100% Free 156-315.81 Exam Dumps to Pass Exam Easily from ValidBraindumps [Q76-Q98]

Rate this post

100% Free 156-315.81 Exam Dumps to Pass Exam Easily from ValidBraindumps

Free 156-315.81 Exam Questions 156-315.81 Actual Free Exam Questions

CheckPoint 156-315.81 Exam Syllabus Topics:

Section	Weight	Objectives
Topic 1: Performance Tuning & Optimization	10%	– Multi-Queue and traffic processing – Gateway performance monitoring – SecureXL and CoreXL acceleration
Topic 2: High Availability & Clustering	15%	– ClusterXL configuration and deployment – Cluster troubleshooting and maintenance – Load sharing and performance optimization – Synchronization and failover mechanisms
Topic 3: Threat Prevention & Advanced Security	20%	– IPS, Anti-Bot, Anti-Virus configuration – Threat policy design and enforcement – Custom protections and threat intelligence – Threat Emulation and Threat Extraction
Topic 4: Advanced Firewall & Policy Management	20%	– HTTPS Inspection and content security – Advanced object management and sharing – Identity Awareness and access control – Rule base optimization and tuning
Topic 5: Automation, Management & Troubleshooting	5%	– Management API and automation – SmartEvent and log analysis – Upgrade and migration procedures
Topic 6: Virtual Private Networks (VPN)	15%	– Site-to-site and remote access VPN configuration – VPN communities and encryption domains – Certificate management and authentication – VPN troubleshooting and monitoring
Topic 7: Advanced Security Architecture & Design	15%	– R81 platform capabilities and features – Distributed security deployment models – Multi-domain management architecture

NO.76 An established connection is going to www.google.com. The Application Control Blade Is inspecting the traffic. If SecureXL and CoreXL are both enabled, which path is handling the traffic?

Slow Path

Fast Path

Medium Path

Accelerated Path

NO.77 What is correct statement about Security Gateway and Security Management Server failover in Check Point R81.X in terms of Check Point Redundancy driven solution?

Security Gateway failover is an automatic procedure but Security Management Server failover is a manual procedure.

Security Gateway failover as well as Security Management Server failover is a manual procedure.

Security Gateway failover is a manual procedure but Security Management Server failover is an automatic procedure.

Security Gateway failover as well as Security Management Server failover is an automatic procedure.

NO.78 Which statement is correct about the Sticky Decision Function?

It is not supported with either the Performance pack of a hardware based accelerator card

Does not support SPI’s when configured for Load Sharing

It is automatically disabled if the Mobile Access Software Blade is enabled on the cluster

It is not required L2TP traffic

NO.79 What must you do first if “fwm sic_reset” could not be completed?

Cpstop then find keyword “certificate” in objects_5_0.C and delete the section

Reinitialize SIC on the security gateway then run “fw unloadlocal”

Reset SIC from Smart Dashboard

Change internal CA via cpconfig

NO.80 If a “ping”-packet is dropped by FW1 Policy -on how many inspection Points do you see this packet in “fw monitor”?

“i”, “l” and “o”

I don’t see it in fw monitor

“i” only

“i” and “l”

NO.81 Due to high CPU workload on the Security Gateway, the security administrator decided to purchase a new multicore CPU to replace the existing single core CPU. After installation, is the administrator required to perform any additional tasks?

After upgrading the hardware, increase the number of kernel instances using cpconfig

Hyperthreading must be enabled in the bios to use CoreXL

Run cprestart from dish

Administrator does not need to perform any task. Check Point will make use of the newly installed CPU and Cores.

NO.82 If the Active Security Management Server fails or if it becomes necessary to change the Active to Standby, the following steps must be taken to prevent data loss. Providing the Active Security Management Server is responsive, which if these steps should NOT be performed:

Rename the hostname of the Standby member to match exactly the hostname of the Active member.

Change the Standby Security Management Server to Active.

Change the Active Security Management Server to Standby.

Manually synchronize the Active and Standby Security Management Servers.

