CheckPoint Checkpoint Certifications 156-315.80 Questions & Answers

• Question 71:

  Check Point recommends configuring Disk Space Management parameters to delete old log entries when available disk space is less than or equal to?

  A. 50%

  B. 75%

  C. 80%

  D. 15%

  Correct Answer: D

• Question 72:

  What is the recommended configuration when the customer requires SmartLog indexing for 14 days and SmartEvent to keep events for 180 days?

  A. Use Multi-Domain Management Server.

  B. Choose different setting for log storage and SmartEvent db

  C. Install Management and SmartEvent on different machines.

  D. it is not possible.

  Correct Answer: B

• Question 73:

  SmartEvent uses it's event policy to identify events. How can this be customized?

  A. By modifying the firewall rulebase

  B. By creating event candidates

  C. By matching logs against exclusions

  D. By matching logs against event rules

  Correct Answer: D

• Question 74:

  When running a query on your logs, to find records for user Toni with machine IP of 10.0.4.210 but exclude her tablet IP of 10.0.4.76, which of the following query syntax would you use?

  A. Toni? AND 10.0.4.210 NOT 10.0.4.76

  B. To** AND 10.0.4.210 NOT 10.0.4.76

  C. Ton* AND 10.0.4.210 NOT 10.0.4.75

  D. "Toni" AND 10.0.4.210 NOT 10.0.4.76

  Correct Answer: B

• Question 75:

  Check Point Support in many cases asks you for a configuration summary of your Check Point system. This is also called:

  A. cpexport

  B. sysinfo

  C. cpsizeme

  D. cpinfo

  Correct Answer: D

• Question 76:

  Which of the following is a task of the CPD process?

  A. Invoke and monitor critical processes and attempts to restart them if they fail

  B. Transfers messages between Firewall processes

  C. Log forwarding

  D. Responsible for processing most traffic on a security gateway

  Correct Answer: A

  https://sc1.checkpoint.com/documents/R76/CP_R76_CLI_WebAdmin/12496.htm

• Question 77:

  What is the valid range for Virtual Router Identifier (VRID) value in a Virtual Routing Redundancy Protocol (VRRP) configuration?

  A. 1-254

  B. 1-255

  C. 0-254

  D. 0 ?255

  Correct Answer: B

• Question 78:

  When using the Mail Transfer Agent, where are the debug logs stored?

  A. $FWDIR/bin/emaild.mta. elg

  B. $FWDIR/log/mtad elg

  C. /var/log/mail.mta elg

  D. $CPDIR/log/emaild elg

  Correct Answer: A

• Question 79:

  Which command collects diagnostic data for analyzing customer setup remotely?

  A. cpinfo

  B. migrate export

  C. sysinfo

  D. cpview

  Correct Answer: A

  CPInfo is an auto-updatable utility that collects diagnostics data on a customer's machine at the time of execution and uploads it to Check Point servers (it replaces the standalone cp_uploader utility for uploading files to Check Point servers). The CPInfo output file allows analyzing customer setups from a remote location. Check Point support engineers can open the CPInfo file in a demo mode, while viewing actual customer Security Policies and Objects. This allows the in-depth analysis of customer's configuration and environment settings.

  Reference: https://supportcenter.checkpoint.com/supportcenter/portal? eventSubmit_doGoviewsolutiondetails=andsolutionid=sk92739

• Question 80:

  Which features are only supported with R80.10 Gateways but not R77.x?

  A. Access Control policy unifies the Firewall, Application Control and URL Filtering, Data Awareness, and Mobile Access Software Blade policies

  B. Limits the upload and download throughput for streaming media in the company to 1 Gbps.

  C. The rule base can be built of layers, each containing a set of the security rules. Layers are inspected in the order in which they are defined, allowing control over the rule base flow and which security functionalities take precedence.

  D. Time object to a rule to make the rule active only during specified times.

  Correct Answer: C

  Reference: http://slideplayer.com/slide/12183998/