2023 Reliable Study Materials & Testing Engine for 156-315.80 Exam Success!
Validate your Skills with Updated 156-315.80 Exam Questions & Answers and Test Engine
How to book the 156-315.80 Exam
These are following steps for registering the 156-315.80 exam. Step 1: Visit to Pearson VUE Exam Registration Step 2: Signup/Login to Pearson VUE account Step 3: Search for 156-315.80 exam Certifications Exam Step 4: Select Date, time and confirm with payment method
NEW QUESTION 117
Fill in the blank: The R80 SmartConsole, SmartEvent GUI client, and _______ consolidate billions of logs and shows then as prioritized security events.
- A. SmartReporter
- B. SmartView Web Application
- C. SmartMonitor
- D. SmartTracker
Answer: B
Explanation:
References:
NEW QUESTION 118
Fill in the blanks: Gaia can be configured using the ______ or _____ .
- A. GaiaUI; command line interface
- B. WebUI; Gaia Interface
- C. Gaia Interface; GaiaUI
- D. Command line interface; WebUI
Answer: D
NEW QUESTION 119
What is the purpose of Priority Delta in VRRP?
- A. When an Interface is up, Effective Priority = Priority + Priority Delta
- B. When a box fail, Effective Priority = Priority - Priority Delta
- C. When an Interface fail, Effective Priority = Priority - Priority Delta
- D. When a box up, Effective Priority = Priority + Priority Delta
Answer: C
Explanation:
Each instance of VRRP running on a supported interface may monitor the link state of other interfaces. The monitored interfaces do not have to be running VRRP.
If a monitored interface loses its link state, then VRRP will decrement its priority over a VRID by the specified delta value and then will send out a new VRRP HELLO packet. If the new effective priority is less than the priority a backup platform has, then the backup platform will beging to send out its own HELLO packet.
Once the master sees this packet with a priority greater than its own, then it releases the VIP.
References:
NEW QUESTION 120
Choose the correct syntax to add a new host named "emailserver1" with IP address 10.50.23.90 using GAiA Management CLI?
- A. mgmt_cli add host "emailserver1" address 10.50.23.90
- B. mgmt_cli add host name "myHost12 ip" address 10.50.23.90
- C. mgmt_cli add host name ip-address 10.50.23.90
- D. mgmt_cli add host name "emailserver1" ip-address 10.50.23.90
Answer: D
NEW QUESTION 121
In R80 spoofing is defined as a method of :
- A. Disguising an illegal IP address behind an authorized IP address through port address Translation.
- B. Detecting people using false or wrong authentication logins.
- C. Hiding your firewall from unauthorized users.
- D. Making packets appears as if they come from an authorized IP address.
Answer: D
NEW QUESTION 122
Which Check Point daemon monitors the other daemons?
- A. cpwd
- B. fwm
- C. fwssd
- D. cpd
Answer: A
Explanation:
Explanation/Reference: https://supportcenter.checkpoint.com/supportcenter/portal?
eventSubmit_doGoviewsolutiondetails=&solutionid=sk97638
NEW QUESTION 123
Capsule Connect and Capsule EWorkspace both offer secured connection for remote users who are using their mobile devices, there are differences between the two. Which of the following statement correctly identify each product's capabilities?
- A. Workspace can support any application whereas Connect has a limited number of application types which it will support.
- B. For credential protection, Connection uses One-time Password Login support and has no support, whereas Workspace offers both One-Time password and certain SSP login support.
- C. For compliance/host checking. Workspace offers the MDM cooperative enforcement, whereas Connect offers both jailbreak/root detection and MDM cooperative enforcement.
- D. Workspace supports operating system, Android, and WP8, where Connect support operating system and Android only.
Answer: C
NEW QUESTION 124
When gathering information about a gateway using CPINFO, what information is included or excluded when using the "-x" parameter?
- A. Gets information about the specified Virtual System
- B. Does not resolve network addresses
- C. Output excludes connection table
- D. Includes the registry
Answer: A
NEW QUESTION 125
Fill in the blank: The tool ________ generates a R80 Security Gateway configuration report.
- A. infoCP
- B. infoview
- C. fw cpinfo
- D. cpinfo
Answer: D
NEW QUESTION 126
What is the base level encryption key used by Capsule Docs?
- A. RSA 2048
- B. RSA 1024
- C. SHA-256
- D. AES
Answer: A
NEW QUESTION 127
SmartEvent does NOT use which of the following procedures to identify events:
- A. Matching a log against global exclusions
- B. Matching a log against local exclusions
- C. Matching a log against each event definition
- D. Create an event candidate
Answer: B
Explanation:
Events are detected by the SmartEvent Correlation Unit. The Correlation Unit task is to scan logs for criteria that match an Event Definition. SmartEvent uses these procedures to identify events:
* Matching a Log Against Global Exclusions
* Matching a Log Against Each Event Definition
* Creating an Event Candidate
* When a Candidate Becomes an Event
References:
NEW QUESTION 128
To fully enable Dynamic Dispatcher with Firewall Priority Queues on a Security Gateway, run the following command in Expert mode then reboot:
- A. fw ctl multik set_mode 1
- B. fw ctl Dynamic_Priority_Queue on
- C. fw ctl multik set_mode 9
- D. fw ctl Dynamic_Priority_Queue enable
Answer: C
Explanation:
Reference: https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk105762
NEW QUESTION 129
Which features are only supported with R80.10 Gateways but not R77.x?
