CheckPoint Checkpoint Certifications 156-315.80 Questions & Answers

• Question 411:

  In terms of Order Rule Enforcement, when a packet arrives at the gateway, the gateway checks it against the rules in the top Policy Layer, sequentially from top to bottom. Which of the following statements is correct?

  A. If the Action of the matching rule is Accept, the gateway will drop the packet.

  B. If the Action of the matching rule is Drop, the gateway continues to check rules in the next Policy Layer down.

  C. If the Action of the matching rule is Drop, the gateway stops matching against later rules in the Policy Rule Base and drops the packet.

  D. If the rule does not matched in the Network policy it will continue to other enabled policies

  Correct Answer: C

  Reference: https://sc1.checkpoint.com/documents/R80/CP_R80_SecMGMT/html_frameset.htm? topic=documents/R80/CP_R80_SecMGMT/126197

• Question 412:

  The back end database for Check Point R80 Management uses:

  A. DBMS

  B. MongoDB

  C. PostgreSQL

  D. MySQL

  Correct Answer: C

• Question 413:

  UserCheck objects in the Application Control and URL Filtering rules allow the gateway to communicate with the users. Which action is not supported in UserCheck objects?

  A. Ask

  B. Drop

  C. Inform

  D. Reject

  Correct Answer: D

• Question 414:

  Due to high CPU workload on the Security Gateway, the security administrator decided to purchase a new CPU to replace the existing single core CPU. After installation, is the administrator required to perform any additional tasks?

  A. Go to clash-Run cpstop | Run cpstart

  B. Go to clash-Run cpconfig | Configure CoreXL to make use of the additional Cores | Exit cpconfig | Reboot Security Gateway

  C. Administrator does not need to perform any task. Check Point will make use of the newly installed CPU and Cores

  D. Go to clash-Run cpconfig | Configure CoreXL to make use of the additional Cores | Exit cpconfig | Reboot Security Gateway | Install Security Policy

  Correct Answer: B

• Question 415:

  Which firewall daemon is responsible for the FW CLI commands?

  A. fwd

  B. fwm

  C. cpm

  D. cpd

  Correct Answer: A

• Question 416:

  How long may verification of one file take for Sandblast Threat Emulation?

  A. up to 1 minutes

  B. within seconds cleaned file will be provided

  C. up to 5 minutes

  D. up to 3 minutes

  Correct Answer: B

• Question 417:

  What is the default size of NAT table fwx_alloc?

  A. 20000

  B. 35000

  C. 25000

  D. 10000

  Correct Answer: C

  Reference: https://supportcenter.checkpoint.com/supportcenter/portal? eventSubmit_doGoviewsolutiondetails=andsolutionid=sk32224

• Question 418:

  What are types of Check Point APIs available currently as part of R80.10 code?

  A. Security Gateway API Management API, Threat Prevention API and Identity Awareness Web Services API

  B. Management API, Threat Prevention API, Identity Awareness Web Services API and OPSEC SDK API

  C. OSE API, OPSEC SDK API, Threat Extraction API and Policy Editor API

  D. CPMI API, Management API, Threat Prevention API and Identity Awareness Web Services API

  Correct Answer: B

  Reference: http://dl3.checkpoint.com/paid/29/29532b9eec50d0a947719ae631f640d0/ CP_R80_CheckPoint_API_ReferenceGuide.pdf? HashKey=1517088487_4c0acda205460a92f44c83d399826a7bandxtn=.pdf

• Question 419:

  Vanessa is expecting a very important Security Report. The Document should be sent as an attachment via e-mail. An e-mail with Security_report.pdf file was delivered to her e-mail inbox. When she opened the PDF file, she noticed that the file is basically empty and only few lines of text are in it. The report is missing some graphs, tables and links.

  Which component of SandBlast protection is her company using on a Gateway?

  A. SandBlast Threat Emulation

  B. SandBlast Agent

  C. Check Point Protect

  D. SandBlast Threat Extraction

  Correct Answer: D

• Question 420:

  If an administrator wants to add manual NAT for addresses now owned by the Check Point firewall, what else is necessary to be completed for it to function properly?

  A. Nothing - the proxy ARP is automatically handled in the R80 version

  B. Add the proxy ARP configurations in a file called /etc/conf/local.arp

  C. Add the proxy ARP configurations in a file called $FWDIR/conf/local.arp

  D. Add the proxy ARP configurations in a file called $CPDIR/conf/local.arp

  Correct Answer: C