API key
• B. session ID token
• C. content-type
• D. Request payload

Answer: A

NEW QUESTION 8
In SmartEvent, what are the different types of automatic reactions that the administrator can configure?

• A. Mail, Block Source, Block Event Activity, External Script, SNMP Trap
• B. Mail, Block Source, Block Destination, Block Services, SNMP Trap
• C. Mail, Block Source, Block Destination, External Script, SNMP Trap
• D. Mail, Block Source, Block Event Activity, Packet Capture, SNMP Trap

Answer: A

NEW QUESTION 9
When users connect to the Mobile Access portal they are unable to open File Shares. Which log file would you want to examine?

• A. cvpnd.elg
• B. httpd.elg
• C. vpnd.elg
• D. fw.elg

Answer: A

NEW QUESTION 10
Fill in the blank: The R80 utility fw monitor is used to troubleshoot _______ .

• A. User data base corruption
• B. LDAP conflicts
• C. Traffic issues
• D. Phase two key negotiations

Answer: C

Explanation:
Check Point’s FW Monitor is a powerful built-in tool for capturing network traffic at the packet level. The FW Monitor utility captures network packets at multiple capture points along the FireWall inspection chains. These captured packets can be inspected later using the WireShark.

NEW QUESTION 11
One of major features in R80 SmartConsole is concurrent administration.
Which of the following is NOT possible considering that AdminA, AdminB and AdminC are editing the same Security Policy?

• A. A lock icon shows that a rule or an object is locked and will be available.
• B. AdminA and AdminB are editing the same rule at the same time.
• C. A lock icon next to a rule informs that any Administrator is working on this particular rule.
• D. AdminA, AdminB and AdminC are editing three different rules at the same time.

Answer: C

NEW QUESTION 12
Which blades and or features are not supported in R80?

• A. SmartEvent Maps
• B. SmartEvent
• C. Identity Awareness
• D. SmartConsole Toolbars

Answer: A

NEW QUESTION 13
Which one of these features is NOT associated with the Check Point URL Filtering and Application Control Blade?

• A. Detects and blocks malware by correlating multiple detection engines before users are affected.
• B. Configure rules to limit the available network bandwidth for specified users or groups.
• C. Use UserCheck to help users understand that certain websites are against the company’s security policy.
• D. Make rules to allow or block applications and Internet sites for individual applications, categories, and risk levels.

Answer: A

NEW QUESTION 14
Traffic from source 192.168.1.1 is going to www.google.com. The Application Control Blade on the gateway is inspecting the traffic. Assuming acceleration is enabled which path is handling the traffic?

• A. Slow Path
• B. Medium Path
• C. Fast Path
• D. Accelerated Path

Answer: A

NEW QUESTION 15
In R80 spoofing is defined as a method of:

• A. Disguising an illegal IP address behind an authorized IP address through Port Address Translation.
• B. Hiding your firewall from unauthorized users.
• C. Detecting people using false or wrong authentication logins
• D. Making packets appear as if they come from an authorized IP address.

Answer: D

Explanation:
IP spoofing replaces the untrusted source IP address with a fake, trusted one, to hijack connections to your network. Attackers use IP spoofing to send malware and bots to your protected network, to execute DoS attacks, or to gain unauthorized access.

NEW QUESTION 16
How often does Threat Emulation download packages by default?

• A. Once a week
• B. Once an hour
• C. Twice per day
• D. Once per day

Answer: D

NEW QUESTION 17
......