What is mandatory for ClusterXL to work properly?

The Magic MAC number must be unique per cluster node

The number of cores must be the same on every participating cluster node

The Magic MAC number must be unique per cluster node

The Sync interface must not have an IP address configured

If you have ''Non-monitored Private'' interfaces, the number of those interfaces must be the same on all cluster members

Please choose correct command to add an ''emailserver1'' host with IP address 10.50.23.90 using GAiA management CLI?

mgmt: add host name emailserver1 ip-address 10.50.23.90

host name myHost12 ip-address 10.50.23.90

mgmt: add host name ip-address 10.50.23.90

add host name emailserver1 ip-address 10.50.23.90

mgmt: add host name emailserver1 ip-address 10.50.23.90

Using Threat Emulation technologies, what is the best way to block .exe and .bat file types?

enable DLP and select.exe and .bat file type

enable .exe & .bat protection in IPS Policy

create FW rule for particular protocol

tecli advanced attributes set prohibited_file_types exe.bat

What is the recommended number of physical network interfaces in a Mobile Access cluster deployment?

3 Interfaces -- an interface leading to the organization, a second interface leading to the Internet, a third interface for synchronization.

4 Interfaces -- an interface leading to the organization, a second interface leading to the internet, a third interface for synchronization, a fourth interface leading to the Security Management Server.

3 Interfaces -- an interface leading to the organization, a second interface leading to the Internet, a third interface for synchronization.

1 Interface -- an interface leading to the organization and the Internet, and configure for synchronization.

2 Interfaces -- a data interface leading to the organization and the Internet, a second interface for synchronization.

The SmartEvent R81 Web application for real-time event monitoring is called:

There is no Web application for SmartEvent

With MTA (Mail Transfer Agent) enabled the gateways manages SMTP traffic and holds external email with potentially malicious attachments. What is required in order to enable MTA (Mail Transfer Agent) functionality in the Security Gateway?

Threat Prevention Software Blade Package

What is not a purpose of the deployment of Check Point API?

Create a customized GUI Client for manipulating the objects database

Execute an automated script to perform common tasks

Create a customized GUI Client for manipulating the objects database

Create products that use and enhance the Check Point solution

Integrate Check Point products with 3rd party solution

You need to change the number of firewall Instances used by CoreXL. How can you achieve this goal?

edit fwaffinity.conf; reboot required

edit fwaffinity.conf; reboot not required

In ClusterXL Load Sharing Multicast Mode:

every member of the cluster received all of the packets sent to the cluster IP address

only the primary member received packets sent to the cluster IP address

only the secondary member receives packets sent to the cluster IP address

packets sent to the cluster IP address are distributed equally between all members of the cluster

every member of the cluster received all of the packets sent to the cluster IP address

What kind of information would you expect to see using the sim affinity command?

Network interfaces and core distribution used for CoreXL

The VMACs used in a Security Gateway cluster

The involved firewall kernel modules in inbound and outbound packet chain

Overview over SecureXL templated connections

Network interfaces and core distribution used for CoreXL

What cloud-based SandBlast Mobile application is used to register new devices and users?

Check Point Protect Application

What is the responsibility of SOLR process on R81.20 management server?

It generates indexes of data written to the database

Validating all data before it's written into the database

It generates indexes of data written to the database

Communication between SmartConsole applications and the Security Management Server

Writing all information into the database

What is true of the API server on R81.20?

By default, the API server is active on management servers with 4 GB of RAM (or more) and on stand-alone servers with 8GB of RAM (or more).

By default the API-server is activated and does not have hardware requirements.

By default the API-server is not active and should be activated from the WebUI.

By default the API server is active on management and stand-alone servers with 16GB of RAM (or more).

By default, the API server is active on management servers with 4 GB of RAM (or more) and on stand-alone servers with 8GB of RAM (or more).

To ensure that VMAC mode is enabled, which CLI command should you run on all cluster members?

fw ctl get int fwha_vmac_global_param_enabled; result of command should return value 1

fw ctl set int fwha vmac global param enabled

fw ctl get int vmac global param enabled; result of command should return value 1

fw ctl get int fwha_vmac_global_param_enabled; result of command should return value 1

For best practices, what is the recommended time for automatic unlocking of locked admin accounts?

Admin account cannot be unlocked automatically

Check Point APIs allow system engineers and developers to make changes to their organization's security policy with CLI tools and Web Services for all the following except:

Create new dashboards to manage 3rd party task

Create products that use and enhance 3rd party solutions

Execute automated scripts to perform common tasks

Create products that use and enhance the Check Point Solution

When SecureXL is enabled, all packets should be accelerated, except packets that match the following conditions:

All packets that match a rule whose source or destination is the Outside Corporate Network

What is the SandBlast Agent designed to do?

If malware enters an end user's system, the SandBlast Agent prevents the malware from spreading with the network

Performs OS-level sandboxing for SandBlast Cloud architecture

Ensure the Check Point SandBlast services is running on the end user's system

If malware enters an end user's system, the SandBlast Agent prevents the malware from spreading with the network

Clean up email sent with malicious attachments

What is correct statement about Security Gateway and Security Management Server failover in Check Point R81.X in terms of Check Point Redundancy driven solution?

Security Gateway failover is an automatic procedure but Security Management Server failover is a manual procedure.

Security Gateway failover as well as Security Management Server failover is a manual procedure.

Security Gateway failover is a manual procedure but Security Management Server failover is an automatic procedure.

Security Gateway failover as well as Security Management Server failover is an automatic procedure.

Which file contains the host address to be published, the MAC address that needs to be associated with the IP Address, and the unique IP of the interface that responds to ARP request?

/var/opt/CPshrd-R81/conf/local.arp

With SecureXL enabled, accelerated packets will pass through the following:

Network Interface Card and the Acceleration Device

Network Interface Card, OSI Network Layer, OS IP Stack, and the Acceleration Device

Network Interface Card, Check Point Firewall Kernal, and the Acceleration Device

Network Interface Card and the Acceleration Device

Network Interface Card, OSI Network Layer, and the Acceleration Device

Checkpoint 156-315.81 Practice Test 6 - Free Online Exam Prep & Questions

An administrator would like to troubleshoot why templating is not working for some traffic. How can he determine at which rule templating is disabled?

Become a Premium Member for full access

Unlock Premium Member

Checkpoint 156-315.81 Practice Test 6

Question

Checkpoint 156-315.81 Practice Tests

Practice Tests