156-315.80 | High Value Check-Point 156-315.80 Actual Exam Online

NEW QUESTION 1
GAiA Software update packages can be imported and installed offline in situation where:

• A. Security Gateway with GAiA does NOT have SFTP access to Internet
• B. Security Gateway with GAiA does NOT have access to Internet.
• C. Security Gateway with GAiA does NOT have SSH access to Internet.
• D. The desired CPUSE package is ONLY available in the Check Point CLOUD.

Answer: B

NEW QUESTION 2
Which of these statements describes the Check Point ThreatCloud?

• A. Blocks or limits usage of web applications
• B. Prevents or controls access to web sites based on category
• C. Prevents Cloud vulnerability exploits
• D. A worldwide collaborative security network

Answer: D

NEW QUESTION 3
You need to change the MAC-address on eth2 interface of the gateway. What command and what mode will you use to achieve this goal?

• A. set interface eth2 mac-addr 11:11:11:11:11:11; CLISH
• B. ifconfig eth1 hw 11:11:11:11:11:11; expert
• C. set interface eth2 hw-addr 11:11:11:11:11:11; CLISH
• D. ethtool -i eth2 mac 11:11:11:11:11:11; expert

Answer: A

NEW QUESTION 4
What is the least amount of CPU cores required to enable CoreXL?

• A. 2
• B. 1
• C. 4
• D. 6

Answer: B

NEW QUESTION 5
You want to gather and analyze threats to your mobile device. It has to be a lightweight app. Which application would you use?

• A. SmartEvent Client Info
• B. SecuRemote
• C. Check Point Protect
• D. Check Point Capsule Cloud

Answer: C

NEW QUESTION 6
Sticky Decision Function (SDF) is required to prevent which of the following? Assume you set up an Active-Active cluster.

• A. Symmetric routing
• B. Failovers
• C. Asymmetric routing
• D. Anti-Spoofing

Answer: C

NEW QUESTION 7
Which of the following describes how Threat Extraction functions?

• A. Detect threats and provides a detailed report of discovered threats.
• B. Proactively detects threats.
• C. Delivers file with original content.
• D. Delivers PDF versions of original files with active content removed.

Answer: B

NEW QUESTION 8
One of major features in R80 SmartConsole is concurrent administration.
Which of the following is NOT possible considering that AdminA, AdminB and AdminC are editing the same Security Policy?

• A. A lock icon shows that a rule or an object is locked and will be available.
• B. AdminA and AdminB are editing the same rule at the same time.
• C. A lock icon next to a rule informs that any Administrator is working on this particular rule.
• D. AdminA, AdminB and AdminC are editing three different rules at the same time.

Answer: C

NEW QUESTION 9
What is the mechanism behind Threat Extraction?

• A. This a new mechanism which extracts malicious files from a document to use it as a counter-attack against its sender.
• B. This is a new mechanism which is able to collect malicious files out of any kind of file types to destroy it prior to sending it to the intended recipient.
• C. This is a new mechanism to identify the IP address of the sender of malicious codes and put it into the SAM database (Suspicious Activity Monitoring).
• D. Any active contents of a document, such as JavaScripts, macros and links will be removed from the document and forwarded to the intended recipient, which makes this solution very fast.

Answer: D

NEW QUESTION 10
Which of the following is NOT an alert option?

• A. SNMP
• B. High alert
• C. Mail
• D. User defined alert

Answer: B

NEW QUESTION 11
Which view is NOT a valid CPVIEW view?

• A. IDA
• B. RAD
• C. PDP
• D. VPN

Answer: C

NEW QUESTION 12
GAIA greatly increases operational efficiency by offering an advanced and intuitive software update agent, commonly referred to as the:

• A. Check Point Update Service Engine
• B. Check Point Software Update Agent
• C. Check Point Remote Installation Daemon (CPRID)
• D. Check Point Software Update Daemon

Answer: A

NEW QUESTION 13
What happen when IPS profile is set in Detect Only Mode for troubleshooting?

• A. It will generate Geo-Protection traffic
• B. Automatically uploads debugging logs to Check Point Support Center
• C. It will not block malicious traffic
• D. Bypass licenses requirement for Geo-Protection control

Answer: C

Explanation:
It is recommended to enable Detect-Only for Troubleshooting on the profile during the initial installation of
IPS. This option overrides any protections that are set to Prevent so that they will not block any traffic.
During this time you can analyze the alerts that IPS generates to see how IPS will handle network traffic, while avoiding any impact on the flow of traffic.

NEW QUESTION 14
What is correct statement about Security Gateway and Security Management Server failover in Check Point R80.X in terms of Check Point Redundancy driven solution?

• A. Security Gateway failover is an automatic procedure but Security Management Server failover is a manual procedure.
• B. Security Gateway failover as well as Security Management Server failover is a manual procedure.
• C. Security Gateway failover is a manual procedure but Security Management Server failover is an automatic procedure.
• D. Security Gateway failover as well as Security Management Server failover is an automatic procedure.

Answer: A

NEW QUESTION 15
John detected high load on sync interface. Which is most recommended solution?

• A. For short connections like http service – delay sync for 2 seconds
• B. Add a second interface to handle sync traffic
• C. For short connections like http service – do not sync
• D. For short connections like icmp service – delay sync for 2 seconds

Answer: A

NEW QUESTION 16
In which VPN community is a satellite VPN gateway not allowed to create a VPN tunnel with another satellite VPN gateway?

• A. Pentagon
• B. Combined
• C. Meshed
• D. Star

Answer: D

NEW QUESTION 17
When gathering information about a gateway using CPINFO, what information is included or excluded when using the “-x” parameter?

• A. Includes the registry
• B. Gets information about the specified Virtual System
• C. Does not resolve network addresses
• D. Output excludes connection table

Answer: B

NEW QUESTION 18
What are the two high availability modes?

• A. Load Sharing and Legacy
• B. Traditional and New
• C. Active and Standby
• D. New and Legacy

Answer: D

Explanation:
ClusterXL has four working modes. This section briefly describes each mode and its relative advantages and disadvantages.

NEW QUESTION 19
Check Point Management (cpm) is the main management process in that it provides the architecture for a consolidates management console. CPM allows the GUI client and management server to communicate via web services using _______ .

• A. TCP port 19009
• B. TCP Port 18190
• C. TCP Port 18191
• D. TCP Port 18209

Answer: A

NEW QUESTION 20
......