CheckPoint Checkpoint Certifications 156-315.80 Questions & Answers

• Question 21:

  Where is the license for Check Point Mobile users installed?

  A. The Security Management Server

  B. The Endpoint Server

  C. The Primary Gateway

  D. The Standby Gateway

  Correct Answer: C

  Reference: https://dl3.checkpoint.com/paid/22/224f9bb86211ecf8e4c8615acf48ba9f/ CP_R80.40_RemoteAccessVPN_AdminGuide.pdf? HashKey=1637684643_cfdebb676156e28c4171160d7d1532c5andxtn=.pdf

• Question 22:

  In SmartConsole, where do you manage your Mobile Access Policy?

  A. Access Control Policy

  B. Through the Mobile Console

  C. Shared Gateways Policy

  D. From the Dedicated Mobility Tab

  Correct Answer: A

  Reference: https://sc1.checkpoint.com/documents/R80.30/WebAdminGuides/EN/ CP_R80.30_MobileAccess_AdminGuide/html_frameset.htm?topic=documents/R80.30/WebAdminGuides/ EN/CP_R80.30_MobileAccess_AdminGuide/41723

• Question 23:

  What is required for a certificate-based VPN tunnel between two gateways with separate management systems?

  A. Mutually Trusted Certificate Authorities

  B. Shared User Certificates

  C. Shared Secret Passwords

  D. Unique Passwords

  Correct Answer: A

  Reference: https://community.checkpoint.com/t5/Security-Gateways/HowTo-Set-Up-Certificate-Based-VPNs-withCheck-Point-Appliances/td-p/73299

• Question 24:

  When performing a minimal effort upgrade, what will happen to the network traffic?

  A. All connections that were initiated before the upgrade will be dropped, causing network downtime

  B. All connections that were initiated before the upgrade will be handled normally

  C. All connections that were initiated before the upgrade will be handled by the standby gateway

  D. All connections that were initiated before the upgrade will be handled by the active gateway

  Correct Answer: A

• Question 25:

  What level of CPU load on a Secure Network Distributor would indicate that another may be necessary?

  A. Idle <20%

  B. USR <20%

  C. SYS <20%

  D. Wait <20%

  Correct Answer: A

• Question 26:

  Which Remote Access Client does not provide an Office-Mode Address?

  A. SecuRemote

  B. Endpoint Security Suite

  C. Endpoint Security VPN

  D. Check Point Mobile

  Correct Answer: A

  Reference: https://sc1.checkpoint.com/documents/R81/WebAdminGuides/EN/ CP_R81_RemoteAccessVPN_AdminGuide/Topics-VPNRG/Office-Mode.htm

• Question 27:

  The Compliance Blade allows you to search for text strings in many windows and panes, to search for a value in a field, what would your syntax be?

  A. field_name:string

  B. name field:string

  C. name_field:string

  D. field name:string

  Correct Answer: A

  Reference: https://sc1.checkpoint.com/documents/R77/ CP_R77_Compliance_WebAdminGuide/96026.htm

• Question 28:

  If a "ping"-packet is dropped by FW1 Policy 璷n how many inspection Points do you see this packet in "fw monitor"?

  A. "i", "l" and "o"

  B. I don't see it in fw monitor

  C. "i" only

  D. "i" and "l"

  Correct Answer: C

• Question 29:

  In SmartEvent, what are the different types of automatic reactions that the administrator can configure?

  A. Mail, Block Source, Block Event Activity, External Script, SNMP Trap

  B. Mail, Block Source, Trigger log, Block Services, SNMP Trap

  C. Mail, Block Source, Trigger log, External Script, SNMP Trap

  D. Mail, Block Source, Block Event Activity, Packet Capture, SNMP Trap

  Correct Answer: A

  Reference: https://sc1.checkpoint.com/documents/R76/CP_R76_SmartEvent_AdminGuide/17401.htm

• Question 30:

  What ports are used for SmartConsole to connect to the Security Management Server?

  A. CPMI (18190)

  B. CPM (19009), CPMI (18190) and https (443)

  C. CPM (19009), CPMI (18190) and CPD (18191)

  D. ICA_Pull (18210), CPMI (18190) and https (443)

  Correct Answer: A