If the Active Security Management Server fails or if it becomes necessary to change the Active to Standby, the following steps must be taken to prevent data loss. Providing the Active Security Management Server is responsible, which of these steps should NOT be performed:

Rename the hostname of the Standby member to match exactly the hostname of the Active member.

Change the Standby Security Management Server to Active.

Change the Active Security Management Server to Standby.

Manually synchronize the Active and Standby Security Management Servers.

Using R80 Smart Console, what does a ''pencil icon'' in a rule mean?

Someone else has changed this rule

This rule is managed by check point's SOC

This rule can't be changed as it's an implied rule

Which method below is NOT one of the ways to communicate using the Management API's?

Sending API commands over an http connection using web-services

Typing API commands using the ''mgmt_cli'' command

Typing API commands from a dialog box inside the SmartConsole GUI application

Typing API commands using Gaia's secure shell (clash)19+

Sending API commands over an http connection using web-services

What is the main difference between Threat Extraction and Threat Emulation?

Threat Extraction always delivers a file and takes less than a second to complete

Threat Emulation never delivers a file and takes more than 3 minutes to complete

Threat Extraction always delivers a file and takes less than a second to complete

Threat Emulation never delivers a file that takes less than a second to complete

Threat Extraction never delivers a file and takes more than 3 minutes to complete

Which one of these features is NOT associated with the Check Point URL Filtering and Application Control Blade?

Detects and blocks malware by correlating multiple detection engines before users are affected.

Configure rules to limit the available network bandwidth for specified users or groups.

Use UserCheck to help users understand that certain websites are against the company's security policy.

Make rules to allow or block applications and Internet sites for individual applications, categories, and risk levels.

From SecureXL perspective, what are the tree paths of traffic flow:

Firewall Path; Accelerated Path; Medium Path

Initial Path; Medium Path; Accelerated Path

Layer Path; Blade Path; Rule Path

Firewall Path; Accept Path; Drop Path

Firewall Path; Accelerated Path; Medium Path

In what way is Secure Network Distributor (SND) a relevant feature of the Security Gateway?

SND is used to distribute packets among Firewall instances

SND is a feature to accelerate multiple SSL VPN connections

SND is an alternative to IPSec Main Mode, using only 3 packets

SND is used to distribute packets among Firewall instances

SND is a feature of fw monitor to capture accelerated packets

What are the steps to configure the HTTPS Inspection Policy?

Go to Manage&Settings > Blades > HTTPS Inspection > Policy

Go to Manage&Settings > Blades > HTTPS Inspection > Configure in SmartDashboard

Go to Application&url filtering blade > Advanced > Https Inspection > Policy

Go to Manage&Settings > Blades > HTTPS Inspection > Policy

Go to Application&url filtering blade > Https Inspection > Policy

What is the difference between SSL VPN and IPSec VPN?

IPSec VPN requires installation of a resident VPN client and SSL VPN requires only an installed Browser

IPSec VPN does not require installation of a resident VPN client

SSL VPN requires installation of a resident VPN client

SSL VPN and IPSec VPN are the same

IPSec VPN requires installation of a resident VPN client and SSL VPN requires only an installed Browser

Which statement is NOT TRUE about Delta synchronization?

Using UDP Multicast or Broadcast on port 8161

Using UDP Multicast or Broadcast on port 8116

Transfers changes in the Kernel tables between cluster members

Under which file is the proxy arp configuration stored?

$FWDIR/conf/local.arp on the gateway

$FWDIR/state/proxy_arp.conf on the management server

$FWDIR/conf/local.arp on the management server

$FWDIR/state/_tmp/proxy.arp on the security gateway

$FWDIR/conf/local.arp on the gateway

Customer's R80 management server needs to be upgraded to R80.10. What is the best upgrade method when the management server is not connected to the Internet?

Export R80 configuration, clean install R80.10 and import the configuration

SmartEvent does NOT use which of the following procedures to identity events:

Matching a log against local exclusions

Matching a log against each event definition

Matching a log against local exclusions

Matching a log against global exclusions

John is using Management H

Which Smartcenter should be connected to for making changes?

connect virtual IP of Smartcenter HA

Which of the following describes how Threat Extraction functions?

Delivers PDF versions of original files with active content removed

Detect threats and provides a detailed report of discovered threats

Delivers file with original content

Delivers PDF versions of original files with active content removed

The SmartEvent R80 Web application for real-time event monitoring is called:

There is no Web application for SmartEvent

Which Threat Prevention Profile is not included by default in R80 Management?

Recommended -- Provides all protection for all common network products and servers, with impact on network performance

Basic -- Provides reliable protection on a range of non-HTTP protocols for servers, with minimal impact on network performance

Optimized -- Provides excellent protection for common network products and protocols against recent or popular attacks

Strict -- Provides a wide coverage for all products and protocols, with impact on network performance

Recommended -- Provides all protection for all common network products and servers, with impact on network performance

When using Monitored circuit VRRP, what is a priority delta?

When an interface fails the priority delta is subtracted from the priority

When an interface fails the priority changes to the priority delta

When an interface fails the delta claims the priority

When an interface fails the priority delta is subtracted from the priority

When an interface fails the priority delta decides if the other interfaces takes over

What is the best sync method in the ClusterXL deployment?

Use 3 clusters + 1st sync + 2nd sync + 3rd sync

Use 2 clusters + 1st sync + 2nd sync

Can multiple administrators connect to a Security Management Server at the same time?

Yes, every administrator has their own username, and works in a session that is independent of other administrators

Yes, all administrators can modify a network object at the same time

Yes, every administrator has their own username, and works in a session that is independent of other administrators

Yes, but only one has the right to write

You noticed that CPU cores on the Security Gateway are usually 100% utilized and many packets were dropped. You don't have a budget to perform a hardware upgrade at this time. To optimize drops you decide to use Priority Queues and fully enable Dynamic Dispatcher. How can you enable them?

fw ctl multik dynamic_dispatching on

fw ctl multik dynamic_dispatching set_mode 9

To ensure that VMAC mode is enabled, which CLI command you should run on all cluster members? Choose the best answer.

fw ctl get int fwha vmac global param enabled; result of command should return value 1

fw ctl set int fwha vmac global param enabled

fw ctl get int fwha vmac global param enabled; result of command should return value 1

fw ctl get int fwha_vmac_global_param_enabled; result of command should return value 1

Checkpoint 156-215.81 Practice Test 2 - Free Online Exam Questions 41-80

Which firewall daemon is responsible for the FW CLI commands?

fwd

fwm

cpm

cpd

Comment (0)

Checkpoint 156-215.81 Practice Test 2

Question

Checkpoint 156-215.81 Practice Tests

Practice Tests