156-315.80 | Top Tips Of Leading 156-315.80 Free Exam

NEW QUESTION 1
Fill in the blank: The tool _______ generates a R80 Security Gateway configuration report.

• A. infoCP
• B. infoview
• C. cpinfo
• D. fw cpinfo

Answer: C

NEW QUESTION 2
If an administrator wants to add manual NAT for addresses now owned by the Check Point firewall, what else is necessary to be completed for it to function properly?

• A. Nothing - the proxy ARP is automatically handled in the R80 version
• B. Add the proxy ARP configurations in a file called /etc/conf/local.arp
• C. Add the proxy ARP configurations in a file called $FWDIR/conf/local.arp
• D. Add the proxy ARP configurations in a file called $CPDIR/conf/local.arp

Answer: D

NEW QUESTION 3
What is the default size of NAT table fwx_alloc?

• A. 20000
• B. 35000
• C. 25000
• D. 10000

Answer: C

NEW QUESTION 4
Which of these is an implicit MEP option?

• A. Primary-backup
• B. Source address based
• C. Round robin
• D. Load Sharing

Answer: A

NEW QUESTION 5
What is mandatory for ClusterXL to work properly?

• A. The number of cores must be the same on every participating cluster node
• B. The Magic MAC number must be unique per cluster node
• C. The Sync interface must not have an IP address configured
• D. If you have “Non-monitored Private” interfaces, the number of those interfaces must be the same on all cluster members

Answer: B

NEW QUESTION 6
To optimize Rule Base efficiency, the most hit rules should be where?

• A. Removed from the Rule Base.
• B. Towards the middle of the Rule Base.
• C. Towards the top of the Rule Base.
• D. Towards the bottom of the Rule Base.

Answer: C

NEW QUESTION 7
Sieve is a Cyber Security Engineer working for Global Bank with a large scale deployment of Check Point Enterprise Appliances Steve's manager. Diana asks him to provide firewall connection table details from one of the firewalls for which he is responsible. Which of these commands may impact performance briefly and should not be used during heavy traffic times of day?

• A. fw tab -t connections -s
• B. fw tab -t connections
• C. fw tab -t connections -c
• D. fw tab -t connections -f

Answer: B

NEW QUESTION 8
Which Check Point feature enables application scanning and the detection?

• A. Application Dictionary
• B. AppWiki
• C. Application Library
• D. CPApp

Answer: B

NEW QUESTION 9
Under which file is the proxy arp configuration stored?

• A. $FWDIR/state/proxy_arp.conf on the management server
• B. $FWDIR/conf/local.arp on the management server
• C. $FWDIR/state/_tmp/proxy.arp on the security gateway
• D. $FWDIR/conf/local.arp on the gateway

Answer: D

NEW QUESTION 10
Customer’s R80 management server needs to be upgraded to R80.10. What is the best upgrade method when the management server is not connected to the Internet?

• A. Export R80 configuration, clean install R80.10 and import the configuration
• B. CPUSE offline upgrade
• C. CPUSE online upgrade
• D. SmartUpdate upgrade

Answer: C

NEW QUESTION 11
Which feature is NOT provided by all Check Point Mobile Access solutions?

• A. Support for IPv6
• B. Granular access control
• C. Strong user authentication
• D. Secure connectivity

Answer: A

Explanation:
Types of Solutions
All of Check Point's Remote Access solutions provide:

NEW QUESTION 12
Which command shows actual allowed connections in state table?

• A. fw tab –t StateTable
• B. fw tab –t connections
• C. fw tab –t connection
• D. fw tab connections

Answer: B

NEW QUESTION 13
Which encryption algorithm is the least secured?

• A. AES-128
• B. AES-256
• C. DES
• D. 3DES

Answer: C

NEW QUESTION 14
Capsule Connect and Capsule Workspace both offer secured connection for remote users who are using their mobile devices. However, there are differences between the two.
Which of the following statements correctly identify each product's capabilities?

• A. Workspace supports ios operating system, Android, and WP8, whereas Connect supports ios operating system and Android only
• B. For compliance/host checking, Workspace offers the MDM cooperative enforcement, whereas Connectoffers both jailbreak/root detection and MDM cooperative enforcement.
• C. For credential protection, Connect uses One-time Password login support and has no SSO support, whereas Workspace offers both One-Time Password and certain SSO login support.
• D. Workspace can support any application, whereas Connect has a limited number of application types which it will support.

Answer: C

NEW QUESTION 15
In SmartEvent, what are the different types of automatic reactions that the administrator can configure?

• A. Mail, Block Source, Block Event Activity, External Script, SNMP Trap
• B. Mail, Block Source, Block Destination, Block Services, SNMP Trap
• C. Mail, Block Source, Block Destination, External Script, SNMP Trap
• D. Mail, Block Source, Block Event Activity, Packet Capture, SNMP Trap

Answer: A

NEW QUESTION 16
Check Point Support in many cases asks you for a configuration summary of your Check Point system. This is also called:

• A. cpexport
• B. sysinfo
• C. cpsizeme
• D. cpinfo

Answer: C

NEW QUESTION 17
The Check Point history feature in R80 provides the following:

• A. View install changes and install specific version
• B. View install changes
• C. Policy Installation Date, view install changes and install specific version
• D. Policy Installation Date only

Answer: C

NEW QUESTION 18
You have existing dbedit scripts from R77. Can you use them with R80.10?

• A. dbedit is not supported in R80.10
• B. dbedit is fully supported in R80.10
• C. You can use dbedit to modify threat prevention or access policies, but not create or modify layers
• D. dbedit scripts are being replaced by mgmt_cli in R80.10

Answer: D

NEW QUESTION 19
Tom has been tasked to install Check Point R80 in a distributed deployment. Before Tom installs the systems this way, how many machines will he need if he does NOT include a SmartConsole machine in his calculations?

• A. One machine, but it needs to be installed using SecurePlatform for compatibility purposes.
• B. One machine
• C. Two machines
• D. Three machines

Answer: C

Explanation:
One for Security Management Server and the other one for the Security Gateway.

NEW QUESTION 20
......