[Jan 22, 2022] New Updated 156-315.80 Exam Questions 2022
Updated Free CheckPoint 156-315.80 Test Engine Questions with 457 Q&As
Check Point Certified Security Expert - R80 156-315.80 Exam
Check Point Certified Security Expert - R80 156-315.80 Exam is related to Check Point Certified Security Expert Certification.156-215.80 Exam test candidates skills to build, modify, deploy and troubleshoot Check Point Security Systems on the GAIA Operating System, This exam also verify the candidate have the knowledge to debug Firewall Processes, Optimize VPN Performance and Upgrade Management Servers. System Security Consultant and Server Managers usually hold or pursue this certification and candidate can expect the same job roles after completion of this certification.
NEW QUESTION 188
SSL Network Extender (SNX) is a thin SSL VPN on-demand client that is installed on the remote user's
machine via the web browser. What are the two modes of SNX?
- A. Network and Layers
- B. Virtual Adapter and Mobile App
- C. Application and Client Service
- D. Network and Application
Answer: D
NEW QUESTION 189
With Mobile Access enabled, administrators select the web-based and native applications that can be accessed by remote users and define the actions that users can perform the applications. Mobile Access encrypts all traffic using:
- A. HTTPS for web-based applications and 3DES or RC4 algorithm for native applications. For end users to access the native applications, they need to install the SSL Network Extender.
- B. HTTPS for web-based applications and AES or RSA algorithm for native applications. For end users to access the native application, they need to install the SSL Network Extender.
- C. HTTPS for web-based applications and AES or RSA algorithm for native applications. For end users to access the native application, no additional software is required.
- D. HTTPS for web-based applications and 3DES or RC4 algorithm for native applications. For end users to access the native applications, no additional software is required.
Answer: A
Explanation:
Explanation/Reference: https://sc1.checkpoint.com/documents/R76/CP_R76_Mobile_Access_WebAdmin/23024.htm
NEW QUESTION 190
Check point recommends configuring Disk Management parameters to delete old log available disk space is less than or equal to?
- A. 50%
- B. 75%
- C. 45%
- D. 80%
Answer: A
NEW QUESTION 191
If there are two administration logged in at the same time to the SmartConsole, and there are objects locked for editing, what must be done to make them available or other administrators? (Choose the BEST answer.)
- A. Save and install the Policy.
- B. Delete older versions of database.
- C. Revert the session.
- D. Publish or discard the session.
Answer: D
Explanation:
References:
NEW QUESTION 192
Fill in the blank: A ________ VPN deployment is used to provide remote users with secure access to internal corporate resources by authenticating the user through an internet browser.
- A. Clientless direct access
- B. Client-based remote access
- C. Clientless remote access
- D. Direct access
Answer: C
Explanation:
Explanation/Reference:
Reference: https://sc1.checkpoint.com/documents/R80/CP_R80BC_Firewall/html_frameset.htm?
topic=documents/R80/CP_R80BC_Firewall/92704
NEW QUESTION 193
Using ClusterXL, what statement is true about the Sticky Decision Function?
- A. Is configured using cpconfig
- B. All connections are processed and synchronized by the pivot
- C. Is only relevant when using SecureXL
- D. Can only be changed for Load Sharing implementations
Answer: D
NEW QUESTION 194
In Logging and Monitoring, the tracking options are Log, Detailed Log and Extended Log. Which of the following options can you add to each Log, Detailed Log and Extended Log?
- A. Suppression
- B. Accounting
- C. Accounting/Extended
- D. Accounting/Suppression
Answer: D
Explanation:
Explanation/Reference: https://sc1.checkpoint.com/documents/R80/CP_R80_LoggingAndMonitoring/html_frameset.htm?
topic=documents/R80/CP_R80_LoggingAndMonitoring/131914
NEW QUESTION 195
Which packet info is ignored with Session Rate Acceleration?
- A. source port
- B. source port ranges
- C. source ip
- D. same info from Packet Acceleration is used
Answer: A
NEW QUESTION 196
What SmartEvent component creates events?
- A. Correlation Unit
- B. Consolidation Policy
- C. SmartEvent GUI
- D. SmartEvent Policy
Answer: A
NEW QUESTION 197
What are the three components for Check Point Capsule?
- A. Capsule Workspace, Capsule Docs, Capsule Cloud
- B. Capsule Workspace, Capsule Cloud, Capsule Connect
- C. Capsule Docs, Capsule Cloud, Capsule Connect
- D. Capsule Workspace, Capsule Docs, Capsule Connect
Answer: A
Explanation:
Reference: https://www.checkpoint.com/products-solutions/mobile-security/check-point-capsule/
NEW QUESTION 198
ESTION NO: 255
Which NAT rules are prioritized first?
