100% Free Real Updated 156-315.81 Questions & Answers Pass Your Exam Easily [Q49-Q73]

4.5/5 - (2 votes)

100% Free Real Updated 156-315.81 Questions & Answers Pass Your Exam Easily

Easily To Pass New 156-315.81 Verified & Correct Answers

Q49. Is it possible to establish a VPN before the user login to the Endpoint Client?

yes, you had to set neo_remember_user_password to true in the trac.defaults of the Remote Access Client or you can use the endpoint_vpn_remember_user_password attribute in the trac_client_1 .ttm file located in the SFWDIR/conf directory on the Security Gateway

no, the user must login first.

yes. you had to set neo_always_connected to true in the trac.defaults of the Remote Access Client or you can use the endpoint_vpn_always_connected attribute in the trac_client_1 .ttm file located in the SFWDIR/conf directory on the Security Gateway

yes, you had to enable Machine Authentication in the Gateway object of the Smart Console

Q50. With Mobile Access enabled, administrators select the web-based and native applications that can be accessed by remote users and define the actions that users can perform the applications. Mobile Access encrypts all traffic using:

HTTPS for web-based applications and 3DES or RC4 algorithm for native applications. For end users to access the native applications, they need to install the SSL Network Extender.

HTTPS for web-based applications and AES or RSA algorithm for native applications. For end users to access the native application, they need to install the SSL Network Extender.

HTTPS for web-based applications and 3DES or RC4 algorithm for native applications. For end users to access the native applications, no additional software is required.

HTTPS for web-based applications and AES or RSA algorithm for native applications. For end users to access the native application, no additional software is required.

Q51. Alice works for a big security outsourcing provider company and as she receives a lot of change requests per day she wants to use for scripting daily (asks the API services from Check Point fof the Management API. Firstly she needs to be aware if the API services are running for the management. Which of the following Check Point Command is true:

api mgmt status

api status

status api

status mgmt apt

Q52. Which features are only supported with R81.10 Gateways but not R77.x?

Access Control policy unifies the Firewall, Application Control & URL Filtering, Data Awareness, and Mobile Access Software Blade policies.

Limits the upload and download throughput for streaming media in the company to 1 Gbps.

The rule base can be built of layers, each containing a set of the security rules. Layers are inspected in the order in which they are defined, allowing control over the rule base flow and which security functionalities take precedence.

Time object to a rule to make the rule active only during specified times.

Q53. In Threat Prevention, you can create new or clone profiles but you CANNOT change the out-of-the-box profiles of:

Basic, Optimized, Strict

Basic, Optimized, Severe

General, Escalation, Severe

General, purposed, Strict

Q54. When a packet arrives at the gateway, the gateway checks it against the rules in the hop Policy Layer, sequentially from top to bottom, and enforces the first rule that matches a packet. Which of the following statements about the order of rule enforcement is true?

If the Action is Accept, the gateway allows the packet to pass through the gateway.

If the Action is Drop, the gateway continues to check rules in the next Policy Layer down.

If the Action is Accept, the gateway continues to check rules in the next Policy Layer down.

If the Action is Drop, the gateway applies the Implicit Clean-up Rule for that Policy Layer.

Q55. Which of the following commands shows the status of processes?

cpwd_admin -l

cpwd -l

cpwd admin_list

cpwd_admin list

Q56. R81.10 management server can manage gateways with which versions installed?

Versions R77 and higher

Versions R76 and higher

Versions R75.20 and higher

Versions R75 and higher

Q57. After having saved the Clish Configuration with the “save configuration config.txt” command, where can you find the config.txt file?

You will find it in the home directory of your user account (e.g. /home/admin/)

You can locate the file via SmartConsole > Command Line.

You have to launch the WebUI and go to “Config” -> “Export Config File” and specifiy the destination directory of your local file system.

You cannot locate the file in the file system since Clish does not have any access to the bash file system

Q58. What are the services used for Cluster Synchronization?

256H-CP tor Full Sync and 8116/UDP for Delta Sync

8116/UDP for Full Sync and Delta Sync

TCP/256 for Full Sync and Delta Sync

No service needed when using Broadcast Mode

Q59. What is the least amount of CPU cores required to enable CoreXL?

Q60. What component of Management is used tor indexing?

DBSync

API Server

fwm

SOLR

Q61. Which of the following is an identity acquisition method that allows a Security Gateway to identify Active Directory users and computers?

