Improve 156-315.80 Exam Guide For Check Point Certified Security Expert - R80 Certification

NEW QUESTION 1
What is true of the API server on R80.10?

• A. By default the API-server is activated and does not have hardware requirements.
• B. By default the API-server is not active and should be activated from the WebUI.
• C. By default the API server is active on management and stand-alone servers with 16GB of RAM (or more).
• D. By default, the API server is active on management servers with 4 GB of RAM (or more) and on stand-alone servers with 8GB of RAM (or more).

Answer: D

NEW QUESTION 2
When requiring certificates for mobile devices, make sure the authentication method is set to one of the following, Username and Password, RADIUS or _____.

• A. SecureID
• B. SecurID
• C. Complexity
• D. TacAcs

Answer: B

NEW QUESTION 3
Which process handles connection from SmartConsole R80?

• A. fwm
• B. cpmd
• C. cpm
• D. cpd

Answer: C

NEW QUESTION 4
In R80.10, how do you manage your Mobile Access Policy?

• A. Through the Unified Policy
• B. Through the Mobile Console
• C. From SmartDashboard
• D. From the Dedicated Mobility Tab

Answer: A

NEW QUESTION 5
What statement best describes the Proxy ARP feature for Manual NAT in R80.10?

• A. Automatic proxy ARP configuration can be enabled
• B. Translate Destination on Client Side should be configured
• C. fw ctl proxy should be configured
• D. local.arp file must always be configured

Answer: D

NEW QUESTION 6
What is UserCheck?

• A. Messaging tool used to verify a user’s credentials.
• B. Communication tool used to inform a user about a website or application they are trying to access.
• C. Administrator tool used to monitor users on their network.
• D. Communication tool used to notify an administrator when a new user is created.

Answer: B

NEW QUESTION 7
In the Check Point Firewall Kernel Module, each Kernel is associated with a key, which specifies the type of traffic applicable to the chain module. For Wire Mode configuration, chain modules marked with _______ will not apply.

• A. ffff
• B. 1
• C. 2
• D. 3

Answer: B

NEW QUESTION 8
John detected high load on sync interface. Which is most recommended solution?

• A. For short connections like http service – delay sync for 2 seconds
• B. Add a second interface to handle sync traffic
• C. For short connections like http service – do not sync
• D. For short connections like icmp service – delay sync for 2 seconds

Answer: A

NEW QUESTION 9
Sticky Decision Function (SDF) is required to prevent which of the following? Assume you set up an Active-Active cluster.

• A. Symmetric routing
• B. Failovers
• C. Asymmetric routing
• D. Anti-Spoofing

Answer: C

NEW QUESTION 10
You find one of your cluster gateways showing “Down” when you run the “cphaprob stat” command. You then run the “clusterXL_admin up” on the down member but unfortunately the member continues to show down. What command do you run to determine the cause?

• A. cphaprob –f register
• B. cphaprob –d –s report
• C. cpstat –f all
• D. cphaprob –a list

Answer: D

NEW QUESTION 11
NAT rules are prioritized in which order?
1. Automatic Static NAT
2. Automatic Hide NAT
3. Manual/Pre-Automatic NAT
4. Post-Automatic/Manual NAT rules

• A. 1, 2, 3, 4
• B. 1, 4, 2, 3
• C. 3, 1, 2, 4
• D. 4, 3, 1, 2

Answer: A

NEW QUESTION 12
When gathering information about a gateway using CPINFO, what information is included or excluded when using the “-x” parameter?

• A. Includes the registry
• B. Gets information about the specified Virtual System
• C. Does not resolve network addresses
• D. Output excludes connection table

Answer: B

NEW QUESTION 13
You need to change the MAC-address on eth2 interface of the gateway. What command and what mode will you use to achieve this goal?

• A. set interface eth2 mac-addr 11:11:11:11:11:11; CLISH
• B. ifconfig eth1 hw 11:11:11:11:11:11; expert
• C. set interface eth2 hw-addr 11:11:11:11:11:11; CLISH
• D. ethtool -i eth2 mac 11:11:11:11:11:11; expert

Answer: A

NEW QUESTION 14
Check Point recommends configuring Disk Space Management parameters to delete old log entries when available disk space is less than or equal to?

• A. 50%
• B. 75%
• C. 80%
• D. 15%

Answer: D

NEW QUESTION 15
With MTA (Mail Transfer Agent) enabled the gateways manages SMTP traffic and holds external email with potentially malicious attachments. What is required in order to enable MTA (Mail Transfer Agent) functionality in the Security Gateway?

• A. Threat Cloud Intelligence
• B. Threat Prevention Software Blade Package
• C. Endpoint Total Protection
• D. Traffic on port 25

Answer: B

NEW QUESTION 16
......