Real 156-315.81.20 dumps Accurate Questions and Answers with Free and Fast Updates [Q359-Q383]

Rate this post

Real 156-315.81.20 dumps Accurate Questions and Answers with Free and Fast Updates

Real 156-315.81.20 Quesions Pass Certification Exams Easily

NO.359 By default, which port does the WebUI listen on?

4434

443

8080

NO.360 Which features are only supported with R81.20 Gateways but not R77.x?

Access Control policy unifies the Firewall, Application Control & URL Filtering, Data Awareness, and Mobile Access Software Blade policies.

Limits the upload and download throughput for streaming media in the company to 1 Gbps.

The rule base can be built of layers, each containing a set of the security rules. Layers are inspected in the order in which they are defined, allowing control over the rule base flow and which security functionalities take precedence.

Time object to a rule to make the rule active only during specified times.

NO.361 Check Point security components are divided into the following components:

GUI Client, Security Gateway, WebUI Interface

GUI Client, Security Management, Security Gateway

Security Gateway, WebUI Interface, Consolidated Security Logs

Security Management, Security Gateway, Consolidate Security Logs

NO.362 Which statement is true regarding redundancy?

System Administrators know when their cluster has failed over and can also see why it failed over by using the cphaprob -f if command.

ClusterXL offers three different Load Sharing solutions: Unicast, Broadcast, and Multicast.

Machines in a ClusterXL High Availability configuration must be synchronized.

Both ClusterXL and VRRP are fully supported by Gaia and available to all Check Point appliances, open servers, and virtualized environments.

NO.363 Check Point Support in many cases asks you for a configuration summary of your Check Point system.
This is also called:

cpexport

sysinfo

cpsizeme

cpinfo

NO.364 Which of the following is NOT an option to calculate the traffic direction?

Incoming

Internal

External

Outgoing

NO.365 You are working with multiple Security Gateways enforcing an extensive number of rules.
To simplify security administration, which action would you choose?

Eliminate all possible contradictory rules such as the Stealth or Cleanup rules.

Create a separate Security Policy package for each remote Security Gateway.

Create network objects that restricts all applicable rules to only certain networks.

Run separate SmartConsole instances to login and configure each Security Gateway directly.

NO.366 How can you switch the active log file?

Run fw logswitch on the gateway

Run fwm logswitch on the Management Server

Run fwm logswitch on the gateway

Run fw logswitch on the Management Server

NO.367 What key is used to save the current CPView page in a filename format cpview_”cpview process ID”.cap”number of captures”?

Space bar

NO.368 In SmartConsole, objects are used to represent physical and virtual network components and also some logical components. These objects are divided into several categories.
Which of the following is NOT an objects category?

Limit

Resource

Custom Application / Site

Network Object

NO.369 How often does Threat Emulation download packages by default?

Once a week

Once an hour

Twice per day

Once per day

NO.370 Which command can you use to enable or disable multi-queue per interface?

cpmq set

Cpmqueue set

Cpmq config

St cpmq enable

NO.371 True or False: In a Distributed Environment, a Central License can be installed via CLI on a Security Gateway.

True, CLI is the prefer method for Licensing

False, Central License are handled via Security Management Server

False, Central Licenses are installed via Gaia on Security Gateways

True, Central License can be installed with CPLIC command on a Security Gateway

NO.372 What is the most recommended way to install patches and hotfixes?

CPUSE Check Point Update Service Engine

rpm -Uv

Software Update Service

UnixinstallScript

NO.373 Which option, when applied to a rule, allows traffic to VPN gateways in specific VPN communities?

All Connections (Clear or Encrypted)

Accept all encrypted traffic

Specific VPN Communities

All Site-to-Site VPN Communities

NO.374 What is the purpose of a SmartEvent Correlation Unit?

The SmartEvent Correlation Unit is designed to check the connection reliability from SmartConsole to the SmartEvent Server.

The SmartEvent Correlation Unit’s task it to assign severity levels to the identified events.

The Correlation unit role is to evaluate logs from the log server component to identify patterns/threats and convert them to events.

The SmartEvent Correlation Unit is designed to check the availability of the SmartReporter Server.

NO.375 Vanessa is firewall administrator in her company. Her company is using Check Point firewall on a central and several remote locations which are managed centrally by R77.30 Security Management Server. On central location is installed R77.30 Gateway on Open server. Remote locations are using Check Point UTM-1570 series appliances with R75.30 and some of them are using a UTM-1-Edge-X or Edge-W with latest available firmware. She is in process of migrating to R81.
What can cause Vanessa unnecessary problems, if she didn’t check all requirements for migration to R81?

Missing an installed R77.20 Add-on on Security Management Server

Unsupported firmware on UTM-1 Edge-W appliance

Unsupported version on UTM-1 570 series appliance

Unsupported appliances on remote locations

NO.376 Choose the correct syntax to add a new host named “emailserver1” with IP address 10.50.23.90 using GAiA Management CLI?

mgmt_cli add host name “myHost12 ip” address 10.50.23.90

mgmt_cli add host name ip-address 10.50.23.90

mgmt_cli add host “emailserver1” address 10.50.23.90

mgmt_cli add host name “emailserver1” ip-address 10.50.23.90

NO.377 What is the default shell of Gaia CLI?

Monitor

CLI.sh

Read-only

Bash

NO.378 What are the available options for downloading Check Point hotfixes in Gala WebUI (CPUSE)?

Manually, Scheduled, Automatic

Manually, Automatic, Disabled

Manually, Scheduled, Disabled

Manually, Scheduled, Enabled

NO.379 True or False: In R81, more than one administrator can login to the Security Management Server with write permission at the same time.

False, this feature has to be enabled in the Global Properties.

True, every administrator works in a session that is independent of the other administrators.

True, every administrator works on a different database that is independent of the other administrators.

False, only one administrator can login with write permission.

NO.380 What is the recommended number of physical network interfaces in a Mobile Access cluster deployment?

4 Interfaces – an interface leading to the organization, a second interface leading to the internet, a third interface for synchronization, a fourth interface leading to the Security Management Server.

3 Interfaces – an interface leading to the organization, a second interface leading to the Internet, a third interface for synchronization.

1 Interface – an interface leading to the organization and the Internet, and configure for synchronization.

2 Interfaces – a data interface leading to the organization and the Internet, a second interface for synchronization.

NO.381 In order for changes made to policy to be enforced by a Security Gateway, what action must an administrator perform?

Publish changes

Save changes

Install policy

Install database

NO.382 In R81, how do you manage your Mobile Access Policy?

Through the Unified Policy

Through the Mobile Console

From SmartDashboard