A Review Of Downloadable 156-315.80 Exam Engine

NEW QUESTION 1
Which VPN routing option uses VPN routing for every connection a satellite gateway handles?

• A. To satellites through center only
• B. To center only
• C. To center and to other satellites through center
• D. To center, or through the center to other satellites, to Internet and other VPN targets

Answer: D

NEW QUESTION 2
What is correct statement about Security Gateway and Security Management Server failover in Check Point R80.X in terms of Check Point Redundancy driven solution?

• A. Security Gateway failover is an automatic procedure but Security Management Server failover is a manual procedure.
• B. Security Gateway failover as well as Security Management Server failover is a manual procedure.
• C. Security Gateway failover is a manual procedure but Security Management Server failover is an automatic procedure.
• D. Security Gateway failover as well as Security Management Server failover is an automatic procedure.

Answer: A

NEW QUESTION 3
SmartEvent provides a convenient way to run common command line executables that can assist in investigating events. Right-clicking the IP address, source or destination, in an event provides a list of default and customized commands. They appear only on cells that refer to IP addresses because the IP address of the active cell is used as the destination of the command when run. The default commands are:

• A. ping, traceroute, netstat, and route
• B. ping, nslookup, Telnet, and route
• C. ping, whois, nslookup, and Telnet
• D. ping, traceroute, netstat, and nslookup

Answer: C

NEW QUESTION 4
What are the two high availability modes?

• A. Load Sharing and Legacy
• B. Traditional and New
• C. Active and Standby
• D. New and Legacy

Answer: D

Explanation:
ClusterXL has four working modes. This section briefly describes each mode and its relative advantages and disadvantages.

NEW QUESTION 5
Which command can you use to verify the number of active concurrent connections?

• A. fw conn all
• B. fw ctl pstat
• C. show all connections
• D. show connections

Answer: B

NEW QUESTION 6
Which Mobile Access Application allows a secure container on Mobile devices to give users access to internal website, file share and emails?

• A. Check Point Remote User
• B. Check Point Capsule Workspace
• C. Check Point Mobile Web Portal
• D. Check Point Capsule Remote

Answer: C

NEW QUESTION 7
In SmartConsole, objects are used to represent physical and virtual network components and also some logical components. These objects are divided into several categories. Which of the following is NOT an objects category?

• A. Limit
• B. Resource
• C. Custom Application / Site
• D. Network Object

Answer: B

NEW QUESTION 8
Under which file is the proxy arp configuration stored?

• A. $FWDIR/state/proxy_arp.conf on the management server
• B. $FWDIR/conf/local.arp on the management server
• C. $FWDIR/state/_tmp/proxy.arp on the security gateway
• D. $FWDIR/conf/local.arp on the gateway

Answer: D

NEW QUESTION 9
When simulating a problem on ClusterXL cluster with cphaprob –d STOP -s problem -t 0 register, to initiate a failover on an active cluster member, what command allows you remove the problematic state?

• A. cphaprob –d STOP unregister
• B. cphaprob STOP unregister
• C. cphaprob unregister STOP
• D. cphaprob –d unregister STOP

Answer: A

Explanation:
esting a failover in a controlled manner using following command;
# cphaprob -d STOP -s problem -t 0 register
This will register a problem state on the cluster member this was entered on; If you then run;
# cphaprob list
this will show an entry named STOP.
to remove this problematic register run following;
# cphaprob -d STOP unregister References:

NEW QUESTION 10
John is using Management HA. Which Smartcenter should be connected to for making changes?

• A. secondary Smartcenter
• B. active Smartenter
• C. connect virtual IP of Smartcenter HA
• D. primary Smartcenter

Answer: B

NEW QUESTION 11
What are the attributes that SecureXL will check after the connection is allowed by Security Policy?

• A. Source address, Destination address, Source port, Destination port, Protocol
• B. Source MAC address, Destination MAC address, Source port, Destination port, Protocol
• C. Source address, Destination address, Source port, Destination port
• D. Source address, Destination address, Destination port, Protocol

Answer: A

NEW QUESTION 12
What is the most recommended way to install patches and hotfixes?

• A. CPUSE Check Point Update Service Engine
• B. rpm -Uv
• C. Software Update Service
• D. UnixinstallScript

Answer: A

NEW QUESTION 13
Fill in the blanks: In the Network policy layer, the default action for the Implied last rule is ______ all traffic. However, in the Application Control policy layer, the default action is _______ all traffic.

• A. Accept; redirect
• B. Accept; drop
• C. Redirect; drop
• D. Drop; accept

Answer: D

NEW QUESTION 14
Which is NOT an example of a Check Point API?

• A. Gateway API
• B. Management API
• C. OPSC SDK
• D. Threat Prevention API

Answer: A

NEW QUESTION 15
How many layers make up the TCP/IP model?

• A. 2
• B. 7
• C. 6
• D. 4

Answer: D

NEW QUESTION 16
What are the methods of SandBlast Threat Emulation deployment?

• A. Cloud, Appliance and Private
• B. Cloud, Appliance and Hybrid
• C. Cloud, Smart-1 and Hybrid
• D. Cloud, OpenServer and Vmware

Answer: A

NEW QUESTION 17
Tom has been tasked to install Check Point R80 in a distributed deployment. Before Tom installs the systems this way, how many machines will he need if he does NOT include a SmartConsole machine in his calculations?

• A. One machine, but it needs to be installed using SecurePlatform for compatibility purposes.
• B. One machine
• C. Two machines
• D. Three machines

Answer: C

Explanation:
One for Security Management Server and the other one for the Security Gateway.

NEW QUESTION 18
......