[May 30, 2023] Dumps Collection 156-315.80 Test Engine Dumps Training With 465 Questions [Q38-Q54]

4.7/5 - (9 votes)

[May 30, 2023] Dumps Collection 156-315.80 Test Engine Dumps Training With 465 Questions

CheckPoint 156-315.80 Dumps – 100% Cover Real Exam Questions

QUESTION 38
To add a file to the Threat Prevention Whitelist, what two items are needed?

File name and Gateway

Object Name and MD5 signature

MD5 signature and Gateway

IP address of Management Server and Gateway

QUESTION 39
The essential means by which state synchronization works to provide failover in the event an active member goes down, ____________ is used specifically for clustered environments to allow gateways to report their own state and learn about the states of other members in the cluster.

ccp

cphaconf

cphad

cphastart

QUESTION 40
What is the mechanism behind Threat Extraction?

This a new mechanism which extracts malicious files from a document to use it as a counter-attack against its sender.

This is a new mechanism which is able to collect malicious files out of any kind of file types to destroy it prior to sending it to the intended recipient.

This is a new mechanism to identify the IP address of the sender of malicious codes and put it into the SAM database (Suspicious Activity Monitoring).

Any active contents of a document, such as JavaScripts, macros and links will be removed from the document and forwarded to the intended recipient, which makes this solution very fast.

QUESTION 41
To ensure that VMAC mode is enabled, which CLI command should you run on all cluster members?

fw ctl set int fwha vmac global param enabled

fw ctl get int vmac global param enabled; result of command should return value 1

cphaprob-a if

fw ctl get int fwha_vmac_global_param_enabled; result of command should return value 1

QUESTION 42
With Mobile Access enabled, administrators select the web-based and native applications that can be accessed by remote users and define the actions that users can perform the applications. Mobile Access encrypts all traffic using:

HTTPS for web-based applications and 3DES or RC4 algorithm for native applications. For end users to access the native applications, they need to install the SSL Network Extender.

HTTPS for web-based applications and AES or RSA algorithm for native applications. For end users to access the native application, they need to install the SSL Network Extender.

HTTPS for web-based applications and 3DES or RC4 algorithm for native applications. For end users to access the native applications, no additional software is required.

HTTPS for web-based applications and AES or RSA algorithm for native applications. For end users to access the native application, no additional software is required.

QUESTION 43
Which is the least ideal Synchronization Status for Security Management Server High Availability deployment?

Synchronized

Never been synchronized

Lagging

Collision

QUESTION 44
Which Check Point software blades could be enforced under Threat Prevention profile using Check Point
R80.10 SmartConsole application?

IPS, Anti-Bot, URL Filtering, Application Control, Threat Emulation.

Firewall, IPS, Threat Emulation, Application Control.

IPS, Anti-Bot, Anti-Virus, Threat Emulation, Threat Extraction.

Firewall, IPS, Anti-Bot, Anti-Virus, Threat Emulation.

QUESTION 45
What is the purpose of the CPCA process?

Monitoring the status of processes.

Sending and receiving logs.

Communication between GUI clients and the SmartCenter server.

Generating and modifying certificates.

QUESTION 46
In SmartEvent, what are the different types of automatic reactions that the administrator can configure?

Mail, Block Source, Block Event Activity, External Script, SNMP Trap

Mail, Block Source, Block Destination, Block Services, SNMP Trap

Mail, Block Source, Block Destination, External Script, SNMP Trap

Mail, Block Source, Block Event Activity, Packet Capture, SNMP Trap

QUESTION 47
Fill in the blank: The R80 utility fw monitor is used to troubleshoot ______________________.

User data base corruption

LDAP conflicts

Traffic issues

Phase two key negotiations

QUESTION 48
Which VPN routing option uses VPN routing for every connection a satellite gateway handles?

To satellites through center only

To center only

To center and to other satellites through center

To center, or through the center to other satellites, to Internet and other VPN targets

QUESTION 49
What are the two high availability modes?

Load Sharing and Legacy

Traditional and New

Active and Standby

New and Legacy
ClusterXL has four working modes. This section briefly describes each mode and its relative advantages and disadvantages.

QUESTION 50
Full synchronization between cluster members is handled by Firewall kernel. Which port is used for this?

UDP port 265

TCP port 265

UDP port 256

TCP port 256

QUESTION 51
What has to be taken into consideration when configuring Management HA?

The Database revisions will not be synchronized between the management servers

SmartConsole must be closed prior to synchronized changes in the objects database

If you wanted to use Full Connectivity Upgrade, you must change the Implied Rules to allow FW1_cpredundant to pass before the Firewall Control Connections.

For Management Server synchronization, only External Virtual Switches are supported. So, if you wanted to employ Virtual Routers instead, you have to reconsider your design.

QUESTION 52
Customer’s R80 management server needs to be upgraded to R80.10. What is the best upgrade method when the management server is not connected to the Internet?

Export R80 configuration, clean install R80.10 and import the configuration

CPUSE offline upgrade

CPUSE online upgrade

SmartUpdate upgrade

QUESTION 53
You are investigating issues with to gateway cluster members are not able to establish the first initial cluster synchronization. What service is used by the FWD deamon to do a Full synchronization?

TCP port 443

TCP port 257

TCP port 256

UDP port 8116

QUESTION 54
Check Point APIs allow system engineers and developers to make changes to their organization’s security policy with CLI tools and Web Services for all the following except:

Create new dashboards to manage 3rd party task

Create products that use and enhance 3rd party solutions

Execute automated scripts to perform common tasks

Create products that use and enhance the Check Point Solution