What does Backward Compatibility mean upgrading the Management Server and how can you check it?

The Management Server is able to manage older Gateways The lowest supported version is documented in the Release Notes

The Management Server is able to manage older Gateways. The lowest supported version is documented in the Installation and Upgrade Guide

The Management Server is able to manage older Gateways The lowest supported version is documented in the Release Notes

You will be able to connect to older Management Server with the SmartConsole. The lowest supported version is documented in the Installation and Upgrade Guide

You will be able to connect to older Management Server with the SmartConsole The lowest supported version is documented in the Release Notes

The admin is connected via ssh lo the management server. He wants to run a mgmt_dl command but got a Error 404 message. To check the listening ports on the management he runs netstat with the results shown below. What can be the cause for the issue?

The API is not running, the services shown by netstat are the gaia services. To start the API run 'api start'

Wrong Management API Access setting^for Ihe client IP To correct it go to SmartConsole / Management & Settings / Blades / Management API and press 'Advanced Settings..' and choose GUI clients or ALL IP's.

The API didn't run on the default port check it with api status' and add '-port 4434' to the mgmt_clt command.

The management permission in the user profile is mrssing. Go to SmartConsole / Management & Settings I Permissions & Administrators / Permission Profiles. Select the profile of the user and enable 'Management API Login' under Management Permissions

The API is not running, the services shown by netstat are the gaia services. To start the API run 'api start'

What is a possible command to delete all of the SSH connections of a gateway?

fw tab -t connections -x -e 00000016

fwaccel dos config set dport ssh

What are the two types of tests when using the Compliance blade?

Global tests and Object-based tests

Policy-based tests and Global properties

Global tests and Object-based tests

Access Control policy analysis and Threat Prevention policy analysis

Tests conducted based on the loC XMfcfile and analysis of SOLR documents

When performing a minimal effort upgrade, what will happen to the network traffic?

All connections that were initiated before the upgrade will be handled by the active gateway

All connections that were Initiated before the upgrade will be dropped, causing network downtime.

All connections that were initiated before the upgrade will be handled by the active gateway

All connections that were initiated before the upgrade will be handled normally

All connections that were initiated before the upgrade will be handled by the standby gateway

SecureXL is able to accelerate the Connection Rate using templates. Which attributes are used in the template to identify the connection?

Source address. Destination address. Source Port, Destination port. Protocol

Source address. Destination address. Source Port, Destination port

Source address. Destination address. Destination port

Source address. Destination address. Destination port. Pro^col

Source address. Destination address. Source Port, Destination port. Protocol

Which Correction mechanisms are available with ClusterXL under R81.20?

SDF (Sticky Decision Function) and Flush and ACK

Correction Mechanisms are only available of Maestro Hyperscale Orchestrators

Pre-Correction and SDF (Sticky Decision Function)

SDF (Sticky Decision Function) and Flush and ACK

Dispatcher (Early Correction) and Firewall (Late Correction)

Which upgrade method you should use upgrading from R80.40 to R81.20 to avoid any downtime?

Multi-Version Cluster Upgrade (MVC)

Using AD Query, the security gateway connections to the Active Directory Domain Controllers using what protocol?

Windows Management Instrumentation (WMI)

Hypertext Transfer Protocol Secure (HTTPS)

Lightweight Directory Access Protocol (LDAP)

Name the file that is an electronically signed file used by Check Point to translate the features in the license into a code?

Both License (.lic) and Contract (.xml) files

What technologies are used to deny or permit network traffic?

Packet Filtering, Stateful Inspection, and Application Layer Firewall

Stateful Inspection, Firewall Blade, and URL/Application Blade

Packet Filtering, Stateful Inspection, and Application Layer Firewall

Firewall Blade, URL/Application Blade, and IPS

Stateful Inspection, URL/Application Blade, and Threat Prevention

What does the 'unknown' SIC status shown on SmartConsole mean?

There is no connection between the Security Gateway and Security Management Server

SIC activation key requires a reset

Administrator input the wrong SIC key

The management can contact the Security Gateway but cannot establish Secure Internal Communication

There is no connection between the Security Gateway and Security Management Server

In which scenario will an administrator need to manually define Proxy ARP?

When they configure a 'Manual Static NAT' which translates to an IP address that does not belong to one of the firewall's interfaces.

When they configure an 'Automatic Static NAT' which translates to an IP address that does not belong to one of the firewall's interfaces.

When they configure an 'Automatic Hide NAT' which translates to an IP address that does not belong to one of the firewall's interfaces.

When they configure a 'Manual Static NAT' which translates to an IP address that does not belong to one of the firewall's interfaces.

When they configure a 'Manual Hide NAT' which translates to an IP address that belongs to one of the firewall's interfaces.

Why is a Central License the preferred and recommended method of licensing?

Central Licensing ties to the IP address of the management server and is not dependent on the IP of any gateway in the event it changes.

Central Licensing actually not supported with Gaia.

Central Licensing is the only option when deploying Gala.

Central Licensing ties to the IP address of a gateway and can be changed to any gateway if needed.

Central Licensing ties to the IP address of the management server and is not dependent on the IP of any gateway in the event it changes.

What is the command switch to specify the Gaia API context?

mgmt_cli --context gaia_api <Command>

You have to specify it in the YAML file api.yml which is located underneath the /etc. directory of the security management server

You have to change to the zsh-Shell which defaults to the Gaia API context.

No need to specify a context, since it defaults to the Gaia API context.

mgmt_cli --context gaia_api <Command>

What is the main objective when using Application Control?

