156-315.81 Dumps By Pros - 1st Attempt Guaranteed Success
100% Guarantee Download 156-315.81 Exam Dumps PDF Q&A
NEW QUESTION # 25
You want to gather and analyze threats to your mobile device. It has to be a lightweight app. Which application would you use?
- A. Check Point Protect
- B. SecuRemote
- C. Check Point Capsule Cloud
- D. SmartEvent Client Info
Answer: A
Explanation:
Explanation
Check Point Protect is a lightweight app that can be used to gather and analyze threats to your mobile device. It provides real-time threat intelligence, device posture assessment, and secure browsing protection3.
The other applications are either not designed for mobile devices, or do not offer threat analysis features.
References: R81 CCSA & CCSE exams released featuring Promo for... - Check Point ..., Check Point Protect
- Apps on Google Play
NEW QUESTION # 26
The Check Point history feature in R81 provides the following:
- A. View install changes and install specific version
- B. View install changes
- C. Policy Installation Date, view install changes and install specific version
- D. Policy Installation Date only
Answer: D
NEW QUESTION # 27
Which Check Point process provides logging services, such as forwarding logs from Gateway to Log Server, providing Log Export API (LEA) & Event Logging API (EL-A) services.
- A. CPD
- B. FWD
- C. DASSERVICE
- D. CPVIEWD
Answer: C
NEW QUESTION # 28
You want to verify if your management server is ready to upgrade to R81.10. What tool could you use in this process?
- A. upgrade_tools verify
- B. pre_upgrade_verifier
- C. migrate export
- D. migrate import
Answer: B
Explanation:
Explanation
According to the Check Point website, you can use the pre_upgrade_verifier tool to verify if your management server is ready to upgrade to R81.10. This tool checks the compatibility of your current configuration and database with the target version, and provides a detailed report of any issues or warnings. The other tools are either used for exporting or importing databases, or not valid tools. References: Upgrade Verification Service
NEW QUESTION # 29
Which of the following statements is TRUE about R81 management plug-ins?
- A. The plug-in is a package installed on the Security Gateway.
- B. Using a plug-in offers full central management only if special licensing is applied to specific features of the plug-in.
- C. A management plug-in interacts with a Security Management Server to provide new features and support for new products.
- D. Installing a management plug-in requires a Snapshot, just like any upgrade process.
Answer: C
Explanation:
Explanation
A management plug-in is a software component that interacts with a Security Management Server to provide new features and support for new products. A management plug-in can extend the functionality of SmartConsole, SmartDashboard, SmartView Monitor, SmartView Tracker, SmartEvent, SmartReporter, SmartProvisioning, SmartUpdate, and other management tools. A management plug-in can also add new objects, policies, rules, actions, reports, views, and wizards to the management system. Some examples of management plug-ins are CloudGuard Controller, SandBlast Agent, Endpoint Security Server, Threat Extraction for Web, etc.
NEW QUESTION # 30
Fill in the blank: __________ information is included in "Full Log" tracking option, but is not included in
"Log" tracking option?
- A. Application
- B. Destination port
- C. Data type
- D. File attributes
Answer: C
NEW QUESTION # 31
What is the amount of Priority Queues by default?
- A. There is no distinct number of queues since it will be changed in a regular basis based on its system requirements.
- B. There are 7 priority queues by default and this number cannot be changed.
- C. There are 8 priority queues by default, and up to 8 additional queues can be manually configured
- D. There are 8 priority queues and this number cannot be changed.
Answer: C
NEW QUESTION # 32
What kind of information would you expect to see using the sim affinity command?
- A. The VMACs used in a Security Gateway cluster
- B. The involved firewall kernel modules in inbound and outbound packet chain
- C. Overview over SecureXL templated connections
- D. Network interfaces and core distribution used for CoreXL
Answer: D
NEW QUESTION # 33
You can select the file types that are sent for emulation for all the Threat Prevention profiles. Each profile defines a(n) _____ or _____ action for the file types.
- A. Prevent/Bypass
- B. Inspect/Bypass
- C. Detect/Bypass
- D. Inspect/Prevent
Answer: B
NEW QUESTION # 34
What key is used to save the current CPView page in a filename format cpview_"cpview process ID".cap"number of captures"?
- A. C
- B. Space bar
- C. W
- D. S
Answer: A
Explanation:
Explanation
The key C is used to save the current CPView page in a filename format cpview_"cpview process ID".cap"number of captures". This is a feature of CPView that allows the user to capture the current page for later analysis or troubleshooting. The file is saved in the /var/log directory on the Security Gateway.
References: Check Point Resource Library, page 3.
NEW QUESTION # 35
How can you switch the active log file?
- A. Run fwm logswitch on the Management Server
- B. Run fwm logswitch on the gateway
- C. Run fw logswitch on the gateway
- D. Run fw logswitch on the Management Server
Answer: B
NEW QUESTION # 36
What CLI utility runs connectivity tests from a Security Gateway to an AD domain controller?
