Pass Your 156-315.80 Dumps as PDF Updated on 2022 With 465 Questions
CheckPoint 156-315.80 Real Exam Questions and Answers FREE
NEW QUESTION 262
What happen when IPS profile is set in Detect Only Mode for troubleshooting?
- A. It will generate Geo-Protection traffic
- B. It will not block malicious traffic
- C. Automatically uploads debugging logs to Check Point Support Center
- D. Bypass licenses requirement for Geo-Protection control
Answer: B
Explanation:
Explanation
It is recommended to enable Detect-Only for Troubleshooting on the profile during the initial installation of IPS. This option overrides any protections that are set to Prevent so that they will not block any traffic.
During this time you can analyze the alerts that IPS generates to see how IPS will handle network traffic, while avoiding any impact on the flow of traffic.
NEW QUESTION 263
What will be the effect of running the following command on the Security Management Server?
- A. Reset SIC on all gateways.
- B. No effect.
- C. Remove the installed Security Policy.
- D. Remove the local ACL lists.
Answer: C
Explanation:
Explanation/Reference: https://sc1.checkpoint.com/documents/R77/CP_R77_SecurityGatewayTech_WebAdmin/6751.htm
NEW QUESTION 264
Fill in the blank: The R80 utility fw monitor is used to troubleshoot ________.
- A. Phase two key negotiations
- B. LDAP conflicts
- C. Traffic issues
- D. User data base corruption
Answer: C
Explanation:
Explanation
Check Point's FW Monitor is a powerful built-in tool for capturing network traffic at the packet level. The FW Monitor utility captures network packets at multiple capture points along the FireWall inspection chains.
These captured packets can be inspected later using the WireShark
NEW QUESTION 265
What is the limitation of Employing Stickly Function?
- A. With SDF enable, the involved VPN Gateways only supports BCEv1
- B. With SDF enabled, you can only have three sync interfaces at most
- C. With SDF enabled, only ClusterXL in legacy mode is supported
- D. Acceleration technologies, such as Secure XL and CoreXL are disabled when activating SDF
Answer: D
NEW QUESTION 266
Under which file is the proxy arp configuration stored?
- A. $FWDIR/conf/local.arp on the gateway
- B. $FWDIR/conf/local.arp on the management server
- C. $FWDIR/state/_tmp/proxy.arp on the security gateway
- D. $FWDIR/state/proxy_arp.conf on the management server
Answer: A
NEW QUESTION 267
When deploying Sandblast, how would a Threat Emulation appliance be benefits from the integration of threatCloud?
- A. ThreatCloud is a collaboration platform for Check point customer to benefits from a virtual cloud consisting of a combination of all on-premise private cloud environments.
- B. ThreatCloud is a database-related appliance with is located on-premise to preserve privacy of company-related data.
- C. ThreatCloud is a collaboration platform forCheck Point customer to benefit from VMWare ESXi infrastructure which supports the Threat Emulation Appliance as virtual machine in the EMC cloud.
- D. ThreatCloud is collaborating platforms for all the Check point customer to share information about malicious and beings files all of the customer can benefits from as it makes emulation of know files Unnecessary.
Answer: D
NEW QUESTION 268
You have existing dbedit scripts from R77. Can you use them with R80.10?
- A. You can use dbedit to modify threat prevention or access policies, but not create or modify layers
- B. dbedit is not supported in R80.10
- C. dbedit scripts are being replaced by mgmt_cli in R80.10
- D. dbedit is fully supported in R80.10
Answer: C
Explanation:
Explanation/Reference:
Reference: https://www.checkpoint.com/downloads/product-related/r80.10-mgmt-architecture-overview.pdf
NEW QUESTION 269
Fill in the blank: The R80 feature ________ permits blocking specific IP addresses for a specified time period.
- A. Local Interface Spoofing
- B. Block Port Overflow
- C. Adaptive Threat Prevention
- D. Suspicious Activity Monitoring
Answer: D
Explanation:
Explanation
Suspicious Activity Rules Solution
Suspicious Activity Rules is a utility integrated into SmartView Monitor that is used to modify access privileges upon detection of any suspicious network activity (for example, several attempts to gain unauthorized access).
The detection of suspicious activity is based on the creation of Suspicious Activity rules. Suspicious Activity rules are Firewall rules that enable the system administrator to instantly block suspicious connections that are not restricted by the currently enforced security policy. These rules, once set (usually with an expiration date), can be applied immediately without the need to perform an Install Policy operation
NEW QUESTION 270
You pushed a policy to your gateway and you cannot access the gateway remotely any more. What command should you use to remove the policy from the gateway by logging in through console access?
- A. "fwcpstop"
- B. "fw unloadlocal"
- C. "fwundo"
- D. "fw unloadpolicy"
Answer: B
NEW QUESTION 271
VPN Link Selection will perform the following when the primary VPN link goes down?
- A. The Firewall can update the Link Selection entries to start using a different link for the same tunnel.
- B. The Firewall will inform the client that the tunnel is down.
- C. The Firewall will drop the packets.
- D. The Firewall will send out the packet on all interfaces.
