Checkpoint 156-315.81 Practice Test - Questions Answers, Page 45

SmartEvent Security Checkups can be run from the Reports activity in Logs and Monitor. A Security Checkup is a report that analyzes network traffic and security events and provides recommendations for improving security posture. To run a Security Checkup, go to Logs & Monitor > Reports > New Report > Security Checkup. The other activities in Logs and Monitor do not have the option to run a Security Checkup.

Reference: : Check Point Software, Getting Started, Running a Security Checkup Report.

The best method to upgrade a Security Management Server to R81.x when it is not connected to the Internet is either Advanced upgrade or CPUSE offline upgrade. Advanced upgrade is a manual procedure that involves backing up the current configuration, installing the new version from an ISO image, and restoring the configuration. CPUSE offline upgrade is an automated procedure that involves downloading the upgrade package from the Check Point User Center, transferring it to the Security Management Server, and installing it using CPUSE.SmartUpdate offline upgrade is not a valid option, as SmartUpdate is a tool for managing licenses and software packages on multiple gateways and servers1.

Reference:1: Check Point Software, Getting Started, Upgrading Security Management Servers.

The most probable reason for the expert password to be no longer valid after a week is thatsave configwas not issued on clish. The clish commandset expert-passwordsets the expert password for the current session only.To make the password persistent, the clish commandsave configmust be issued after setting the expert password2.The other options are not relevant for setting the expert password.

Reference:2: Check Point Software, Getting Started, Setting Expert Password.

The Compliance Blade allows you to search for text strings in many windows and panes, to search for a value in a field, the syntax isfield_name:string. For example, to search for all rules that have a comment containing ''VPN'', the syntax iscomment:VPN.The other options are not valid syntaxes for searching for a value in a field3.

Reference:3: Check Point Software, Getting Started, Searching for Text Strings.

If a ''ping''-packet is dropped by FW1 Policy, you will see this packet in ''fw monitor'' on one inspection point only: ''i''. The ''i'' inspection point represents the inbound traffic before any rule processing. Since the packet is dropped by FW1 Policy, it will not pass through any other inspection points, such as ''l'' (after rule processing), ''o'' (outbound before rule processing), or ''O'' (outbound after rule processing).

Reference: : Check Point Software, Getting Started, fw monitor.

The 'Network Access VPN Domain' feature allows remote-access VPN users to access resources across a site-to-site VPN tunnel. This feature allows remote users to securely access internal network resources as if they were physically connected to the network. This is achieved by adding the remote-access VPN users to a 'VPN Domain' that has access to the internal network resources via a site-to-site VPN tunnel. This VPN Domain is also referred to as a 'Network Access VPN Domain'.

The base level encryption key used by Capsule Docs is RSA 2048. This means that Capsule Docs uses a 2048-bit RSA public key encryption algorithm to encrypt and decrypt documents. RSA is an asymmetric encryption algorithm that uses two keys: a public key that can be shared with anyone, and a private key that must be kept secret. AES, SHA-256, and RSA 1024 are not the base level encryption keys used by Capsule Docs.

Reference: : Check Point Software, Getting Started, Capsule Docs Encryption.

The solution that multi-queue is intended to provide is to improve the efficiency of CoreXL Kernel Instances. Multi-queue is a feature that allows each CoreXL Kernel Instance to process traffic from multiple interfaces, instead of being bound to a single interface.This improves the load balancing and performance of the Security Gateway, especially when there are high traffic volumes or asymmetric routing1.

Reference:1: Check Point Software, Getting Started, Multi-Queue.

The command 'api status' is used to check the status of the Management API server on the Management Server. The command will show if the API server is running, the port number, and the API version. The other commands are not valid or do not check the Management API server status.

Reference:How To's - Interact with Check Point Management API on Gaia R81, section ''Check API Status''.