Ensure security and privacy of information.

To filter out specific content.

To assist the firewall blade with handling traffic.

Ensure security and privacy of information.

What are the correct steps upgrading a HA cluster (M1 is active, M2 is passive) using Multi-Version Cluster(MVC)Upgrade?

1) In SmartConsole, change the version of the cluster object 2) Upgrade the passive node M2 to R81.20 3) Enable the MVC mechanism on the upgraded R81.20 Cluster Member M2 #cphaconf mvc on 4) Install the Access Control Policy and make sure that the installation will not stop if installation on one cluster member fails 5) After examine the cluster states upgrade node M1 to R81.20 6) On each Cluster Member, disable the MVC mechanism and Install the Access Control Policy SmartConsole, change the version of the cluster object

1) Enable the MVC mechanism on both cluster members #cphaprob mvc on 2) Upgrade the passive node M2 to R81.20 3) In SmartConsole, change the version of the cluster object 4) Install the Access Control Policy and make sure that the installation will not stop if installation on one cluster member fails 5) After examine the cluster states upgrade node M1 to R81.20 6) On each Cluster Member, disable the MVC mechanism

1) Enable the MVC mechanism on both cluster members #cphaprob mvc on 2) Upgrade the passive node M2 to R81.20 3) In SmartConsole, change the version of the cluster object 4) Install the Access Control Policy 5) After examine the cluster states upgrade node M1 to R81.20 6) On each Cluster Member, disable the MVC mechanism and Install the Access Control Policy

1) In SmartConsole, change the version of the cluster object 2) Upgrade the passive node M2 to R81.20 3) Enable the MVC mechanism on the upgraded R81.20 Cluster Member M2 #cphaconf mvc on 4) Install the Access Control Policy and make sure that the installation will not stop if installation on one cluster member fails 5) After examine the cluster states upgrade node M1 to R81.20 6) On each Cluster Member, disable the MVC mechanism and Install the Access Control Policy SmartConsole, change the version of the cluster object

1) Upgrade the passive node M2 to R81.20 2) Enable the MVC mechanism on the upgraded R81.20 Cluster Member M2 #cphaconf mvc on 3) In SmartConsole, change the version of the cluster object 4) Install the Access Control Policy 5) After examine the cluster states upgrade node M1 to R81.20 6) On each Cluster Member, disable the MVC mechanism and Install the Access Control Policy upgrade the passive node M2 to R81.20

Which two Identity Awareness daemons are used to support identity sharing?

Policy Decision Point (PDP) and Policy Enforcement Point (PEP)

Policy Activation Point (PAP) and Policy Decision Point (PDP)

Policy Manipulation Point (PMP) and Policy Activation Point (PAP)

Policy Enforcement Point (PEP) and Policy Manipulation Point (PMP)

Policy Decision Point (PDP) and Policy Enforcement Point (PEP)

You have used the SmartEvent GUI to create a custom Event policy. What is the best way to display the correlated Events generated by SmartEvent Policies?

In the SmartConsole / Logs & Monitor -> open a new Tab and select External Apps / SmartEvent.

Open SmartView Monitor and select the SmartEvent Window from the main menu.

In the SmartConsole / Logs & Monitor --> open the Logs View and use type:Correlated as query filter.

In the SmartConsole / Logs & Monitor -> open a new Tab and select External Apps / SmartEvent.

Select the Events tab in the SmartEvent GUI or use the Events tab in the SmartView web interface.

Bob is going to prepare the import of the exported R81.20 management database. Now he wants to verify that the installed tools on the new target security management machine are able to handle the R81.20 release. Which of the following Check Point command is true?

$FWDIR/scripts/migrate_server print_installed_tools -v R81.20

$FWDIR/scripts/migrate_server print_installed_tools -v R77.30

$CPDIR/scripts/migrate_server print_installed_tools -v R81.20

$FWDIR/scripts/migrate_server print_installed_tools -v R81.20

$FWDIR/scripts/migrate_server print_uninstalled_tools -v R81.20

What are valid authentication methods for mutual authenticating the VPN gateways?

Pre-shared Secret and PKI Certificates

PKI Certificates and Kerberos Tickets

PKI Certificates and DynamicID OTP

Pre-Shared Secrets and Kerberos Ticket

Pre-shared Secret and PKI Certificates

Using Web Services to access the API, which Header Name-Value had to be in the HTTP Post request after the login?

X-chkp-sid Session Unique Identifier

uuid Universally Unique Identifier

From SecureXL perspective, what are the three paths of traffic flow:

Firewall Path; Accelerated Path; Medium Path

Initial Path; Medium Path; Accelerated Path

Layer Path; Blade Path; Rule Path

Firewall Path; Accelerated Path; Medium Path

Firewall Path; Accept Path; Drop Path

Using fw monitor you see the following inspection point notion E and i what does that mean?

E shows the packet after the VPN encryption, i before the inbound firewall VM

E shows the packet before the VPN encryption, i after the inbound firewall VM

E shows the packet reaching the external interface, i leaving the internal interface

E shows the packet after the VPN encryption, i before the inbound firewall VM

E shows the packet leaving the external interface, i reaching the internal interface

Checkpoint 156-315.81 Practice Test 14 - Free Online Exam Prep & Questions

What API command below creates a new host object with the name 'My Host' and IP address of '192 168 0 10'?

Become a Premium Member for full access

Unlock Premium Member

Checkpoint 156-315.81 Practice Test 14

Question

Checkpoint 156-315.81 Practice Tests

Practice Tests