- A. The rule base can be built of layers, each containing a set of the security rules. Layers are inspected in the order in which they are defined, allowing control over the rule base flow and which security functionalities take precedence.
- B. Limits the upload and download throughput for streaming media in the company to 1 Gbps.
- C. Access Control policy unifies the Firewall, Application Control & URL Filtering, Data Awareness, and Mobile Access Software Blade policies
- D. Time object to a rule to make the rule active only during specified times.
Answer: A
Explanation:
Explanation/Reference: http://slideplayer.com/slide/12183998/
NEW QUESTION 130
When attempting to start a VPN tunnel, in the logs the error "no proposal chosen" is seen numerous times. No other VPN-related entries are present.
Which phase of the VPN negotiations has failed?
- A. IKE Phase 2
- B. IPSEC Phase 1
- C. IPSEC Phase 2
- D. IKE Phase 1
Answer: D
NEW QUESTION 131
What is UserCheck?
- A. Messaging tool used to verify a user's credentials.
- B. Communication tool used to inform a user about a website or application they are trying to access.
- C. Communication tool used to notify an administrator when a new user is created.
- D. Administrator tool used to monitor users on their network.
Answer: B
NEW QUESTION 132
What is the difference between SSL VPN and IPSec VPN?
- A. SSL VPN and IPSec VPN are the same.
- B. IPSec VPN requires installation of a resident VPN client and SSL VPN requires only an installed
Browser. - C. IPSec VPN does not require installation of a resilient VPN client.
- D. SSL VPN requires installation of a resident VPN client.
Answer: B
NEW QUESTION 133
What is a best practice before starting to troubleshoot using the "fw monitor" tool?
- A. Clear the connections table
- B. Run the command: fw monitor debug on
- C. Disable SecureXL
- D. Disable CoreXL
Answer: C
NEW QUESTION 134
What has to be taken into consideration when configuring Management HA?
- A. If you wanted to use Full Connectivity Upgrade, you must change the Implied Rules to allow FW1_cpredundant to pass before the Firewall Control Connections.
- B. The Database revisions will not be synchronized between the management servers
- C. For Management Server synchronization, only External Virtual Switches are supported.
So, if you wanted to employ Virtual Routers instead, you have to reconsider your design. - D. SmartConsole must be closed prior to synchronized changes in the objects database
Answer: B
NEW QUESTION 135
What is the purpose of Priority Delta in VRRP?
- A. When an Interface is up, Effective Priority = Priority + Priority Delta
- B. When a box fail, Effective Priority = Priority - Priority Delta
- C. When an Interface fail, Effective Priority = Priority - Priority Delta
- D. When a box up, Effective Priority = Priority + Priority Delta
Answer: C
Explanation:
Explanation/Reference:
Explanation:
Each instance of VRRP running on a supported interface may monitor the link state of other interfaces.
The monitored interfaces do not have to be running VRRP.
If a monitored interface loses its link state, then VRRP will decrement its priority over a VRID by the specified delta value and then will send out a new VRRP HELLO packet. If the new effective priority is less than the priority a backup platform has, then the backup platform will beging to send out its own HELLO packet.
Once the master sees this packet with a priority greater than its own, then it releases the VIP.
Reference: https://supportcenter.checkpoint.com/supportcenter/portal?
eventSubmit_doGoviewsolutiondetails=&solutionid=sk38524
NEW QUESTION 136
Which Check Point software blade provides protection from zero-day and undiscovered threats?
- A. Firewall
- B. Threat Extraction
- C. Application Control
- D. Threat Emulation
Answer: D
NEW QUESTION 137
Your manager asked you to check the status of SecureXL, and its enable templates and features, what
command will you use to provide such information to manager?
- A. fwaccel stats
- B. fw accel stat
- C. fw acces stats
- D. fwaccel stat
Answer: D
NEW QUESTION 138
You are working with multiple Security Gateways enforcing an extensive number of rules. To simplify
security administration, which action would you choose?
- A. Run separate SmartConsole instances to login and configure each Security Gateway directly.
- B. Create a separate Security Policy package for each remote Security Gateway.
- C. Eliminate all possible contradictory rules such as the Stealth or Cleanup rules.
- D. Create network objects that restricts all applicable rules to only certain networks.
Answer: B
NEW QUESTION 139
Which process handles connection from SmartConsole R80?
- A. fwd
- B. cpm
- C. cpd
- D. cpmd
Answer: B
NEW QUESTION 140
What is the mechanism behind Threat Extraction?
- A. This is a new mechanism which is able to collect malicious files out of any kind of file types to destroy
it prior to sending it to the intended recipient. - B. This a new mechanism which extracts malicious files from a document to use it as a counter-attack
against its sender. - C. Any active contents of a document, such as JavaScripts, macros and links will be removed from the
document and forwarded to the intended recipient, which makes this solution very fast. - D. This is a new mechanism to identify the IP address of the sender of malicious codes and put it into the
SAM database (Suspicious Activity Monitoring).
Answer: C
NEW QUESTION 141
......
Regular Free Updates 156-315.80 Dumps Real Exam Questions Test Engine: https://www.pass4training.com/156-315.80-pass-exam-training.html
