Checkpoint 156-315.81 Practice Test - Questions Answers, Page 57

The command that should be used to remove the policy from the gateway by logging in through console access is ''fw unloadlocal''. This command will unload all security policies from a gateway or cluster member and allow all traffic to pass through it. This command can be useful for troubleshooting purposes or for emergency access to a gateway.

Reference: [Check Point R81 CLI Reference Guide]

The best way to make sure that the old logs will be available after updating the Management to version R81.20 using the Advanced Upgrade Method is to use the migrate_server tool with the option '-l' for the logs and '-x' for the index. This option will export both logs and index files from an existing Security Management Server or Multi-Domain Server to a specified directory or file. The exported data can then be imported to a new server using a similar command with '-i' option.

Reference: [Check Point R81 Installation and Upgrade Guide]

The best way to test if the policy from two weeks ago have the same issue is to install the specific version of the policy from the installation history view of the gateway. This way, you can keep the changes from the last weeks in the management server and revert back to them later if needed. You do not need to take a backup or a snapshot of the gateway or the management server for this purpose.

Reference: [Check Point Security Expert R81 Administration Guide], page 34.

The statement that is not true about site-to-site VPN domain-based is that a VPN domain is a service or user that can send or receive VPN traffic through a VPN gateway. A VPN domain is a host or network that can send or receive VPN traffic through a VPN gateway, not a service or user. A service or user can be part of a VPN community, which defines the encryption and authentication methods for the VPN traffic.

Reference: [Check Point Security Expert R81 Administration Guide], page 146.

The correct syntax for adding an access-rule via R80 API is to use the add access-rule command with the layer, position, name, and service parameters. The layer parameter specifies the name of the access control policy layer where the rule will be added. The position parameter specifies the ordinal number in which to place the rule in the rulebase. The name parameter specifies the name of the rule. The service parameter specifies one or more services that match this rule.

Reference: [Check Point Security Expert R81 API Reference Guide], page 18.

The correct command for enabling the management data plane separation (MDPS) is set mdps mgmt plane on. This command enables routing separation between management and data planes on a security gateway. This means that management traffic will use a different routing table than data traffic, which can improve security and performance.

Reference: [Check Point Security Expert R81 Administration Guide], page 76.

The reason why the web session is being disconnected after 10 minutes is that the idle timeout for the web session is specified with the ''set web session-timeout'' command, not the ''set inactivity-timeout'' command. The ''set inactivity-timeout'' command only affects the CLI session, not the web session. To prevent the web session from being disconnected after 10 minutes of inactivity, you need to use the ''set web session-timeout'' command with a higher value than 10 minutes.

Reference: [Check Point Security Expert R81 Administration Guide], page 77.

To grant GAiAAPI permissions for a newly created user, you need to assign the user a permission profile in SmartConsole. A permission profile defines the access level and scope of actions that a user can perform using the GAiAAPI. You can choose from predefined permission profiles or create your own custom profiles. You cannot grant GAiAAPI permissions using dish or bash commands.

Reference: [Check Point Security Expert R81 API Reference Guide], page 9.

RPM upgrade is not a valid upgrade method to R81.20. RPM upgrade is a method of upgrading from R80.20.M1 to R80.20.M2 or later, but it is not supported for upgrading to R81.20. The valid upgrade methods to R81.20 are CPUSE upgrade, advanced upgrade, and upgrade with migration.

Reference: [Check Point Security Expert R81 Installation and Upgrade Guide], page 12.