[2021] Use Valid 156-315.80 Exam - Actual Exam Question & Answer
Test Engine to Practice 156-315.80 Test Questions
What is the duration of the 156-315.80 Exam
- Passing Score: 70%
- Number of Questions: 100
- Length of Examination: 90 minutes
- Format: Multiple choices, multiple answers
NEW QUESTION 100
Fill in the blank: The R80 utility fw monitor is used to troubleshoot ________.
- A. User data base corruption
- B. LDAP conflicts
- C. Traffic issues
- D. Phase two key negotiations
Answer: C
Explanation:
Explanation
Check Point's FW Monitor is a powerful built-in tool for capturing network traffic at the packet level. The FW Monitor utility captures network packets at multiple capture points along the FireWall inspection chains.
These captured packets can be inspected later using the WireShark
References:
NEW QUESTION 101
Check Pont Central Deployment Tool (CDT) communicates with the Security Gateway / Cluster Members
over Check Point SIC _____________ .
- A. TCP Port 18190
- B. TCP Port 18191
- C. TCP Port 18209
- D. TCP Port 19009
Answer: B
NEW QUESTION 102
What does it mean if Deyra sees the gateway status? (Choose the BEST answer.)
- A. There is a blade reporting a problem.
- B. SmartCenter Server cannot reach this Security Gateway.
- C. VPN software blade is reporting a malfunction.
- D. Security Gateway's MGNT NIC card is disconnected.
Answer: A
Explanation:
References:
NEW QUESTION 103
What does the Log "Views" tab show when SmartEvent is Correlating events?
- A. Details of a selected logs
- B. A list of common reports
- C. Reports for customization
- D. Top events with charts and graphs
Answer: A
NEW QUESTION 104
Which of these is an implicit MEP option?
- A. Primary-backup
- B. Load Sharing
- C. Source address based
- D. Round robin
Answer: A
Explanation:
Explanation/Reference:
Reference: https://sc1.checkpoint.com/documents/R77/CP_R77_VPN_AdminGuide/13812.htm
NEW QUESTION 105
When users connect to the Mobile Access portal they are unable to open File shares. Which log file
would you want to examine?
- A. fw.elg
- B. Evpnd.elg
- C. httpd.elg
- D. vpnd.elg
Answer: D
NEW QUESTION 106
What command would show the API server status?
- A. cpm status
- B. api status
- C. show api status
- D. api restart
Answer: B
Explanation:
Explanation/Reference: https://community.checkpoint.com/thread/6524-can-anybody-let-me-know-how-can-we-import- policyrules-via-csv-file
NEW QUESTION 107
On R80.10 when configuring Third-Party devices o read the logs using the LEA (Log Export API) the default Log Server uses port:
- A. 0
- B. 1
- C. 2
- D. 3
Answer: B
Explanation:
Reference:
https://sc1.checkpoint.com/documents/R80/CP_R8Q_LoggingAndMonitorinq/html_framese t.htm?
topic=documents/R80/CP_R80_LoggingAndMonitoring/120829
NEW QUESTION 108
What command verifies that the API server is responding?
- A. api stat
- B. api status
- C. app_get_status
- D. show api_status
Answer: B
Explanation:
Reference: https://www.hurricanelabs.com/blog/check-point-api-merging-management- servers-with-r80-10
NEW QUESTION 109
In the Firewall chain mode FFF refers to:
- A. Stateless Packets
- B. Stateful Packets
- C. No Match
- D. All Packets
Answer: D
Explanation:
Explanation
Explanation/Reference: http://dkcheckpoint.blogspot.com/2016/07/chapter-2-chain-module.html
NEW QUESTION 110
You want to gather and analyze threats to your mobile device. It has to be a lightweight app. Which application would you use?
- A. SecuRemote
- B. Check Point Capsule Cloud
- C. Check Point Protect
- D. SmartEvent Client Info
Answer: C
Explanation:
Explanation/Reference: https://www.insight.com/content/dam/insight-web/en_US/pdfs/check-point/mobile-threat- prevention-behavioral-risk-analysis.pdf
NEW QUESTION 111
Which is the correct order of a log flow processed by SmartEvent components?
- A. Firewall > Log Server > SmartEvent Server Database > Correlation Unit > SmartEvent Client
- B. Firewall > SmartEvent Server Database > Correlation Unit > Log Server > SmartEvent Client
- C. Firewall > Correlation Unit > Log Server > SmartEvent Server Database > SmartEvent Client
- D. Firewall > Log Server > Correlation Unit > SmartEvent Server Database > SmartEvent Client
Answer: D
NEW QUESTION 112
Which GUI client is supported in R80?
- A. SmartView Monitor
- B. SmartLog
- C. SmartProvisioning
- D. SmartView Tracker
Answer: A
Explanation:
Explanation/Reference:
NEW QUESTION 113
Check Point Management (cpm) is the main management process in that it provides the architecture for a
consolidates management console. CPM allows the GUI client and management server to communicate via
web services using ___________.
- A. TCP port 19009
- B. TCP Port 18191
- C. TCP Port 18190
- D. TCP Port 18209
Answer: A
NEW QUESTION 114
What makes Anti-Bot unique compared to gather Threate Prevention mechanisms, Such as URL Filtering Anti-Virus, IPS and Threat Emulation?
- A. Anti-Bot is a post-infection malware protection to prevent a host from establishing a connection to a Command & Control Center
- B. Anti-Bot is the only protection mechanism which startsacounter-attack against known Command & Control Centers
- C. Anti-Bot is the only countermeasure against unknown malware
- D. Anti-Bot is the only signature based method of mature protection
Answer: B
NEW QUESTION 115
To ensure that VMAC mode is enabled, which CLI command should you run on all cluster members?
- A. fw ctl get int vmac global param enabled; result of command should return value 1
- B. fw ctl set int fwha vmac global param enabled
- C. cphaprob-a if
- D. fw ctl get int fwha_vmac_global_param_enabled; result of command should return value 1
Answer: D
Explanation:
References:
NEW QUESTION 116
Which is the least ideal Synchronization Status for Security Management Server High Availability deployment?
- A. Never been synchronized
- B. Lagging
- C. Synchronized
- D. Collision
Answer: D
Explanation:
Explanation/Reference:
Reference: https://sc1.checkpoint.com/documents/R80/CP_R80_SecMGMT/html_frameset.htm?
topic=documents/R80/CP_R80_SecMGMT/120712
NEW QUESTION 117
Which of the following Check Point processes within the Security Management Server is responsible for the receiving of log records from Security Gateway?
- A. fwd
- B. cpd
- C. logd
- D. fwm
Answer: A
NEW QUESTION 118
Fill in the blank: Authentication rules are defined for ________ .
- A. All users in the database
- B. User groups
- C. Individual users
- D. Users using UserCheck
Answer: B
Explanation:
References:
NEW QUESTION 119
......
How to study the 156-315.80 Exam
Real4dumps expert team recommends you to prepare some notes on these topics along with it don’t forget to practice Check Point Certified Security Expert - R80 156-315.80 Exam which been written by our expert team, Both these will help you a lot to clear this exam with good marks.
156-315.80 Actual Questions Answers PDF 100% Cover Real Exam Questions: https://www.real4dumps.com/156-315.80_examcollection.html
