View All 156-315.81.20 Actual Free Exam Questions Aug 15, 2024 Updated [Q204-Q226]

Rate this post

View All 156-315.81.20 Actual Free Exam Questions Aug 15, 2024 Updated

Pass Authentic CheckPoint 156-315.81.20 with Free Practice Tests and Exam Dumps

NEW QUESTION 204
Which one of these features is NOT associated with the Check Point URL Filtering and Application Control Blade?

Detects and blocks malware by correlating multiple detection engines before users are affected.

Configure rules to limit the available network bandwidth for specified users or groups.

Use UserCheck to help users understand that certain websites are against the company’s security policy.

Make rules to allow or block applications and Internet sites for individual applications, categories, and risk levels.

NEW QUESTION 205
Which of the following statements about SecureXL NAT Templates is true?

NAT Templates are generated to achieve high session rate for NAT. These templates store the NAT attributes of connections matched by rulebase so that similar new connections can take advantage of this information and do NAT without the expensive rulebase lookup. These are enabled by default and work only if Accept Templates are enabled.

DROP Templates are generated to achieve high session rate for NAT. These templates store the NAT attributes of connections matched by rulebase so that similar new connections can take advantage of this information and do NAT without the expensive rulebase lookup. These are disabled by default and work only if NAT Templates are disabled.

NAT Templates are generated to achieve high session rate for NAT. These templates store the NAT attributes of connections matched by rulebase so that similar new connections can take advantage of this information and do NAT without the expensive rulebase lookup. These are disabled by default and work only if Accept Templates are disabled.

ACCEPT Templates are generated to achieve high session rate for NAT. These templates store the NAT attributes of connections matched by rulebase so that similar new connections can take advantage of this information and do NAT without the expensive rulebase lookup. These are disabled by default and work only if NAT Templates are disabled.

NEW QUESTION 206
What is mandatory for ClusterXL to work properly?

The number of cores must be the same on every participating cluster node

The Magic MAC number must be unique per cluster node

The Sync interface must not have an IP address configured

If you have “Non-monitored Private” interfaces, the number of those interfaces must be the same on all cluster members

NEW QUESTION 207
You plan to automate creating new objects using new R81 Management API. You decide to use GAIA CLI for this task.
What is the first step to run management API commands on GAIA’s shell?

mgmt_admin@teabag > id.txt

mgmt_login

mgmt_cli login user “admin” password “teabag” > id.txt

NEW QUESTION 208
By default, the R81 web API uses which content-type in its response?

Java Script

XML

Text

JSON

NEW QUESTION 209
Hit Count is a feature to track the number of connections that each rule matches, which one is not benefit of Hit Count.

Better understand the behavior of the Access Control Policy

Improve Firewall performance – You can move a rule that has hot count to a higher position in the Rule Base

Automatically rearrange Access Control Policy based on Hit Count Analysis

Analyze a Rule Base – You can delete rules that have no matching connections

NEW QUESTION 210
You want to gather and analyze threats to your mobile device. It has to be a lightweight app.
Which application would you use?

SmartEvent Client Info

SecuRemote

Check Point Protect

Check Point Capsule Cloud

NEW QUESTION 211
In Threat Prevention, you can create new or clone profiles but you CANNOT change the out-of-the-box profiles of:

Basic, Optimized, Strict

Basic, Optimized, Severe

General, Escalation, Severe

General, purposed, Strict

NEW QUESTION 212
In order for changes made to policy to be enforced by a Security Gateway, what action must an administrator perform?

Publish changes

Save changes

Install policy

Install database

NEW QUESTION 213
You have enabled “Full Log” as a tracking option to a security rule. However, you are still not seeing any data type information.
What is the MOST likely reason?

Logging has disk space issues. Change logging storage options on the logging server or Security Management Server properties and install database.

Data Awareness is not enabled.

Identity Awareness is not enabled.

Logs are arriving from Pre-R81 gateways.

NEW QUESTION 214
What does Backward Compatibility mean upgrading the Management Server and how can you check it?

The Management Server is able to manage older Gateways. The lowest supported version is documented in the Installation and Upgrade Guide

The Management Server is able to manage older Gateways The lowest supported version is documented in the Release Notes

You will be able to connect to older Management Server with the SmartConsole. The lowest supported version is documented in the Installation and Upgrade Guide

You will be able to connect to older Management Server with the SmartConsole The lowest supported version is documented in the Release Notes

NEW QUESTION 215
In a Client to Server scenario, which inspection point is the first point immediately following the tables and rule base check of a packet coming from outside of the network?

Big l

Little o

Little i

Big O

NEW QUESTION 216
Which of the following statements is TRUE about R81 management plug-ins?

The plug-in is a package installed on the Security Gateway.

Installing a management plug-in requires a Snapshot, just like any upgrade process.

A management plug-in interacts with a Security Management Server to provide new features and support for new products.

Using a plug-in offers full central management only if special licensing is applied to specific features of the plug-in.

NEW QUESTION 217
Which of the following is a task of the CPD process?

Invoke and monitor critical processes and attempts to restart them if they fail

Transfers messages between Firewall processes

Log forwarding

Responsible for processing most traffic on a security gateway

NEW QUESTION 218
What are the two types of tests when using the Compliance blade?

Policy-based tests and Global properties

Global tests and Object-based tests

Access Control policy analysis and Threat Prevention policy analysis

Tests conducted based on the loC XMfcfile and analysis of SOLR documents

NEW QUESTION 219
Fill in the blank: The R81 SmartConsole, SmartEvent GUI client, and _______ consolidate billions of
logs and shows then as prioritized security events.

SmartMonitor

SmartView Web Application

SmartReporter

SmartTracker

NEW QUESTION 220
If there are two administration logged in at the same time to the SmartConsole, and there are objects locked for editing, what must be done to make them available or other administrators? (Choose the BEST answer.)

Publish or discard the session.

Revert the session.

Save and install the Policy.

Delete older versions of database.

NEW QUESTION 221
Due to high CPU workload on the Security Gateway, the security administrator decided to purchase a new multicore CPU to replace the existing single core CPU.
After installation, is the administrator required to perform any additional tasks?

Run cprestart from clish

After upgrading the hardware, increase the number of kernel instances using cpconfig

Administrator does not need to perform any task. Check Point will make use of the newly installed CPU and Cores

Hyperthreading must be enabled in the bios to use CoreXL

NEW QUESTION 222
Which utility allows you to configure the DHCP service on Gaia from the command line?

ifconfig

dhcp_ofg

sysconfig

cpconfig

NEW QUESTION 223
What could NOT be a reason for synchronization issues in a Management HA environment?

Accidentally, you have configured unique IP addresses per Management Server which invalidates the CA Certificate

There is a network connectivity failure between the servers