Check Point CCSE R80 Certification 156-315.80 Real Exam Questions

Regina2021-09-18T03:12:31+00:00

By Regina CCSE, Check Point, Free Questions Online 156-315.80, 156-315.80 exam questions, 156-315.80 free questions

156-315.80 exam is requirement of Check Point Certified Expert (CCSE) R80.x certification. At ITExamShop, you do no need to worry about the Check Point CCSE R80 certification 156-315.80 exam, we have 156-315.80 real exam questions to help you prepare for the exam well. Check Point 156-315.80 exam questions will save yout valuable time instead of exploring the online materials aimlessly. We ensure that you can pass CCSE R80 156-315.80 exam successfully. Additionally, passing CCSA R80 156-215.80 exam is the prerequisite of planning 156-315.80 exam.

Check Point CCSE R80 Certification 156-315.80 Free Questions Are Listed For Checking Below:

Page 1 of 6

1. What state is the Management HA in when both members have different policies/databases?

Synchronized

Never been synchronized

Lagging

Collision

2. Which of the following is NOT a component of Check Point Capsule?

Capsule Docs

Capsule Cloud

Capsule Enterprise

Capsule Workspace

3. In which VPN community is a satellite VPN gateway not allowed to create a VPN tunnel with another satellite VPN gateway?

Pentagon

Combined

Meshed

Star

4. How many interfaces can you configure to use the Multi-Queue feature?

10 interfaces

3 interfaces

4 interfaces

5 interfaces

5. Which firewall daemon is responsible for the FW CLI commands?

fwd

fwm

cpm

cpd

6. According to out of the box SmartEvent policy, which blade will automatically be correlated into events?

Firewall

VPN

IPS

HTTPS

7. Which option, when applied to a rule, allows traffic to VPN gateways in specific VPN communities?

All Connections (Clear or Encrypted)

Accept all encrypted traffic

Specific VPN Communities

All Site-to-Site VPN Communities

8. Which is the correct order of a log flow processed by SmartEvent components?

Firewall > Correlation Unit > Log Server > SmartEvent Server Database > SmartEvent Client

Firewall > SmartEvent Server Database > Correlation Unit > Log Server > SmartEvent Client

Firewall > Log Server > SmartEvent Server Database > Correlation Unit > SmartEvent Client

Firewall > Log Server > Correlation Unit > SmartEvent Server Database > SmartEvent Client

9. What is the base level encryption key used by Capsule Docs?

RSA 2048

RSA 1024

SHA-256

AES

10. Which SmartConsole tab is used to monitor network and security performance?

Manage Setting

Security Policies

Gateway and Servers

Logs and Monitor

Page 2 of 6

11. What traffic does the Anti-bot feature block?

Command and Control traffic from hosts that have been identified as infected

Command and Control traffic to servers with reputation for hosting malware

Network traffic that is directed to unknown or malicious servers

Network traffic to hosts that have been identified as infected

12. Matt wants to upgrade his old Security Management server to R80.x using the Advanced Upgrade with Database Migration .

What is one of the requirements for a successful upgrade?

Size of the /var/log folder of the source machine must be at least 25% of the size of the /var/log directory on the target machine

Size of the /var/log folder of the target machine must be at least 25% of the size of the /var/log directory on the source machine

Size of the $FWDIR/log folder of the target machine must be at least 30% of the size of the $FWDIR/log directory on the source machine

Size of the /var/log folder of the target machine must be at least 25GB or more

13. On the following picture an administrator configures Identity Awareness:

After clicking “Next” the above configuration is supported by:

Kerberos SSO which will be working for Active Directory integration

Based on Active Directory integration which allows the Security Gateway to correlate Active Directory users and machines to IP addresses in a method that is completely transparent to the user.

Obligatory usage of Captive Portal.

The ports 443 or 80 what will be used by Browser-Based and configured Authentication.

14. Which of the following is NOT a valid type of SecureXL template?

Accept Template

Deny template

Drop Template

NAT Template

15. CoreXL is NOT supported when one of the following features is enabled: (Choose three)

Route-based VPN

IPS

IPv6

Overlapping NAT

16. Which of the following is NOT an alert option?

SNMP

High alert

Mail

User defined alert

17. What does it mean if Deyra sees the gateway status? (Choose the BEST answer.)

SmartCenter Server cannot reach this Security Gateway.

There is a blade reporting a problem.

VPN software blade is reporting a malfunction.

Security Gateway’s MGNT NIC card is disconnected.

18. Check Point Management (cpm) is the main management process in that it provides the architecture for a consolidates management console. CPM allows the GUI client and management server to communicate via web services using ___________.