Answer: A
NEW QUESTION 272
Automatic affinity means that if SecureXL is running, the affinity for each interface is automatically reset every
- A. 30 sec
- B. 5 sec
- C. 60 sec
- D. 15 sec
Answer: C
Explanation:
Explanation/Reference:
Reference: https://sc1.checkpoint.com/documents/R76/
CP_R76_PerformanceTuning_WebAdmin/6731.htm
NEW QUESTION 273
What component of R80 Management is used for indexing?
- A. SOLR
- B. API Server
- C. DBSync
- D. fwm
Answer: A
Explanation:
References:
NEW QUESTION 274
Which of the following technologies extracts detailed information from packets and stores that information in state tables?
- A. Packet Filtering
- B. Application Layer Firewall
- C. Stateful Inspection
- D. INSPECT Engine
Answer: D
Explanation:
References:
NEW QUESTION 275
Which command can you use to enable or disable multi-queue per interface?
- A. Cpmqueue set
- B. Cpmq config
- C. St cpmq enable
- D. cpmq set
Answer: D
Explanation:
References:
NEW QUESTION 276
What is the recommended number of physical network interfaces in a Mobile Access cluster deployment?
- A. 2 Interfaces - a data interface leading to the organization and the Internet, a second interface for synchronization.
- B. 1 Interface - an interface leading to the organization and the Internet, and configure for synchronization.
- C. 4 Interfaces - an interface leading to the organization, a second interface leading to the internet, a third interface for synchronization, a fourth interface leading to the Security Management Server.
- D. 3 Interfaces - an interface leading to the organization, a second interface leading to the Internet, a third interface for synchronization.
Answer: D
Explanation:
Explanation/Reference: https://sc1.checkpoint.com/documents/R76/CP_R76_Mobile_Access_WebAdmin/41723.htm
NEW QUESTION 277
What level of CPU load on a Secure Network Distributor would indicate that another may be necessary?
- A. Wait <20%
- B. Idle <20%
- C. SYS <20%
- D. USR <20%
Answer: B
NEW QUESTION 278
What CLI utility runs connectivity tests from a Security Gateway to an AD domain controller?
- A. ad_connectivity_test -d <domain>
https://sc1.checkpoint.com/documents/R80.30/WebAdminGuides/EN/
CP_R80.30_CLI_ReferenceGuide/html_frameset.htm?topic=documents/R80.30/WebAdminGuides/EN/ CP_R80.30_CLI_ReferenceGuide/200877 - B. test_connectivity_ad -d <domain>
- C. test_ldap_connectivity -d <domain>
- D. test_ad_connectivity -d <domain>
Answer: D
NEW QUESTION 279
Which of the following is NOT a type of Endpoint Identity Agent?
- A. Full
- B. Terminal
- C. Custom
- D. Light
Answer: B
Explanation:
References:
NEW QUESTION 280
Full synchronization between cluster members is handled by Firewall Kernel. Which port is used for this?
- A. UDP port 256
- B. UDP port 265
- C. TCP port 265
- D. TCP port 256
Answer: D
Explanation:
Explanation: Synchronization works in two modes:
Full Sync transfers all Security Gateway kernel table information from one cluster member to another. It is handled by the fwd daemon using an encrypted TCP connection on port 256.
Delta Sync transfers changes in the kernel tables between cluster members. Delta sync is handled by the Security Gateway kernel using UDP connections on port 8116.
Reference: https://sc1.checkpoint.com/documents/R80.10/WebAdminGuides/EN/ CP_R80.10_ClusterXL_AdminGuide/html_frameset.htm?topic=documents/R80.10/WebAd minGuides/EN/ CP_R80.10_ClusterXL_AdminGuide/7288
NEW QUESTION 281
Which command collects diagnostic data for analyzing customer setup remotely?
- A. cpinfo
- B. migrate export
- C. cpview
- D. sysinfo
Answer: A
Explanation:
CPInfo is an auto-updatable utility that collects diagnostics data on a customer's machine at the time of execution and uploads it to Check Point servers (it replaces the standalone cp_uploader utility for uploading files to Check Point servers).
The CPInfo output file allows analyzing customer setups from a remote location. Check Point support engineers can open the CPInfo file in a demo mode, while viewing actual customer Security Policies and Objects. This allows the in-depth analysis of customer's configuration and environment settings.
NEW QUESTION 282
Full synchronization between cluster members is handled by Firewall kernel. Which port is used for this?
- A. UDP port 256
- B. TCP port 265
- C. UDP port 265
- D. TCP port 256
Answer: B
NEW QUESTION 283
What has to be taken into consideration when configuring Management HA?
- A. SmartConsole must be closed prior to synchronized changes in the objects database
- B. For Management Server synchronization, only External Virtual Switches are supported.
So, if you wanted to employ Virtual Routers instead, you have to reconsider your design. - C. The Database revisions will not be synchronized between the management servers
- D. If you wanted to use Full Connectivity Upgrade, you must change the Implied Rules to allow FW1_cpredundant to pass before the Firewall Control Connections.
Answer: C
NEW QUESTION 284
......
Pass CheckPoint 156-315.80 Exam Info and Free Practice Test: https://www.itexamdownload.com/156-315.80-valid-questions.html
New 2022 Latest Questions 156-315.80 Dumps - Use Updated CheckPoint Exam: https://drive.google.com/open?id=1XMSwCKPurKXbKw1StVNkp8StgtcbMuli