The Secret Of Check-Point 156-315.80 Exam Price

NEW QUESTION 1
Which of the following is a task of the CPD process?

• A. Invoke and monitor critical processes and attempts to restart them if they fail
• B. Transfers messages between Firewall processes
• C. Log forwarding
• D. Responsible for processing most traffic on a security gateway

Answer: A

Explanation:
https://sc1.checkpoint.com/documents/R76/CP_R76_CLI_WebAdmin/12496.htm

NEW QUESTION 2
Which command is used to obtain the configuration lock in Gaia?

• A. Lock database override
• B. Unlock database override
• C. Unlock database lock
• D. Lock database user

Answer: A

Explanation:
Obtaining a Configuration Lock

NEW QUESTION 3
After trust has been established between the Check Point components, what is TRUE about name and IP-address changes?

• A. Security Gateway IP-address cannot be changed without re-establishing the trust.
• B. The Security Gateway name cannot be changed in command line without re-establishing trust.
• C. The Security Management Server name cannot be changed in SmartConsole without re-establishing trust.
• D. The Security Management Server IP-address cannot be changed without re-establishing the trust.

Answer: A

NEW QUESTION 4
Fill in the blank: The “fw monitor” tool can be best used to troubleshoot _______.

• A. AV issues
• B. VPN errors
• C. Network issues
• D. Authentication issues

Answer: C

NEW QUESTION 5
The Check Point history feature in R80 provides the following:

• A. View install changes and install specific version
• B. View install changes
• C. Policy Installation Date, view install changes and install specific version
• D. Policy Installation Date only

Answer: C

NEW QUESTION 6
With MTA (Mail Transfer Agent) enabled the gateways manages SMTP traffic and holds external email with potentially malicious attachments. What is required in order to enable MTA (Mail Transfer Agent) functionality in the Security Gateway?

• A. Threat Cloud Intelligence
• B. Threat Prevention Software Blade Package
• C. Endpoint Total Protection
• D. Traffic on port 25

Answer: B

NEW QUESTION 7
Which of the following authentication methods ARE NOT used for Mobile Access?

• A. RADIUS server
• B. Username and password (internal, LDAP)
• C. SecurID
• D. TACACS+

Answer: D

NEW QUESTION 8
Which command would disable a Cluster Member permanently?

• A. clusterXL_admin down
• B. cphaprob_admin down
• C. clusterXL_admin down-p
• D. set clusterXL down-p

Answer: C

NEW QUESTION 9
SandBlast agent extends 0 day prevention to what part of the network?

• A. Web Browsers and user devices
• B. DMZ server
• C. Cloud
• D. Email servers

Answer: A

NEW QUESTION 10
In the R80 SmartConsole, on which tab are Permissions and Administrators defined?

• A. Security Policies
• B. Logs and Monitor
• C. Manage and Settings
• D. Gateways and Servers

Answer: C

NEW QUESTION 11
On R80.10 the IPS Blade is managed by:

• A. Threat Protection policy
• B. Anti-Bot Blade
• C. Threat Prevention policy
• D. Layers on Firewall policy

Answer: C

NEW QUESTION 12
SandBlast Mobile identifies threats in mobile devices by using on-device, network, and cloud-based algorithms and has four dedicated components that constantly work together to protect mobile devices and their data. Which component is NOT part of the SandBlast Mobile solution?

• A. Management Dashboard
• B. Gateway
• C. Personal User Storage
• D. Behavior Risk Engine

Answer: C

NEW QUESTION 13
fwssd is a child process of which of the following Check Point daemons?

• A. fwd
• B. cpwd
• C. fwm
• D. cpd

Answer: A

NEW QUESTION 14
Which of the following is a new R80.10 Gateway feature that had not been available in R77.X and older?

• A. The rule base can be built of layers, each containing a set of the security rule
• B. Layers are inspected in the order in which they are defined, allowing control over the rule base flow and which security functionalities take precedence.
• C. Limits the upload and download throughput for streaming media in the company to 1 Gbps.
• D. Time object to a rule to make the rule active only during specified times.
• E. Sub Policies ae sets of rules that can be created and attached to specific rule
• F. If the rule is matched, inspection will continue in the sub policy attached to it rather than in the next rule.

Answer: D

NEW QUESTION 15
How long may verification of one file take for Sandblast Threat Emulation?

• A. up to 1 minutes
• B. within seconds cleaned file will be provided
• C. up to 5 minutes
• D. up to 3 minutes

Answer: B

NEW QUESTION 16
Which packet info is ignored with Session Rate Acceleration?

• A. source port ranges
• B. source ip
• C. source port
• D. same info from Packet Acceleration is used

Answer: C

NEW QUESTION 17
......