156-315.81 Exam - Check Point Certified Security Expert R81

NEW QUESTION 1

Traffic from source 192.168.1.1 is going to www.google.com. The Application Control Blade on the gateway is inspecting the traffic. Assuming acceleration is enabled which path is handling the traffic?

• A. Slow Path
• B. Medium Path
• C. Fast Path
• D. Accelerated Path

Answer: A

NEW QUESTION 2

Which Check Point feature enables application scanning and the detection?

• A. Application Dictionary
• B. AppWiki
• C. Application Library
• D. CPApp

Answer: B

NEW QUESTION 3

SandBlast has several functional components that work together to ensure that attacks are prevented in real-time. Which the following is NOT part of the SandBlast component?

• A. Threat Emulation
• B. Mobile Access
• C. Mail Transfer Agent
• D. Threat Cloud

Answer: B

NEW QUESTION 4

As an administrator, you may be required to add the company logo to reports. To do this, you would save the logo as a PNG file with the name ‘cover-company-logo.png’ and then copy that image file to which directory on the SmartEvent server?

• A. SFWDIR/smartevent/conf
• B. $RTDIR/smartevent/conf
• C. $RTDIR/smartview/conf
• D. $FWDIR/smartview/conf

Answer: C

NEW QUESTION 5

Fill in the blank: The “fw monitor” tool can be best used to troubleshoot ______.

• A. AV issues
• B. VPN errors
• C. Network traffic issues
• D. Authentication issues

Answer: C

Explanation:
https://supportcenter.checkpoint.com/supportcenter/portal? eventSubmit_doGoviewsolutiondetails=&solutionid=sk30583

NEW QUESTION 6

You want to verify if your management server is ready to upgrade to R81.10. What tool could you use in this process?

• A. migrate export
• B. upgrade_tools verify
• C. pre_upgrade_verifier
• D. migrate import

Answer: C

NEW QUESTION 7

Which firewall daemon is responsible for the FW CLI commands?

• A. fwd
• B. fwm
• C. cpm
• D. cpd

Answer: A

NEW QUESTION 8

To fully enable Dynamic Dispatcher on a Security Gateway:

• A. run fw ctl multik set_mode 9 in Expert mode and then Reboot.
• B. Using cpconfig, update the Dynamic Dispatcher value to “full” under the CoreXL menu.
• C. Edit/proc/interrupts to include multik set_mode 1 at the bottom of the file, save, and reboot.
• D. run fw multik set_mode 1 in Expert mode and then reboot.

Answer: A

NEW QUESTION 9

What CLI utility runs connectivity tests from a Security Gateway to an AD domain controller?

• A. test_connectivity_ad –d <domain>
• B. test_ldap_connectivity –d <domain>
• C. test_ad_connectivity –d <domain>
• D. ad_connectivity_test –d <domain>

Answer: C

Explanation:
https://sc1.checkpoint.com/documents/R81.30/WebAdminGuides/EN/ CP_R81.30_CLI_ReferenceGuide/html_frameset.htm?topic=documents/R81.30/WebAdminGuides/EN/ CP_R81.30_CLI_ReferenceGuide/200877

NEW QUESTION 10

What needs to be configured if the NAT property ‘Translate destination or client side’ is not enabled in Global Properties?

• A. A host route to route to the destination IP.
• B. Use the file local.arp to add the ARP entries for NAT to work.
• C. Nothing, the Gateway takes care of all details necessary.
• D. Enabling ‘Allow bi-directional NAT’ for NAT to work correctly.

Answer: C

NEW QUESTION 11

Which process is available on any management product and on products that require direct GUI access, such as SmartEvent and provides GUI client communications, database manipulation, policy compilation and Management HA synchronization?

• A. cpwd
• B. fwd
• C. cpd
• D. fwm

Answer: D

Explanation:
Firewall Management (fwm) is available on any management product, including Multi-Domain and on products that requite direct GUI access, such as SmartEvent, It provides the following:
– GUI Client communication
– Database manipulation
– Policy Compilation
– Management HA sync

NEW QUESTION 12

NAT rules are prioritized in which order?
* 1. Automatic Static NAT
* 2. Automatic Hide NAT
* 3. Manual/Pre-Automatic NAT
* 4. Post-Automatic/Manual NAT rules

• A. 1, 2, 3, 4
• B. 1, 4, 2, 3
• C. 3, 1, 2, 4
• D. 4, 3, 1, 2

Answer: A

NEW QUESTION 13

The admin lost access to the Gaia Web Management Interface but he was able to connect via ssh. How can you check if the web service is enabled, running and which port is used?

• A. In expert mode run #netstat -tulnp | grep httpd to see if httpd is up and to get the port numbe
• B. In dish run >show web daemon-enable to see if the web daemon is enabled.
• C. In dish run >show web ssl-port to see if the web daemon is enabled and which port is in us
• D. In expert mode run #netstat -anp | grep httpd to see if the httpd is up
• E. In dish run >show web ssl-port to see if the web daemon is enabled and which port is in us
• F. In expert mode run #netstat -anp | grep httpd2 to see if the httpd2 is up
• G. In expert mode run #netstat -tulnp | grep httpd2 to see if httpd2 is up and to get the port numbe
• H. In dish run >show web daemon-enable to see if the web daemon is enabled.

Answer: C

NEW QUESTION 14

Which member of a high-availability cluster should be upgraded first in a Zero downtime upgrade?

• A. The Standby Member
• B. The Active Member
• C. The Primary Member
• D. The Secondary Member

Answer: A

NEW QUESTION 15

Selecting an event displays its configurable properties in the Detail pane and a description of the event in the Description pane. Which is NOT an option to adjust or configure?

• A. Severity
• B. Automatic reactions
• C. Policy
• D. Threshold

Answer: C

NEW QUESTION 16

What key is used to save the current CPView page in a filename format cpview_”cpview process ID”.cap”number of captures”?

• A. S
• B. W
• C. C
• D. Space bar

Answer: C

NEW QUESTION 17

What is the amount of Priority Queues by default?

• A. There are 8 priority queues and this number cannot be changed.
• B. There is no distinct number of queues since it will be changed in a regular basis based on its system requirements.
• C. There are 7 priority queues by default and this number cannot be changed.
• D. There are 8 priority queues by default, and up to 8 additional queues can be manually configured

Answer: D

NEW QUESTION 18
......