TCP port 19009

TCP Port 18190

TCP Port 18191

TCP Port 18209

19. How can SmartView application accessed?

http://<Security Management IP Address>/smartview

http://<Security Management IP Address>:4434/smartview/

https://<Security Management IP Address>/smartview/

https://<Security Management host name>:4434/smartview/

20. What is the SandBlast Agent designed to do?

Performs OS-level sandboxing for SandBlast Cloud architecture

Ensure the Check Point SandBlast services is running on the end user’s system

If malware enters an end user’s system, the SandBlast Agent prevents the malware from spreading with the network

Clean up email sent with malicious attachments

Page 3 of 6

21. In Advanced Permanent Tunnel Configuration, to set the amount of time the tunnel test runs without a

response before the peer host is declared ‘down’, you would set the_________?

life sign polling interval

life sign timeout

life_sign_polling_interval

life_sign_timeout

22. How many images are included with Check Point TE appliance in Recommended Mode?

2(OS) images

images are chosen by administrator during installation

as many as licensed for

the most new image

23. The Firewall kernel is replicated multiple times, therefore:

The Firewall kernel only touches the packet if the connection is accelerated

The Firewall can run different policies per core

The Firewall kernel is replicated only with new connections and deletes itself once the connection times out

The Firewall can run the same policy on all cores.

24. In Logging and Monitoring, the tracking options are Log, Detailed Log and Extended Log .

Which of the following options can you add to each Log, Detailed Log and Extended Log?

Accounting

Suppression

Accounting/Suppression

Accounting/Extended

25. Which blades and or features are not supported in R80?

SmartEvent Maps

SmartEvent

Identity Awareness

SmartConsole Toolbars

26. View the rule below .

What does the lock-symbol in the left column mean? (Choose the BEST answer.)

The current administrator has read-only permissions to Threat Prevention Policy.

Another user has locked the rule for editing.

Configuration lock is present. Click the lock symbol to gain read-write access.

The current administrator is logged in as read-only because someone else is editing the policy.

27. How many layers make up the TCP/IP model?

28. UserCheck objects in the Application Control and URL Filtering rules allow the gateway to communicate with the users .

Which action is not supported in UserCheck objects?

Ask

Drop

Inform

Reject

29. Which one of these features is NOT associated with the Check Point URL Filtering and Application Control Blade?

Detects and blocks malware by correlating multiple detection engines before users are affected.

Configure rules to limit the available network bandwidth for specified users or groups.

Use UserCheck to help users understand that certain websites are against the company’s security policy.

Make rules to allow or block applications and Internet sites for individual applications, categories, and risk levels.

30. In R80 spoofing is defined as a method of:

Disguising an illegal IP address behind an authorized IP address through Port Address Translation.

Hiding your firewall from unauthorized users.

Detecting people using false or wrong authentication logins

Making packets appear as if they come from an authorized IP address.

Page 4 of 6

31. Which Check Point software blade provides Application Security and identity control?

Identity Awareness

Data Loss Prevention

URL Filtering

Application Control

32. In the Check Point Firewall Kernel Module, each Kernel is associated with a key, which specifies the type of traffic applicable to the chain module. For Stateful Mode configuration, chain modules marked with __________________ will not apply.

ffff

33. How many policy layers do Access Control policy support?

34. By default, the R80 web API uses which content-type in its response?

Java Script

XML

Text

JSON

35. Which of the completed statements is NOT true? The WebUI can be used to manage user accounts and:

assign privileges to users.

edit the home directory of the user.

add users to your Gaia system.

assign user rights to their home directory in the Security Management Server.

36. You need to change the MAC-address on eth2 interface of the gateway .

What is the correct way to change MAC-address in Check Point Gaia?

In CLISH run: set interface eth2 mac-addr 11:11:11:11:11:11

In expert-mode run ifconfig eth1 hw 11:11:11:11 11 11

In CLISH run set interface eth2 hw-addr 11 11 11:11:11 11

In expert-mode run: ethtool -4 eth2 mac 11 11:11:11:11:11

37. What is the command used to activated Multi-Version Cluster mode?

set cluster member mvc on in Clish

set mvc on on Clish

set cluster MVC on in Expert Mode

set cluster mvc on in Expert Mode

38. You want to store the GAIA configuration in a file for later reference .

What command should you use?

write mem <filename>

show config Cf <filename>

save config Co <filename>

save configuration <filename>

39. Fill in the blank: __________ information is included in “Full Log” tracking option, but is not included in “Log” tracking option?

Destination port

Data type

File attributes

Application

40. When gathering information about a gateway using CPINFO, what information is included or excluded when using the “-x” parameter?

Includes the registry

Gets information about the specified Virtual System

Does not resolve network addresses

Output excludes connection table

Page 5 of 6

41. What information is NOT collected from a Security Gateway in a Cpinfo?

Firewall logs

Configuration and database files

System message logs

OS and network statistics

42. Automatic affinity means that if SecureXL is running, the affinity for each interface is automatically reset every

15 sec

60 sec

5 sec

30 sec

43. What is a feature that enables VPN connections to successfully maintain a private and secure VPN session without employing Stateful Inspection?