- A. Automatic Hide NAT
- B. Post-Automatic/Manual NAT rules
- C. Automatic Static NAT
- D. Manual/Pre-Automatic NAT
Answer: D
NEW QUESTION 199
As a valid Mobile Access Method, what feature provides Capsule Connect/VPN?
- A. That is used to deploy the mobile device as a generator of one-time passwords for authenticating to an
RSA Authentication Manager. - B. You can make sure that documents are sent to the intended recipients only.
- C. Fill Layer4 VPN -SSL VPN that gives users network access to all mobile applications.
- D. Full Layer3 VPN -IPSec VPN that gives users network access to all mobile applications.
Answer: D
NEW QUESTION 200
When using CPSTAT, what is the default port used by the AMON server?
- A. 0
- B. 1
- C. 2
- D. 3
Answer: D
Explanation:
References:
NEW QUESTION 201
When requiring certificates for mobile devices, make sure the authentication method is set to one of the following, Username and Password, RADIUS or _______.
- A. Complexity
- B. SecurID
- C. SecureID
- D. TacAcs
Answer: B
Explanation:
Reference:
https://sc1.checkpoint.com/documents/R77/CP_R77_Mobile_Access_WebAdmin/41587.ht m
NEW QUESTION 202
Which is not a blade option when configuring SmartEvent?
- A. SmartEvent Server
- B. Correlation Unit
- C. Log Server
- D. SmartEvent Unit
Answer: D
Explanation:
On the Management tab, enable these Software Blades:
NEW QUESTION 203
As an administrator, you may be required to add the company logo to reports. To do this, you would save the logo as a PNG file with the name 'cover-company-logo.png' and then copy that image file to which directory on the SmartEvent server?
- A. $RTDIR/smartevent/conf
- B. $FWDIR/smartview/conf
- C. SFWDIR/smartevent/conf
- D. $RTDIR/smartview/conf
Answer: D
NEW QUESTION 204
SSL Network Extender (SNX) is a thin SSL VPN on-demand client that is installed on the remote user's machine via the web browser. What are the two modes of SNX?
- A. Network and Layers
- B. Virtual Adapter and Mobile App
- C. Application and Client Service
- D. Network and Application
Answer: D
Explanation:
Reference: https://supportcenter.checkpoint.com/supportcenter/portal?
eventSubmit_doGoviewsolutiondetails=&solutionid=sk67820
NEW QUESTION 205
Which of the following authentication methods ARE NOT used for Mobile Access?
- A. RADIUS server
- B. SecurID
- C. TACACS+
- D. Username and password (internal, LDAP)
Answer: C
Explanation:
References:
NEW QUESTION 206
What is the command to check the status of the SmartEvent Correlation Unit?
- A. fw ctl stat cpsemd
- B. cpstat cpsead
- C. cp_conf get_stat cpsemd
- D. fw ctl get int cpsead_stat
Answer: B
Explanation:
References:
NEW QUESTION 207
Fill in the blanks. There are ________ types of software containers: ___________.
- A. Two; endpoint security and Security Gateway
- B. Two; security management and endpoint security
- C. Three; Security Gateway, endpoint security, and gateway management
- D. Three; security management, Security Gateway, and endpoint security
Answer: D
Explanation:
References:
NEW QUESTION 208
Fill in the blank: The R80 utility fw monitor is used to troubleshoot ________.
- A. Traffic issues
- B. User data base corruption
- C. Phase two key negotiations
- D. LDAP conflicts
Answer: A
Explanation:
Explanation
Check Point's FW Monitor is a powerful built-in tool for capturing network traffic at the packet level. The FW Monitor utility captures network packets at multiple capture points along the FireWall inspection chains.
These captured packets can be inspected later using the WireShark
NEW QUESTION 209
What command verifies that the API server is responding?
- A. api status
- B. app_get_status
- C. show api_status
- D. api stat
Answer: A
NEW QUESTION 210
SecureXL improves non-encrypted firewall traffic throughput and encrypted VPN traffic throughput.
- A. This statement is false because encrypted traffic cannot be inspected.
SecureXL improved non-encrypted firewall traffic throughput, and encrypted VPN traffic throughput, by nearly an order-of-magnitude- particularly for small packets flowing in long duration connections. - B. This statement is true because SecureXL does improve this traffic.
- C. This statement is true because SecureXL does improve all traffic.
- D. This statement is false because SecureXL does not improve this traffic but CoreXL does.
Answer: B
NEW QUESTION 211
The Check Point history feature in R80 provides the following:
- A. View install changes and install specific version
- B. Policy Installation Date, view install changes and install specific version
- C. View install changes
- D. Policy Installation Date only
Answer: B
Explanation:
References:
NEW QUESTION 212
......
Try 100% Updated 156-315.80 Exam Questions [2022]: https://www.vceprep.com/156-315.80-latest-vce-prep.html