A Review Of Download 156-315.80 Test

NEW QUESTION 1
Which of the following blades is NOT subscription-based and therefore does not have to be renewed on a regular basis?

• A. Application Control
• B. Threat Emulation
• C. Anti-Virus
• D. Advanced Networking Blade

Answer: B

NEW QUESTION 2
The system administrator of a company is trying to find out why acceleration is not working for the traffic. The traffic is allowed according to the rule base and checked for viruses. But it is not accelerated.
What is the most likely reason that the traffic is not accelerated?

• A. There is a virus foun
• B. Traffic is still allowed but not accelerated.
• C. The connection required a Security server.
• D. Acceleration is not enabled.
• E. The traffic is originating from the gateway itself.

Answer: D

NEW QUESTION 3
Fill in the blank: The “fw monitor” tool can be best used to troubleshoot _______.

• A. AV issues
• B. VPN errors
• C. Network issues
• D. Authentication issues

Answer: C

NEW QUESTION 4
Which command would you use to set the network interfaces’ affinity in Manual mode?

• A. sim affinity -m
• B. sim affinity -l
• C. sim affinity -a
• D. sim affinity -s

Answer: D

NEW QUESTION 5
With Mobile Access enabled, administrators select the web-based and native applications that can be accessed by remote users and define the actions that users can perform the applications. Mobile Access encrypts all traffic using:

• A. HTTPS for web-based applications and 3DES or RC4 algorithm for native application
• B. For end users to access the native applications, they need to install the SSL Network Extender.
• C. HTTPS for web-based applications and AES or RSA algorithm for native application
• D. For end users to access the native application, they need to install the SSL Network Extender.
• E. HTTPS for web-based applications and 3DES or RC4 algorithm for native application
• F. For end users to access the native applications, no additional software is required.
• G. HTTPS for web-based applications and AES or RSA algorithm for native application
• H. For end users to access the native application, no additional software is required.

Answer: A

NEW QUESTION 6
In SmartConsole, objects are used to represent physical and virtual network components and also some logical components. These objects are divided into several categories. Which of the following is NOT an objects category?

• A. Limit
• B. Resource
• C. Custom Application / Site
• D. Network Object

Answer: B

NEW QUESTION 7
SmartConsole R80 requires the following ports to be open for SmartEvent R80 management:

• A. 19090,22
• B. 19190,22
• C. 18190,80
• D. 19009,443

Answer: D

NEW QUESTION 8
What is the purpose of Priority Delta in VRRP?

• A. When a box up, Effective Priority = Priority + Priority Delta
• B. When an Interface is up, Effective Priority = Priority + Priority Delta
• C. When an Interface fail, Effective Priority = Priority – Priority Delta
• D. When a box fail, Effective Priority = Priority – Priority Delta

Answer: C

Explanation:
Each instance of VRRP running on a supported interface may monitor the link state of other interfaces. The monitored interfaces do not have to be running VRRP.
If a monitored interface loses its link state, then VRRP will decrement its priority over a VRID by the specified delta value and then will send out a new VRRP HELLO packet. If the new effective priority is less than the priority a backup platform has, then the backup platform will beging to send out its own HELLO packet.
Once the master sees this packet with a priority greater than its own, then it releases the VIP. References:

NEW QUESTION 9
Which statement is correct about the Sticky Decision Function?

• A. It is not supported with either the Performance pack of a hardware based accelerator card
• B. Does not support SPI’s when configured for Load Sharing
• C. It is automatically disabled if the Mobile Access Software Blade is enabled on the cluster
• D. It is not required L2TP traffic

Answer: A

NEW QUESTION 10
What is the most recommended way to install patches and hotfixes?

• A. CPUSE Check Point Update Service Engine
• B. rpm -Uv
• C. Software Update Service
• D. UnixinstallScript

Answer: A

NEW QUESTION 11
Vanessa is firewall administrator in her company. Her company is using Check Point firewall on a central and several remote locations which are managed centrally by R77.30 Security Management Server. On central location is installed R77.30 Gateway on Open server. Remote locations are using Check Point UTM-1570 series appliances with R75.30 and some of them are using a UTM-1-Edge-X or Edge-W with latest available firmware. She is in process of migrating to R80.
What can cause Vanessa unnecessary problems, if she didn’t check all requirements for migration to R80?

• A. Missing an installed R77.20 Add-on on Security Management Server
• B. Unsupported firmware on UTM-1 Edge-W appliance
• C. Unsupported version on UTM-1 570 series appliance
• D. Unsupported appliances on remote locations

Answer: A

NEW QUESTION 12
Which option, when applied to a rule, allows traffic to VPN gateways in specific VPN communities?

• A. All Connections (Clear or Encrypted)
• B. Accept all encrypted traffic
• C. Specific VPN Communities
• D. All Site-to-Site VPN Communities

Answer: B

NEW QUESTION 13
To enable Dynamic Dispatch on Security Gateway without the Firewall Priority Queues, run the following command in Expert mode and reboot:

• A. fw ctl Dyn_Dispatch on
• B. fw ctl Dyn_Dispatch enable
• C. fw ctl multik set_mode 4
• D. fw ctl multik set_mode 1

Answer: C

NEW QUESTION 14
What will SmartEvent automatically define as events?

• A. Firewall
• B. VPN
• C. IPS
• D. HTTPS

Answer: C

NEW QUESTION 15
Joey want to configure NTP on R80 Security Management Server. He decided to do this via WebUI. What is the correct address to access the Web UI for Gaia platform via browser?

• A. https://<Device_IP_Adress>
• B. http://<Device IP_Address>:443
• C. https://<Device_IP_Address>:10000
• D. https://<Device_IP_Address>:4434

Answer: A

NEW QUESTION 16
......