What two ordered layers make up the Access Control Policy Layer?

Network and Application Control

Application Control and URL Filtering

Network and Application Control

You plan to automate creating new objects using new R81 Management API. You decide to use GAIA CLI for this task.What is the first step to run management API commands on GAIA's shell?

login user admin password teabag

mgmt_cli login user ''admin'' password ''teabag'' > id.txt

What are types of Check Point APIs available currently as part of R81.20 code?

Management API, Threat Prevention API, Identity Awareness Web Services API and OPSEC SDK API

Security Gateway API Management API, Threat Prevention API and Identity Awareness Web Services API

Management API, Threat Prevention API, Identity Awareness Web Services API and OPSEC SDK API

OSE API, OPSEC SDK API, Threat Extraction API and Policy Editor API

CPMI API, Management API, Threat Prevention API and Identity Awareness Web Services API

If an administrator wants to add manual NAT for addresses now owned by the Check Point firewall, what else is necessary to be completed for it to function properly?

Add the proxy ARP configurations in a file called $FWDIR/conf/local.arp

Nothing - the proxy ARP is automatically handled in the R81 version

Add the proxy ARP configurations in a file called /etc/conf/local.arp

Add the proxy ARP configurations in a file called $FWDIR/conf/local.arp

Add the proxy ARP configurations in a file called $CPDIR/conf/local.arp

How long may verification of one file take for Sandblast Threat Emulation?

within seconds cleaned file will be provided

Due to high CPU workload on the Security Gateway, the security administrator decided to purchase a new CPU to replace the existing single core CPU. After installation, is the administrator required to perform any additional tasks?

Go to clash-Run cpconfig | Configure CoreXL to make use of the additional Cores | Exit cpconfig | Reboot Security Gateway

Go to clash-Run cpstop | Run cpstart

Go to clash-Run cpconfig | Configure CoreXL to make use of the additional Cores | Exit cpconfig | Reboot Security Gateway

Administrator does not need to perform any task. Check Point will make use of the newly installed CPU and Cores

Go to clash-Run cpconfig | Configure CoreXL to make use of the additional Cores | Exit cpconfig | Reboot Security Gateway | Install Security Policy

GAIA greatly increases operational efficiency by offering an advanced and intuitive software update agent, commonly referred to as the:

Check Point Update Service Engine

Check Point Software Update Agent

Check Point Remote Installation Daemon (CPRID)

Check Point Software Update Daemon

Hit Count is a feature to track the number of connections that each rule matches, which one is not benefit of Hit Count.

Automatically rearrange Access Control Policy based on Hit Count Analysis

Better understand the behavior of the Access Control Policy

Improve Firewall performance - You can move a rule that has hot count to a higher position in the Rule Base

Automatically rearrange Access Control Policy based on Hit Count Analysis

Analyze a Rule Base - You can delete rules that have no matching connections

You need to change the MAC-address on eth2 interface of the gateway. What command and what mode will you use to achieve this goal?

set interface eth2 mac-addr 11:11:11:11:11:11; CLISH

ifconfig eth1 hw 11:11:11:11:11:11; expert

set interface eth2 hw-addr 11:11:11:11:11:11; CLISH

ethtool -i eth2 mac 11:11:11:11:11:11; expert

The Check Point history feature in R81 provides the following:

View install changes and install specific version

Policy Installation Date, view install changes and install specific version

You are the administrator for ABC Corp. You have logged into your R81 Management server. You are making some changes in the Rule Base and notice that rule No.6 has a pencil icon next to it.What does this mean?

This rule No. 6 has been marked for editing in your Management session.

This rule No. 6 has been marked for deletion in your Management session.

This rule No. 6 has been marked for deletion in another Management session.

This rule No. 6 has been marked for editing in your Management session.

This rule No. 6 has been marked for editing in another Management session.

What is the recommended configuration when the customer requires SmartLog indexing for 14 days and SmartEvent to keep events for 180 days?

Install Management and SmartEvent on different machines.

Use Multi-Domain Management Server.

Choose different setting for log storage and SmartEvent db

Install Management and SmartEvent on different machines.

SmartEvent uses it's event policy to identify events. How can this be customized?

By matching logs against event rules

By modifying the firewall rulebase

By matching logs against exclusions

By matching logs against event rules

When running a query on your logs, to find records for user Toni with machine IP of 10.0.4.210 but exclude her tablet IP of 10.0.4.76, which of the following query syntax would you use?

'Toni' AND 10.0.4.210 NOT 10.0.4.76

Toni? AND 10.0.4.210 NOT 10.0.4.76

To** AND 10.0.4.210 NOT 10.0.4.76

Ton* AND 10.0.4.210 NOT 10.0.4.75

'Toni' AND 10.0.4.210 NOT 10.0.4.76

How does the Anti-Virus feature of the Threat Prevention policy block traffic from infected websites?

By matching logs against ThreatCloud information about the reputation of the website

By dropping traffic from websites identified through ThreatCloud Verification and URL Caching

By dropping traffic that is not proven to be from clean websites in the URL Filtering blade

By allowing traffic from websites that are known to run Antivirus Software on servers regularly

By matching logs against ThreatCloud information about the reputation of the website

What is required for a certificate-based VPN tunnel between two gateways with separate management systems?

Mutually Trusted Certificate Authorities

When performing a minimal effort upgrade, what will happen to the network traffic?

All connections that were initiated before the upgrade will be handled normally

All connections that were initiated before the upgrade will be dropped, causing network downtime

All connections that were initiated before the upgrade will be handled normally

All connections that were initiated before the upgrade will be handled by the standby gateway

All connections that were initiated before the upgrade will be handled by the active gateway

When configuring SmartEvent Initial settings, you must specify a basic topology for SmartEvent to help it calculate traffic direction for events. What is this setting called and what are you defining?

Internal network(s) you are defining your networks

Network, and defining your Class A space

Topology, and you are defining the Internal network

Internal addresses you are defining the gateways

Internal network(s) you are defining your networks

What does the Log 'Views' tab show when SmartEvent is Correlating events?

Top events with charts and graphs

Which of the following is a task of the CPD process?

Transfers messages between Firewall processes

Invoke and monitor critical processes and attempts to restart them if they fail

Transfers messages between Firewall processes

Responsible for processing most traffic on a security gateway

Checkpoint 156-315.81 Practice Test 10 - Free Online Exam Prep & Questions

Question 1 / 40

To optimize Rule Base efficiency, the most hit rules should be where?

Removed from the Rule Base.

Towards the middle of the Rule Base.

Towards the top of the Rule Base.

Towards the bottom of the Rule Base.

Comment (0)

Checkpoint 156-315.81 Practice Test 10

Question

Checkpoint 156-315.81 Practice Tests

Practice Tests