UserCheck

Active Directory Query

Account Unit Query

User Directory Query

Q62. What are the two modes for SNX (SSL Network Extender)?

Network Mode and Application Mode

Visitor Mode and Office Mode

Network Mode and Hub Mode

Office Mode and Hub Mode

Q63. Due to high CPU workload on the Security Gateway, the security administrator decided to purchase a new multicore CPU to replace the existing single core CPU. After installation, is the administrator required to perform any additional tasks?

Run cprestart from clish

After upgrading the hardware, increase the number of kernel instances using cpconfig

Administrator does not need to perform any task. Check Point will make use of the newly installed CPU and Cores

Hyperthreading must be enabled in the bios to use CoreXL

Q64. What are the modes of SandBlast Threat Emulation deployment?

Cloud, Smart-1 and Hybrid

Cloud. OpenServer and Vmware

Cloud, Appliance and Private

Cloud, Appliance and Hybrid

Q65. Which of the following describes how Threat Extraction functions?

Detect threats and provides a detailed report of discovered threats.

Proactively detects threats.

Delivers file with original content.

Delivers PDF versions of original files with active content removed.

Q66. You have a Geo-Protection policy blocking Australia and a number of other countries. Your network now requires a Check Point Firewall to be installed in Sydney, Australia.
What must you do to get SIC to work?

Remove Geo-Protection, as the IP-to-country database is updated externally, and you have no control of this.

Create a rule at the top in the Sydney firewall to allow control traffic from your network

Nothing – Check Point control connections function regardless of Geo-Protection policy

Create a rule at the top in your Check Point firewall to bypass the Geo-Protection

Q67. Which of the following Central Deployment is NOT a limitation in R81.10 SmartConsole?

Security Gateway Clusters in Load Sharing mode

Dedicated Log Server

Dedicated SmartEvent Server

Security Gateways/Clusters in ClusterXL HA new mode

Q68. Installations and upgrades with CPUSE require that the CPUSE agent is up-to-date. Usually the latest build is downloaded automatically. How can you verify the CPUSE agent build?

In WebUI Status and Actions page or by running the following command in CLISH: show installer status build

In WebUI Status and Actions page or by running the following command in CLISH: show installer status version

In the Management Server or Gateway object in SmartConsole or by running the following command in CLISH: show installer status build

In the Management Server or Gateway object in SmartConsole or by running the following command in CLISH: show installer agent

Q69. Which method below is NOT one of the ways to communicate using the Management API’s?

Typing API commands using the “mgmt_cli” command

Typing API commands from a dialog box inside the SmartConsole GUI application

Typing API commands using Gaia’s secure shell(clish)19+

Sending API commands over an http connection using web-services

Q70. How long may verification of one file take for Sandblast Threat Emulation?

up to 1 minutes

within seconds cleaned file will be provided

up to 5 minutes

up to 3 minutes

Q71. What Is the difference between Updatable Objects and Dynamic Objects

Dynamic Objects ate maintained automatically by the Threat Cloud. Updatable Objects are created and maintained locally. In both cases there is no need to install policy for the changes to take effect.

Updatable Objects is a Threat Cloud Service. The provided Objects are updated automatically. Dynamic Objects are created and maintained locally For Dynamic Objects there is no need to install policy for the changes to take effect.

Updatable Objects is a Threat Cloud Service. The provided Objects are updated automatically. Dynamic Objects are created and maintained locally In both cases there is no need to install policy for the changes to take effect.

Dynamic Objects are maintained automatically by the Threat Cloud. For Dynamic Objects there rs no need to install policy for the changes to take effect. Updatable Objects are created and maintained locally.

Q72. After trust has been established between the Check Point components, what is TRUE about name and IP-address changes?

Security Gateway IP-address cannot be changed without re-establishing the trust.

The Security Gateway name cannot be changed in command line without re-establishing trust.

The Security Management Server name cannot be changed in SmartConsole without re-establishing trust.

The Security Management Server IP-address cannot be changed without re-establishing the trust.

Q73. To accelerate the rate of connection establishment, SecureXL groups all connection that match a particular service and whose sole differentiating element is the source port. The type of grouping enables even the very first packets of a TCP handshake to be accelerated. The first packets of the first connection on the same service will be forwarded to the Firewall kernel which will then create a template of the connection. Which of the these is NOT a SecureXL template?

Accept Template

Deny Template

Drop Template

NAT Template