CheckPoint Checkpoint Certifications 156-315.80 Questions & Answers

• Question 31:

  What are the blades of Threat Prevention?

  A. IPS, QoS, AntiVirus, AntiBot, Threat Emulation/Extraction

  B. DLP, AntiVirus, QoS, AntiBot, Threat Emulation/Extraction

  C. IPS, AntiVirus, AntiBot

  D. IPS, AntiVirus, AntiBot, Threat Emulation/Extraction

  Correct Answer: D

  Reference: https://www.checkpoint.com/products/next-generation-threat-prevention/

• Question 32:

  What is required for a site-to-site VPN tunnel that does not use certificates?

  A. Pre-Shared Secret

  B. Unique Passwords

  C. RSA Token

  D. SecureID

  Correct Answer: A

  Reference: https://sc1.checkpoint.com/documents/R81/WebAdminGuides/EN/ CP_R81_SitetoSiteVPN_AdminGuide/Topics-VPNSG/Basic-Site-to-Site-VPN-Configuration.htm

• Question 33:

  When defining QoS global properties, which option below is not valid?

  A. Weight

  B. Authenticated timeout

  C. Schedule

  D. Rate

  Correct Answer: C

  Reference: https://sc1.checkpoint.com/documents/R76/CP_R76_QoS_AdminGuide/14871.htm

• Question 34:

  The fwd process on the Security Gateway sends logs to the fwd process on the Management Server, where it is forwarded to via.

  A. cpwd, fwssd

  B. cpd, fwm

  C. cpm, cpd

  D. fwm, cpd

  Correct Answer: C

• Question 35:

  Return oriented programming (ROP) exploits are detected by which security blade?

  A. Check Point Anti-Virus / Threat Emulation

  B. Intrusion Prevention Software

  C. Application control

  D. Data Loss Prevention

  Correct Answer: A

  Reference: https://www.checkpoint.com/customer-stories/se2/

• Question 36:

  Which User-mode process is responsible for the FW CLI commands?

  A. fwd

  B. fwm

  C. cpm

  D. cpd

  Correct Answer: B

  fwm -- Firewall Management (fwm) is on all management products, including Multi-Domain Security Management, and on products that require direct GUI access, such as SmartEvent. The fwm process is used mainly for backward compatibility of gateways. It provides GUI client communication, database manipulation, policy compilation, and Management High Availability synchronization.

• Question 37:

  What is the correct Syntax for adding an access-rule via R80 API?

  A. add rule position 1 name "Rule 1" policy-package "Standard" add service "http"

  B. add access-rule and follow the wizard

  C. add access-rule layer "Network" action "Allow"

  D. add access-rule layer "Network" position 1 name "Rule 1" service 1 "SMTP" service 2 "http"

  Correct Answer: D

  Reference: https://sc1.checkpoint.com/documents/latest/APIs/index.html#gui-cli/add-access-rule~v1.1%20

• Question 38:

  How many versions, besides the destination version, are supported in a Multi-Version Cluster Upgrade?

  A. 1

  B. 3

  C. 2

  D. 4

  Correct Answer: C

  Reference: https://sc1.checkpoint.com/documents/R81/WebAdminGuides/EN/ CP_R81_Installation_and_Upgrade_Guide/Topics-IUG/MVC-Upgrade-Supported-Versions.htm

• Question 39:

  What are the minimum open server hardware requirements for a Security Management Server/Standalone Security Gateway?

  A. 2 CPU cores, 4GB of RAM and 15GB of disk space

  B. 8 CPU cores, 16GB of RAM and 500 GB of disk space

  C. 4 CPU cores, 8GB of RAM and 500GB of disk space

  D. 8 CPU cores, 32GB of RAM and 1 TB of disk space

  Correct Answer: A

  Reference: https://sc1.checkpoint.com/documents/R80.20_GA/WebAdminGuides/EN/CP_R80.20_RN/

  html_frameset.htm?topic=documents/R80.20_GA/WebAdminGuides/EN/CP_R80.20_RN/212476

• Question 40:

  The system administrator of a company is trying to find out why acceleration is not working for the traffic. The traffic is allowed according to the rule based and checked for viruses. But it is not accelerated. What is the most likely reason that the traffic is not accelerated?

  A. The connection is destined for a server within the network

  B. The connection required a Security server

  C. The packet is the second in an established TCP connection

  D. The packets are not multicast

  Correct Answer: B