NO.83 In Logging and Monitoring, the tracking options are Log, Detailed Log and Extended Log. Which of the following options can you add to each Log, Detailed Log and Extended Log?

Accounting

Suppression

Accounting/Suppression

Accounting/Extended

NO.84 Which file contains the host address to be published, the MAC address that needs to be associated with the IP Address, and the unique IP of the interface that responds to ARP request?

/opt/CPshrd-R81/conf/local.arp

/var/opt/CPshrd-R81/conf/local.arp

$CPDIR/conf/local.arp

$FWDIR/conf/local.arp

NO.85 What CLI utility runs connectivity tests from a Security Gateway to an AD domain controller?

test_connectivity_ad -d <domain>

test_ldap_connectivity -d <domain>

test_ad_connectivity -d <domain>

ad_connectivity_test -d <domain>

NO.86 What are the steps to configure the HTTPS Inspection Policy?

Go to Manage&Settings > Blades > HTTPS Inspection > Configure in SmartDashboard

Go to Application&url filtering blade > Advanced > Https Inspection > Policy

Go to Manage&Settings > Blades > HTTPS Inspection > Policy

Go to Application&url filtering blade > Https Inspection > Policy

NO.87 After trust has been established between the Check Point components, what is TRUE about name and IP-address changes?

Security Gateway IP-address cannot be changed without re-establishing the trust.

The Security Gateway name cannot be changed in command line without re-establishing trust.

The Security Management Server name cannot be changed in SmartConsole without re-establishing trust.

The Security Management Server IP-address cannot be changed without re-establishing the trust.

NO.88 What statement best describes the Proxy ARP feature for Manual NAT in R81.10?

Automatic proxy ARP configuration can be enabled

Translate Destination on Client Side should be configured

fw ctl proxy should be configured

local.arp file must always be configured

NO.89 When simulating a problem on ClusterXL cluster with cphaprob -d STOP -s problem -t 0 register, to initiate a failover on an active cluster member, what command allows you remove the problematic state?

cphaprob -d STOP unregister

cphaprob STOP unregister

cphaprob unregister STOP

cphaprob -d unregister STOP

NO.90 On R81.20 when configuring Third-Party devices to read the logs using the LEA (Log Export API) the default Log Server uses port:

18210

18184

257

18191

NO.91 Which command would you use to set the network interfaces’ affinity in Manual mode?

sim affinity -m

sim affinity -l

sim affinity -a

sim affinity -s

NO.92 To fully enable Dynamic Dispatcher on a Security Gateway:

run fw ctl multik set_mode 9 in Expert mode and then Reboot.

Using cpconfig, update the Dynamic Dispatcher value to “full” under the CoreXL menu.

Edit/proc/interrupts to include multik set_mode 1 at the bottom of the file, save, and reboot.

run fw multik set_mode 1 in Expert mode and then reboot.

NO.93 When using CPSTAT, what is the default port used by the AMON server?

18191

18192

18194

18190

NO.94 Which Queue in the Priority Queue has the maximum priority?

High Priority

Control

Routing

Heavy Data Queue

NO.95 Fill in the blank: __________ information is included in “Full Log” tracking option, but is not included in
“Log” tracking option?

Destination port

Data type

File attributes

Application

NO.96 To help SmartEvent determine whether events originated internally or externally you must define using the Initial Settings under General Settings in the Policy Tab. How many options are available to calculate the traffic direction?

5 Network; Host; Objects; Services; API

3 Incoming; Outgoing; Network

2 Internal; External

4 Incoming; Outgoing; Internal; Other

NO.97 Fill in the blank: The R81 SmartConsole, SmartEvent GUI client, and _______ consolidate billions of logs and shows then as prioritized security events.

SmartMonitor

SmartView Web Application

SmartReporter

SmartTracker

NO.98 In the Check Point Firewall Kernel Module, each Kernel is associated with a key, which specifies the type of traffic applicable to the chain module. For Stateful Mode configuration, chain modules marked with
__________________ will not apply.

ffff