Free Dec-2022 156-315.81 Certification Sample Questions certification Exam [Q220-Q242]

Rate this post

Free Dec-2022 156-315.81 Certification Sample Questions certification Exam

Certification Topics of 156-315.81 Exam PDF Recently Updated Questions

For more information about the CheckPoint 156-315.81 Exam visit the following reference link:

CheckPoint 156-315.81 Exam Reference link

Q220. You have existing dbedit scripts from R77. Can you use them with R81.10?

dbedit is not supported in R81.10

dbedit is fully supported in R81.10

You can use dbedit to modify threat prevention or access policies, but not create or modify layers

dbedit scripts are being replaced by mgmt_cli in R81.10

Q221. The Check Point history feature in R81 provides the following:

View install changes and install specific version

View install changes

Policy Installation Date, view install changes and install specific version

Policy Installation Date only

Q222. Which tool is used to enable ClusterXL?

SmartUpdate

cpconfig

SmartConsole

sysconfig

Q223. John is using Management HA.
Which Security Management Server should he use for making changes?

secondary Smartcenter

active SmartConsole

connect virtual IP of Smartcenter HA

primary Log Server

Q224. What is the valid range for VRID value in VRRP configuration?

1 – 254

1 – 255

0 – 254

0 – 255

Virtual Router ID – Enter a unique ID number for this virtual router. The range of valid values is 1 to 255.

Q225. Check Point ClusterXL Active/Active deployment is used when:

Only when there is Multicast solution set up.

There is Load Sharing solution set up.

Only when there is Unicast solution set up.

There is High Availability solution set up.

Q226. Which packet info is ignored with Session Rate Acceleration?

source port ranges

source ip

source port

same info from Packet Acceleration is used

Q227. Fill in the blank. Once a certificate is revoked from the Security Gateway by the Security Management Server, the certificate information is ________ .

Sent to the Internal Certificate Authority.

Sent to the Security Administrator.

Stored on the Security Management Server.

Stored on the Certificate Revocation List.

Q228. There are 4 ways to use the Management API for creating host object with R81 Management API. Which one is NOT correct?

Using Web Services

Using Mgmt_cli tool

Using CLISH

Using SmartConsole GUI console

Events are collected with SmartWorkflow from Trouble Ticket systems

Q229. Which of the following Check Point processes within the Security Management Server is responsible for the receiving of log records from Security Gateway?

logd

fwd

fwm

cpd

Q230. Which command is used to add users to or from existing roles?

Add rba user <User Name> roles <List>

Add rba user <User Name>

Add user <User Name> roles <List>

Add user <User Name>

Q231. Vanessa is expecting a very important Security Report. The Document should be sent as an attachment via e-mail. An e-mail with Security_report.pdf file was delivered to her e-mail inbox. When she opened the PDF file, she noticed that the file is basically empty and only few lines of text are in it. The report is missing some graphs, tables and links.
Which component of SandBlast protection is her company using on a Gateway?

SandBlast Threat Emulation

SandBlast Agent

Check Point Protect

SandBlast Threat Extraction

Q232. Check Pont Central Deployment Tool (CDT) communicates with the Security Gateway / Cluster Members over Check Point SIC _______ .

TCP Port 18190

TCP Port 18209

TCP Port 19009

TCP Port 18191

Q233. Customer’s R81 management server needs to be upgraded to R81.10. What is the best upgrade method when the management server is not connected to the Internet?

Export R81 configuration, clean install R81.10 and import the configuration

CPUSE offline upgrade

CPUSE online upgrade

SmartUpdate upgrade

Q234. Which one of these features is NOT associated with the Check Point URL Filtering and Application Control Blade?

Detects and blocks malware by correlating multiple detection engines before users are affected.

Configure rules to limit the available network bandwidth for specified users or groups.

Use UserCheck to help users understand that certain websites are against the company’s security policy.

Make rules to allow or block applications and Internet sites for individual applications, categories, and risk levels.

Q235. John is using Management HA.
Which Smartcenter should be connected to for making changes?

secondary Smartcenter

active Smartenter

connect virtual IP of Smartcenter HA

primary Smartcenter

Q236. Which command shows the current connections distributed by CoreXL FW instances?

fw ctl multik stat

fw ctl affinity -l

fw ctl instances -v

fw ctl iflist

Q237. A user complains that some Internet resources are not available. The Administrator is having issues seeing it packets are being dropped at the firewall (not seeing drops in logs). What is the solution to troubleshoot the issue?

run fw unloadlocal” on the relevant gateway and check the ping again

run “cpstop” on the relevant gateway and check the ping again

run ”fw log” on the relevant gateway

run ”fw ctl zdebug drop” on the relevant gateway

Q238. What are the two high availability modes?

Load Sharing and Legacy

Traditional and New

Active and Standby

New and Legacy

ClusterXL has four working modes. This section briefly describes each mode and its relative advantages and disadvantages.

Q239. How many policy layers do Access Control policy support?

Two policy layers:
– Network Policy Layer
– Application Control Policy Layer

Q240. Which statement is correct about the Sticky Decision Function?

It is not supported with either the Performance pack of a hardware based accelerator card

Does not support SPI’s when configured for Load Sharing

It is automatically disabled if the Mobile Access Software Blade is enabled on the cluster

It is not required L2TP traffic

Q241. What is the least amount of CPU cores required to enable CoreXL?

Q242. After trust has been established between the Check Point components, what is TRUE about name and IP-address changes?

Security Gateway IP-address cannot be changed without re-establishing the trust.

The Security Gateway name cannot be changed in command line without re-establishing trust.

The Security Management Server name cannot be changed in SmartConsole without re-establishing trust.

The Security Management Server IP-address cannot be changed without re-establishing the trust.

Loading …

2022 New Preparation Guide of CheckPoint 156-315.81 Exam: https://www.examcollectionpass.com/CheckPoint/156-315.81-practice-exam-dumps.html

For more information about the CheckPoint 156-315.81 Exam visit the following reference link:

Leave a Reply Cancel reply