- A. test_ad_connectivity -d <domain>
- B. ad_connectivity_test -d <domain>
- C. test_connectivity_ad -d <domain>
- D. test_ldap_connectivity -d <domain>
Answer: A
Explanation:
https://sc1.checkpoint.com/documents/R81.30/WebAdminGuides/EN/
CP_R81.30_CLI_ReferenceGuide/html_frameset.htm?topic=documents/R81.30/WebAdminGuides/EN/ CP_R81.30_CLI_ReferenceGuide/200877
NEW QUESTION # 37
During the Check Point Stateful Inspection Process, for packets that do not pass Firewall Kernel Inspection and are rejected by the rule definition, packets are:
- A. Dropped without logs and without sending a negative acknowledgment
- B. Dropped with logs and without sending a negative acknowledgment
- C. Dropped without sending a negative acknowledgment
- D. Dropped with negative acknowledgment
Answer: B
NEW QUESTION # 38
Which 3 types of tracking are available for Threat Prevention Policy?
- A. Alert, SNMP trap, Mail
- B. SMS Alert, Log, SNMP alert
- C. None, Log, Syslog
- D. Syslog, None, User-defined scripts
Answer: D
NEW QUESTION # 39
The "MAC magic" value must be modified under the following condition:
- A. There is more than one cluster connected to the same VLAN
- B. A firewall cluster is configured to use Multicast for CCP traffic
- C. There are more than two members in a firewall cluster
- D. A firewall cluster is configured to use Broadcast for CCP traffic
Answer: D
NEW QUESTION # 40
To enable Dynamic Dispatch on Security Gateway without the Firewall Priority Queues, run the following command in Expert mode and reboot:
- A. fw ctl multik set_mode 4
- B. fw ctl Dyn_Dispatch on
- C. fw ctl multik set_mode 1
- D. fw ctl Dyn_Dispatch enable
Answer: A
Explanation:
Explanation
Dynamic Dispatch is a feature that enhances CoreXL performance by dynamically assigning new connections to CoreXL FW instances based on their CPU utilization1. To enable Dynamic Dispatch on Security Gateway without enabling Firewall Priority Queues (FPQ), you need to run the command fw ctl multik set_mode 4 in Expert mode and reboot2. This command will set the CoreXL mode to Dynamic Dispatcher without FPQ. The other options are not correct because:
A: fw ctl Dyn_Dispatch on: This command does not exist and will return an error message.
B: fw ctl Dyn_Dispatch enable: This command does not exist and will return an error message.
D: fw ctl multik set_mode 1: This command will set the CoreXL mode to Static Dispatcher without FPQ, which is the default mode2. This mode will use a static hash function to assign new connections to CoreXL FW instances based on their IP addresses and protocol.
References: CoreXL Dynamic Dispatcher, To fully enable Dynamic Dispatcher on a Security Gateway, Running Dynamic Dispatch / Dynamic Split / Dynamic Balancing on VSEC/IaaS in Vmware, Dynamic Balancing for CoreXL
NEW QUESTION # 41
On R81.10 when configuring Third-Party devices to read the logs using the LEA (Log Export API) the default Log Server uses port:
- A. 0
- B. 1
- C. 2
- D. 3
Answer: C
Explanation:
Explanation
On R81.10, when configuring Third-Party devices to read the logs using the LEA (Log Export API), the default Log Server uses port 18184. This port can be changed using the lea_server command in expert mode.
The other ports are either not related to LEA, or used for different purposes, such as 18210 for CPMI, 257 for FW1_log, and 18191 for SIC. References: [Check Point R81 Logging and Monitoring Administration Guide],
[Check Point Ports Used for Communication by Various Check Point Modules]
NEW QUESTION # 42
Joey want to configure NTP on R81 Security Management Server. He decided to do this via WebUI. What is the correct address to access the Web UI for Gaia platform via browser?
- A. Error! Hyperlink reference not valid. IP_Address>:443
- B. Error! Hyperlink reference not valid.
- C. Error! Hyperlink reference not valid.
- D. Error! Hyperlink reference not valid.
Answer: C
NEW QUESTION # 43
Which one of these features is NOT associated with the Check Point URL Filtering and Application Control Blade?
- A. Configure rules to limit the available network bandwidth for specified users or groups.
- B. Use UserCheck to help users understand that certain websites are against the company's security policy.
- C. Detects and blocks malware by correlating multiple detection engines before users are affected.
- D. Make rules to allow or block applications and Internet sites for individual applications, categories, and risk levels.
Answer: C
NEW QUESTION # 44
Which one is not a valid Package Option In the Web GUI for CPUSE?
- A. Upgrade
- B. Export Package
- C. Database Conversion to R81.10 only
- D. Clean Install
Answer: B
NEW QUESTION # 45
......
Earn Quick And Easy Success With 156-315.81 Dumps: https://www.vce4plus.com/CheckPoint/156-315.81-valid-vce-dumps.html
Kickstart your Career with Real Updated Questions: https://drive.google.com/open?id=197xAqgsWGjZ7d7XlMVyu2c6dCE4nvRLx