Stateful Mode

VPN Routing Mode

Wire Mode

Stateless Mode

44. The Compliance Blade allows you to search for text strings in many windows and panes, to search for a value in a field, what would your syntax be?

field_name:string

name field:string

name_field:string

field name:string

45. Which 3 types of tracking are available for Threat Prevention Policy?

SMS Alert, Log, SNMP alert

Syslog, None, User-defined scripts

None, Log, Syslog

Alert, SNMP trap, Mail

46. Which TCP-port does CPM process listen to?

18191

18190

8983

19009

47. Which is NOT an example of a Check Point API?

Gateway API

Management API

OPSEC SDK

Threat Prevention API

48. Joey want to configure NTP on R80 Security Management Server. He decided to do this via WebUI .

What is the correct address to access the Web UI for Gaia platform via browser?

https://<Device_IP_Adress>

http://<Device IP_Address>:443

https://<Device_IP_Address>:10000

https://<Device_IP_Address>:4434

49. What solution is Multi-queue intended to provide?

Improve the efficiency of traffic handling by SecureXL SNDs

Reduce the confusion for traffic capturing in FW Monitor

Improve the efficiency of CoreXL Kernel Instances

Reduce the performance of network interfaces

50. To enable Dynamic Dispatch on Security Gateway without the Firewall Priority Queues, run the following command in Expert mode and reboot:

fw ctl Dyn_Dispatch on

fw ctl Dyn_Dispatch enable

fw ctl multik set_mode 4

fw ctl multik set_mode 1

Page 6 of 6

51. How does the Anti-Virus feature of the Threat Prevention policy block traffic from infected websites?

By dropping traffic from websites identified through ThreatCloud Verification and URL Caching

By dropping traffic that is not proven to be from clean websites in the URL Filtering blade

By allowing traffic from websites that are known to run Antivirus Software on servers regularly

By matching logs against ThreatCloud information about the reputation of the website

52. Which of the following type of authentication on Mobile Access can NOT be used as the first authentication method?

Dynamic ID

RADIUS

Username and Password

Certificate

53. Packet acceleration (SecureXL) identifies connections by several attributes- Which of the attributes is NOT used for identifying connection?

Source Address

Destination Address

TCP Acknowledgment Number

Source Port

54. You have enabled “Full Log” as a tracking option to a security rule. However, you are still not seeing any data type information .

What is the MOST likely reason?

Logging has disk space issues. Change logging storage options on the logging server or Security Management Server properties and install database.

Data Awareness is not enabled.

Identity Awareness is not enabled.

Logs are arriving from Pre-R80 gateways.

55. SmartEvent provides a convenient way to run common command line executables that can assist in investigating events. Right-clicking the IP address, source or destination, in an event provides a list of default and customized commands. They appear only on cells that refer to IP addresses because the IP address of the active cell is used as the destination of the command when run. The default commands are:

ping, traceroute, netstat, and route

ping, nslookup, Telnet, and route

ping, whois, nslookup, and Telnet

ping, traceroute, netstat, and nslookup

56. After making modifications to the $CVPNDIR/conf/cvpnd.C file, how would you restart the daemon?

cvpnd_restart

cvpnd restart

cvpnrestart

57. As a valid Mobile Access Method, what feature provides Capsule Connect/VPN?

That is used to deploy the mobile device as a generator of one-time passwords for authenticating to an RSA Authentication Manager.

Fill Layer4 VPN CSSL VPN that gives users network access to all mobile applications.

Full Layer3 VPN CIPSec VPN that gives users network access to all mobile applications.

You can make sure that documents are sent to the intended recipients only.

58. Aaron is a Syber Security Engineer working for Global Law Firm with large scale deployment of Check Point Enterprise Appliances running GAiA R80.X The Network Security Developer Team is having an issue testing the API with a newly deployed R80.X Security Management Server Aaron wants to confirm API services are working properly .

What should he do first?

Aaron should check API Server status with "fwm api status" from Expert mode If services are stopped, he should start them with "fwm api start".

Aaron should check API Server status with "cpapi status" from Expert mode. If services are stopped, he should start them with "cpapi start"

Aaron should check API Server status with "api status" from Expert mode If services are stopped, he should start them with "api start"

Aaron should check API Server status with "cpm api status" from Expert mode. If services are stopped, he should start them with "cpi api start".

59. The CPD daemon is a Firewall Kernel Process that does NOT do which of the following?

Secure Internal Communication (SIC)

Restart Daemons if they fail

Transfers messages between Firewall processes

Pulls application monitoring status

60. Fill in the blanks: In the Network policy layer, the default action for the Implied last rule is ____ all traffic. However, in the Application Control policy layer, the default action is ______ all traffic.

Accept; redirect

Accept; drop

Redirect; drop

Drop; accept

Welcome To Choose Required IT Certification Exams Online

Check Point CCSE R80 Certification 156-315.80 Real Exam Questions

Check Point CCSE R80 Certification 156-315.80 Free Questions Are Listed For Checking Below:

Author