What is the best method to upgrade a Security Management Server to R81.x when it is not connected to the Internet?

Advanced upgrade or CPUSE offline upgrade

After finishing installation admin John likes to use top command in expert mode. John has to set the expert-password and was able to use top command. A week later John has to use the top command again, He detected that the expert password is no longer valid. What is the most probable reason for this behavior?

''save config'' was not issued on clish

''write memory'' was not issued on clish

changes are only possible via SmartConsole

''save config'' was not issued in expert mode

''save config'' was not issued on clish

What solution is multi-queue intended to provide?

Improve the efficiency of CoreXL Kernel Instances

Improve the efficiency of traffic handling by SecureXL SNDs

Reduce the confusion for traffic capturing in FW Monitor

Improve the efficiency of CoreXL Kernel Instances

Reduce the performance of network interfaces

What Is the difference between Updatable Objects and Dynamic Objects

Updatable Objects is a Threat Cloud Service. The provided Objects are updated automatically. Dynamic Objects are created and maintained locally For Dynamic Objects there is no need to install policy for the changes to take effect.

Dynamic Objects ate maintained automatically by the Threat Cloud. Updatable Objects are created and maintained locally. In both cases there is no need to install policy for the changes to take effect.

Updatable Objects is a Threat Cloud Service. The provided Objects are updated automatically. Dynamic Objects are created and maintained locally For Dynamic Objects there is no need to install policy for the changes to take effect.

Updatable Objects is a Threat Cloud Service. The provided Objects are updated automatically. Dynamic Objects are created and maintained locally In both cases there is no need to install policy for the changes to take effect.

Dynamic Objects are maintained automatically by the Threat Cloud. For Dynamic Objects there rs no need to install policy for the changes to take effect. Updatable Objects are created and maintained locally.

What are the correct sleps upgrading a HA cluster (Ml is active. M2 is passive) using Multi-Version Cluster(MVC) Upgrade?

1) Upgrade the passive node M2 to R81.20 2) Enable the MVC mechanism on the upgraded R81.20 Cluster Member M2 ttcphaconf mvc on 3) In SmartConsole, change the version of the cluster object 4} Install the Access Control Policy 5) After examine the cluster states upgrade node M1 to R81.20 6) On each Cluster Member, disable the MVC mechanism and Install the Access Control Policy upgrade the passive node M2 to R81.20

1) Enable the MVC mechanism on both cluster members cphaprob mvc on 2) Upgrade the passive node M2 to R81.20 3) In SmartConsole. change the version of the cluster object 4) Install the Access Control Policy and make sure that the installation will not stop if installation on one cluster member fails 5) After examine the cluster states upgrade node M1 to R81.20 6) On each Cluster Member, disable the MVC mechanism

1) Enable the MVC mechanism on both cluster members #cphaprob mvc on 2) Upgrade the passive node M2 to R81.20 3) In SmartConsole. change the version of the cluster object 4) Install the Access Control Policy 5) After examine the cluster states upgrade node M1 to R81.20 6) On each Cluster Member, disable the MVC mechanism and Install the Access Control Policy

1) In SmartConsole. change the version of the cluster object 2) Upgrade the passive node M2 to R81.20 3) Enable the MVC mechanism on the upgraded R81.20 Cluster Member M2 Wcphaconf mvc on 4) Install the Access Control Policy and make sure that the installation will not stop if installation on one cluster member fails 5) After examine the cluster states upgrade node M1 to R81.20 6) On each Cluster Member, disable the MVC mechanism and Install the Access Control Policy SmartConsole. change the version of the cluster object

1) Upgrade the passive node M2 to R81.20 2) Enable the MVC mechanism on the upgraded R81.20 Cluster Member M2 ttcphaconf mvc on 3) In SmartConsole, change the version of the cluster object 4} Install the Access Control Policy 5) After examine the cluster states upgrade node M1 to R81.20 6) On each Cluster Member, disable the MVC mechanism and Install the Access Control Policy upgrade the passive node M2 to R81.20

What are the two modes for SNX (SSL Network Extender)?

Network Mode and Application Mode

After having saved the Cllsh Configuration with the 'save configuration config.txt* command, where can you find the config.txt file?

You can locate the file via SmartConsole > Command Line.

You will find it in the home directory of your usef account (e.g. /home/admirV)

You can locate the file via SmartConsole > Command Line.

You have to launch the WebUl and go to 'Config' -> 'Export Conflg File' and specifly the destination directory of your local tile system

You cannot locate the file in the file system sine Clish does not have any access to the bash fie system

What traffic does the Anti-bot feature block?

Command and Control traffic from hosts that have been identified as infected

Command and Control traffic to servers with reputation for hosting malware

Network traffic that is directed to unknown or malicious servers

Network traffic to hosts that have been identified as infected

What is the command used to activated Multi-Version Cluster mode?

set cluster member mvc on in Clish

set cluster MVC on in Expert Mode

set cluster mvc on in Expert Mode

What command is used to manually failover a Multi-Version Cluster during the upgrade?

clusterXL_admin down in Expert Mode

set cluster member state down in Clish

set cluster down in Expert Mode

What is the benefit of Manual NAT over Automatic NAT?

You have the full control about the priority of the NAT rules

If you create a new Security Policy, the Manual NAT rules will be transferred to this new policy.

There is no benefit since Automatic NAT has in any case higher priority over Manual NAT

You have the full control about the priority of the NAT rules

On IPSO and GAIA Gateways, it is handled in a stateful manner

Can Check Point and Third-party Gateways establish a certificate-based Site-to-Site VPN tunnel?

