Checkpoint 156-215.81 Practice Test - Questions Answers, Page 4

The Sticky Decision Function (SDF) can only be changed for Load Sharing implementations, not for High Availability implementations4.

Reference:Check Point ClusterXL R81 Administration Guide

The commandapi statusshows the API server status, including whether it is enabled or not, the port number, and the API version1.

Reference:Check Point R81 API Reference Guide

Capsule Connect provides a Layer 3 VPN that allows users to access corporate resources securely from their mobile devices2.Capsule Workspace provides a secure container on the mobile device that isolates business data and applications from personal data and applications3.Capsule Workspace also provides a desktop with usable applications such as email, calendar, contacts, documents, and web applications3.

Reference:Check Point Capsule Connect,Check Point Capsule Workspace

Sub Policies are a new feature in R80.10 Gateway that allow creating and attaching sets of rules to specific rules in the main policy4.Sub Policies are useful for delegating permissions, managing large rule bases, and applying different inspection profiles4. The other options are not new features in R80.10 Gateway.

Reference:Check Point R80.10 Security Management Administration Guide

The three components for Check Point Capsule are Capsule Workspace, Capsule Docs, and Capsule Cloud123.Capsule Workspace provides a secure container on the mobile device that isolates business data and applications from personal data and applications2.Capsule Docs protects business documents everywhere they go with encryption and access control1.Capsule Cloud provides cloud-based security services to protect mobile users from threats3.

Reference:Check Point Capsule,Check Point Capsule Workspace,Mobile Secure Workspace with Capsule

The port used for full synchronization between cluster members is TCP port 2654.This port is used by the Firewall Kernel to send and receive synchronization data, such as connection tables, NAT tables, and VPN keys4.UDP port 8116 is used by the Cluster Control Protocol (CCP) for internal communications between cluster members4.

Reference:How does the Cluster Control Protocol function in working and failure scenarios for gateway clusters?

In R80, IPS is managed by the Threat Prevention Policy567.The Threat Prevention Policy defines how to protect the network from malicious traffic using IPS, Anti-Bot, Anti-Virus, and Threat Emulation software blades5.The IPS layer in the Threat Prevention Policy allows configuring IPS protections and actions for different network segments5. The other options are not true about the IPS-Blade.

Reference:Check Point IPS Datasheet,Check Point IPS Software Blade,Quantum Intrusion Prevention System (IPS)

The correct answer is B because after installing a new multicore CPU, the administrator needs to configure CoreXL to make use of the additional cores and reboot the Security Gateway.Installing the Security Policy is not necessary because it does not affect the CoreXL configuration1.

Reference:Check Point R81 Security Management Administration Guide

The correct answer is D because the recommended size of the root partition for a dedicated R80 SmartEvent server is at least 20GB2. Any size, less than 20GB, or more than 10GB and less than 20GB are not sufficient for the SmartEvent server.

Reference:Check Point R80.40 Installation and Upgrade Guide