How would you deploy TE250X Check Point appliance just for email traffic and in-line mode without a Check Point Security Gateway?

You can utilize only Check Point Cloud Services for this scenario.

Install appliance TE250X on SpanPort on LAN switch in MTA mode.

Install appliance TE250X in standalone mode and setup MTA.

You can utilize only Check Point Cloud Services for this scenario.

It is not possible, always Check Point SGW is needed to forward emails to SandBlast appliance.

What is the main difference between Threat Extraction and Threat Emulation?

Threat Extraction always delivers a file and takes less than a second to complete.

Threat Emulation never delivers a file and takes more than 3 minutes to complete.

Threat Extraction always delivers a file and takes less than a second to complete.

Threat Emulation never delivers a file that takes less than a second to complete.

Threat Extraction never delivers a file and takes more than 3 minutes to complete.

What is the purpose of Priority Delta in VRRP?

When an Interface fail, Effective Priority = Priority -- Priority Delta

When a box up, Effective Priority = Priority + Priority Delta

When an Interface is up, Effective Priority = Priority + Priority Delta

When an Interface fail, Effective Priority = Priority -- Priority Delta

When a box fail, Effective Priority = Priority -- Priority Delta

Which statements below are CORRECT regarding Threat Prevention profiles in Smart Dashboard?

You can assign multiple profiles per gateway and a profile can be assigned to one or more rules.

You can assign only one profile per gateway and a profile can be assigned to one rule Only.

You can assign multiple profiles per gateway and a profile can be assigned to one rule only.

You can assign multiple profiles per gateway and a profile can be assigned to one or more rules.

You can assign only one profile per gateway and a profile can be assigned to one or more rules.

Using ClusterXL, what statement is true about the Sticky Decision Function?

Can only be changed for Load Sharing implementations

All connections are processed and synchronized by the pivot

Is only relevant when using SecureXL

What API command below creates a new host with the name ''New Host'' and IP address of ''192.168.0.10''?

add host name ''New Host'' ip-address ''192.168.0.10''

new host name ''New Host'' ip-address ''192.168.0.10''

set host name ''New Host'' ip-address ''192.168.0.10''

create host name ''New Host'' ip-address ''192.168.0.10''

add host name ''New Host'' ip-address ''192.168.0.10''

What are the blades of Threat Prevention?

IPS, AntiVirus, AntiBot, Sandblast Threat Emulation/Extraction

IPS, DLP, AntiVirus, AntiBot, Sandblast Threat Emulation/Extraction

DLP, AntiVirus, QoS, AntiBot, Sandblast Threat Emulation/Extraction

IPS, AntiVirus, AntiBot, Sandblast Threat Emulation/Extraction

Which statement is most correct regarding about ''CoreXL Dynamic Dispatcher''?

The CoreXL FW instances assignment mechanism is based on the utilization of CPU cores

The CoreXL FW instanxces assignment mechanism is based on Source MAC addresses, Destination MAC addresses

The CoreXL FW instances assignment mechanism is based on the utilization of CPU cores

The CoreXL FW instances assignment mechanism is based on IP Protocol type

The CoreXl FW instances assignment mechanism is based on Source IP addresses, Destination IP addresses, and the IP 'Protocol' type

Pamela is Cyber Security Engineer working for Global Instance Firm with large scale deployment of Check Point Enterprise Appliances using GAiA/R81.20. Company's Developer Team is having random access issue to newly deployed Application Server in DMZ's Application Server Farm Tier and blames DMZ Security Gateway as root cause. The ticket has been created and issue is at Pamela's desk for an investigation. Pamela decides to use Check Point's Packet Analyzer Tool-fw monitor to iron out the issue during approved Maintenance window.What do you recommend as the best suggestion for Pamela to make sure she successfully captures entire traffic in context of Firewall and problematic traffic?

Pamela should check SecureXL status on DMZ Security gateway and if it's turned ON. She should turn OFF SecureXL before using fw monitor to avoid misleading traffic captures.

Pamela should check SecureXL status on DMZ Security Gateway and if it's turned OFF. She should turn ON SecureXL before using fw monitor to avoid misleading traffic captures.

Pamela should use tcpdump over fw monitor tool as tcpdump works at OS-level and captures entire traffic.

Pamela should use snoop over fw monitor tool as snoop works at NIC driver level and captures entire traffic.

Can multiple administrators connect to a Security Management Server at the same time?

Yes, every administrator has their own username, and works in a session that is independent of other administrators.

Yes, all administrators can modify a network object at the same time

Yes, every administrator has their own username, and works in a session that is independent of other administrators.

Yes, but only one has the right to write.

To add a file to the Threat Prevention Whitelist, what two items are needed?

IP address of Management Server and Gateway

Under which file is the proxy arp configuration stored?

$FWDIR/conf/local.arp on the gateway

$FWDIR/state/proxy_arp.conf on the management server

$FWDIR/conf/local.arp on the management server

$FWDIR/state/_tmp/proxy.arp on the security gateway

$FWDIR/conf/local.arp on the gateway

What information is NOT collected from a Security Gateway in a Cpinfo?

Configuration and database files

SandBlast appliances can be deployed in the following modes:

using a SPAN port to receive a copy of the traffic only

as a Mail Transfer Agent and as part of the traffic flow only

How do you enable virtual mac (VMAC) on-the-fly on a cluster member?

fw ctl set int fwha_vmac_global_param_enabled 1

cphaprob set int fwha_vmac_global_param_enabled 1

clusterXL set int fwha_vmac_global_param_enabled 1

fw ctl set int fwha_vmac_global_param_enabled 1

cphaconf set int fwha_vmac_global_param_enabled 1

Which of the following is NOT a type of Check Point API available in R81.x?

Identity Awareness Web Services

John is using Management H

Which Smartcenter should be connected to for making changes?

connect virtual IP of Smartcenter HA

What scenario indicates that SecureXL is enabled?

fwaccel commands can be used in clish

Dynamic objects are available in the Object Explorer

SecureXL can be disabled in cpconfig

fwaccel commands can be used in clish

Only one packet in a stream is seen in a fw monitor packet capture

What processes does CPM control?

web_services, dle_server and object_Store

Object-Store, Database changes, CPM Process and web-services

web-services, CPMI process, DLEserver, CPM process

DLEServer, Object-Store, CP Process and database changes

web_services, dle_server and object_Store

Checkpoint 156-315.81 Practice Test 4 - Free Online Exam Prep & Questions

Question 1 / 40

When simulating a problem on ClusterXL cluster with cphaprob --d STOP -s problem -t 0 register, to initiate a failover on an active cluster member, what command allows you remove the problematic state?

cphaprob --d STOP unregister

cphaprob STOP unregister

cphaprob unregister STOP

cphaprob --d unregister STOP

Comment (0)

Checkpoint 156-315.81 Practice Test 4

Question

Checkpoint 156-315.81 Practice Tests

Practice Tests