Yes, but they need to have a mutually trusted certificate authority

Yes, but they have to have a pre-shared secret key

No, they cannot share certificate authorities

No, Certificate based VPNs are only possible between Check Point devices

John is using Management H

Which Security Management Server should he use for making changes?

connect virtual IP of Smartcenter HA

Which components allow you to reset a VPN tunnel?

vpn tu command or SmartView monitor

delete vpn ike sa or vpn she11 command

vpn tunnelutil or delete vpn ike sa command

When synchronizing clusters, which of the following statements is FALSE?

Only cluster members running on the same OS platform can be synchronized.

The state of connections using resources is maintained in a Security Server, so their connections cannot be synchronized.

Only cluster members running on the same OS platform can be synchronized.

In the case of a failover, accounting information on the failed member may be lost despite a properly working synchronization.

Client Authentication or Session Authentication connections through a cluster member will be lost if the cluster member fails.

What are the minimum open server hardware requirements for a Security Management Server/Standalone in R81?

4 CPU cores, 8GB of RAM and 500GB of disk space

2 CPU cores, 4GB of RAM and 15GB of disk space

8 CPU cores, 16GB of RAM and 500 GB of disk space

4 CPU cores, 8GB of RAM and 500GB of disk space

8 CPU cores, 32GB of RAM and 1 TB of disk space

The ''MAC magic'' value must be modified under the following condition:

There is more than one cluster connected to the same VLAN

A firewall cluster is configured to use Multicast for CCP traffic

There are more than two members in a firewall cluster

A firewall cluster is configured to use Broadcast for CCP traffic

What is the correct description for the Dynamic Balancing / Split feature?

Dynamic Balancing / Split dynamically change the number of SND's and firewall instances based on the current load. It is only available on Quantum Appliances (not on Quantum Spark or Open Server)

Dynamic Balancing / Split dynamically change the number of SND's and firewall instances based on the current load. It is only available on Quantum Appliances and Open Server (not on Quantum Spark)

Dynamic Balancing / Split dynamically distribute the traffic from one network interface to multiple SND's. The interface must support Multi-Queue. It is only available on Quantum Appliances and Open Server (not on Quantum Spark)

Dynamic Balancing / Split dynamically distribute the traffic from one network interface to multiple SND's. The interface must support Multi-Queue. It is only available on Quantum Appliances (not on Quantum Spark or Open Server)

Dynamic Balancing / Split dynamically change the number of SND's and firewall instances based on the current load. It is only available on Quantum Appliances (not on Quantum Spark or Open Server)

You want to allow your Mobile Access Users to connect to an internal file share. Adding the Mobile Application 'File Share' to your Access Control Policy in the SmartConsole didn't work. You will be only allowed to select Services for the 'Service & Application' column How to fix it?

The Mobile Access Policy Source under Gateway properties Is set to Legacy Policy and not to Unified Access Policy.

A Quantum Spark Appliance is selected as Installation Target for the policy packet.

The Mobile Access Blade is not enabled for the Access Control Layer of the policy.

The Mobile Access Policy Source under Gateway properties Is set to Legacy Policy and not to Unified Access Policy.

The Mobile Access Blade is not enabled under Gateway properties.

What are not possible commands to acquire the lock in order to make changes in Clish or Web GUI?

Click the Lock icon in the WebUI

What is the recommended way to have a redundant Sync connection between the cluster nodes?

Use a group of bonded interfaces connected to different switches. Define a dedicated sync interface, only one interface per node using the SmartConsole / Gateways & Servers -> select Cluster Properties / Network Management.

In the SmartConsole / Gateways & Servers -> select Cluster Properties / Network Management and define two Sync interfaces per node. Connect both Sync interfaces without using a switch.

Use a group of bonded interfaces. In the SmartConsole / Gateways & Servers -> select Cluster Properties / Network Management and define a Virtual IP for the Sync interface.

In the SmartConsole / Gateways & Servers -> select Cluster Properties / Network Management and define two Sync interfaces per node. Use two different Switches to connect both Sync interfaces.

Use a group of bonded interfaces connected to different switches. Define a dedicated sync interface, only one interface per node using the SmartConsole / Gateways & Servers -> select Cluster Properties / Network Management.

There are multiple types of licenses for the various VPN components and types. License type related to management and functioning of Remote Access VPNs are - which of the following license requirement statement is NOT true:

EndpointContainerLicense The Endpoint Software Blade Licenses does not require an Endpoint Container License as the base

MobileAccessLicense This license is required on the Security Gateway for the following Remote Access solutions

EndpointPolicyManagementLicense The Endpoint Security Suite includes blades other than the Remote Access VPN, hence this license is required to manage the suite

EndpointContainerLicense The Endpoint Software Blade Licenses does not require an Endpoint Container License as the base

IPSecVPNLicense * This license is installed on the VPN Gateway and is a basic requirement for a Remote Access VPN solution

What is false regarding a Management HA environment?

It is not necessary to establish SIC between the primary and secondary management server, since the latter gets the exact same copy of the management database from the prior.

Only one Management Server should be active, while any others be in standby mode

It is not necessary to establish SIC between the primary and secondary management server, since the latter gets the exact same copy of the management database from the prior.

SmartConsole can connect to any management server in Readonly mode.

Synchronization will occur automatically with each Publish event if the Standby servers are available.

Checkpoint 156-315.81 Practice Test 12 - Free Online Exam Prep & Questions

The system administrator of a company is trying to find out why acceleration is not working for the traffic. The traffic is allowed according to the rule based and checked for viruses. But it is not accelerated. What is the most likely reason that the traffic is not accelerated?

Become a Premium Member for full access

Unlock Premium Member

Checkpoint 156-315.81 Practice Test 12

Question

Checkpoint 156-315.81 Practice Tests

Practice Tests