CheckPoint Checkpoint Certifications 156-315.80 Questions & Answers

• Question 41:

  SmartEvent Security Checkups can be run from the following Logs and Monitor activity:

  A. Reports

  B. Advanced

  C. Checkups

  D. Views

  Correct Answer: A

• Question 42:

  What is the best method to upgrade a Security Management Server to R80.x when it is not connected to the Internet?

  A. CPUSE offline upgrade only B. Advanced upgrade or CPUSE offline upgrade

  C. Advanced Upgrade only

  D. SmartUpdate offline upgrade

  Correct Answer: B

• Question 43:

  Which of the following is NOT a valid type SecureXL template?

  A. Accept Template

  B. Deny template

  C. Drop Template

  D. NAT Template

  Correct Answer: B

• Question 44:

  After finishing installation admin John likes to use top command in expert mode. John has to set the expert-password and was able to use top command. A week later John has to use the top command again, He detected that the expert password is no longer valid. What is the most probable reason for this behavior?

  A. "write memory" was not issued on clish

  B. changes are only possible via SmartConsole

  C. "save config" was not issued in expert mode

  D. "save config" was not issued on clish

  Correct Answer: D

• Question 45:

  What kind of information would you expect to see using the "sim affinity 璴andquot; command?

  A. The VMACs used in a Security Gateway cluster

  B. The involved firewall kernel modules in inbound and outbound packet chain

  C. Overview over SecureXL templated connections

  D. Affinity Distribution

  Correct Answer: D

• Question 46:

  Matt wants to upgrade his old Security Management Server to R80.x using the Advanced Upgrade with Database Migration. What is one of the requirements for a successful upgrade?

  A. Size of the /var/log folder of the source machine must be at least 25% of the size of the /var/log directory on the target machine

  B. Size of the /var/log folder of the target machine must be at least 25% of the size of the /var/log directory on the source machine

  C. Size of the $FWDIR/log folder of the target machine must be at least 25% of the size of the $FWDIR/ log directory on the source machine

  D. Size of the /var/log folder of the target machine must be at least 25GB or more

  Correct Answer: B

  Reference: https://sc1.checkpoint.com/documents/R77/CP_R77_Gaia_Installation_and_Upgrade_Guide/ html_frameset.htm?topic=documents/R77/CP_R77_Gaia_Installation_and_Upgrade_Guide/90083

• Question 47:

  Which TCP port does the CPM process listen on?

  A. 18191

  B. 18190

  C. 8983

  D. 19009

  Correct Answer: D

• Question 48:

  According to out of the box SmartEvent policy, which blade will automatically be correlated into events?

  A. Firewall

  B. VPN

  C. IPS D. HTTPS

  Correct Answer: C

• Question 49:

  While using the Gaia CLI. what is the correct command to publish changes to the management server?

  A. json publish

  B. mgmt publish

  C. mgmt_cli commit

  D. commit

  Correct Answer: B

• Question 50:

  Which 3 types of tracking are available for Threat Prevention Policy?

  A. SMS Alert, Log, SNMP alert

  B. Syslog, None, User-defined scripts

  C. None, Log, Syslog

  D. Alert, SNMP trap, Mail

  Correct Answer: B