Avant-garde 156-315.81 Test Questions For Check Point Certified Security Expert R81 Certification

NEW QUESTION 1

Which of the SecureXL templates are enabled by default on Security Gateway?

• A. Accept
• B. Drop
• C. NAT
• D. None

Answer: D

NEW QUESTION 2

Which command is used to add users to or from existing roles?

• A. Add rba user <User Name> roles <List>
• B. Add rba user <User Name>
• C. Add user <User Name> roles <List>
• D. Add user <User Name>

Answer: A

NEW QUESTION 3

Which statement is correct about the Sticky Decision Function?

• A. It is not supported with either the Performance pack of a hardware based accelerator card
• B. Does not support SPI’s when configured for Load Sharing
• C. It is automatically disabled if the Mobile Access Software Blade is enabled on the cluster
• D. It is not required L2TP traffic

Answer: A

NEW QUESTION 4

Which Check Point daemon invokes and monitors critical processes and attempts to restart them if they fail?

• A. fwm
• B. cpd
• C. cpwd
• D. cpm

Answer: C

NEW QUESTION 5

You need to change the MAC-address on eth2 interface of the gateway. What command and what mode will you use to achieve this goal?

• A. set interface eth2 mac-addr 11:11:11:11:11:11; CLISH
• B. ifconfig eth1 hw 11:11:11:11:11:11; expert
• C. set interface eth2 hw-addr 11:11:11:11:11:11; CLISH
• D. ethtool -i eth2 mac 11:11:11:11:11:11; expert

Answer: A

NEW QUESTION 6

What is the recommended configuration when the customer requires SmartLog indexing for 14 days and SmartEvent to keep events for 180 days?

• A. Use Multi-Domain Management Server.
• B. Choose different setting for log storage and SmartEvent db
• C. Install Management and SmartEvent on different machines.
• D. it is not possible.

Answer: C

NEW QUESTION 7

When deploying SandBlast, how would a Threat Emulation appliance benefit from the integration of ThreatCloud?

• A. ThreatCloud is a database-related application which is located on-premise to preserve privacy of company-related data
• B. ThreatCloud is a collaboration platform for all the CheckPoint customers to form a virtual cloud consisting of a combination of all on-premise private cloud environments
• C. ThreatCloud is a collaboration platform for Check Point customers to benefit from VMWare ESXi infrastructure which supports the Threat Emulation Appliances as virtual machines in the EMC Cloud
• D. ThreatCloud is a collaboration platform for all the Check Point customers to share information about malicious and benign files that all of the customers can benefit from as it makes emulation of known files unnecessary

Answer: D

NEW QUESTION 8

Alice knows about the Check Point Management HA installation from Bob and needs to know which Check Point Security Management Server is currently capable of issuing and managing certificate. Alice uses the Check Point command "cpconfig'' to run the Check Point Security Management Server configuration tool on both Check Point Management HA instances "Primary & Secondary" Which configuration option does she need to look for:

• A. Certificate's Fingerprint
• B. Random Pool
• C. CA Authority
• D. Certificate Authority

Answer: D

NEW QUESTION 9

Which is the least ideal Synchronization Status for Security Management Server High Availability deployment?

• A. Synchronized
• B. Never been synchronized
• C. Lagging
• D. Collision

Answer: D

NEW QUESTION 10

Which features are only supported with R81.10 Gateways but not R77.x?

• A. Access Control policy unifies the Firewall, Application Control & URL Filtering, Data Awareness, and Mobile Access Software Blade policies.
• B. Limits the upload and download throughput for streaming media in the company to 1 Gbps.
• C. The rule base can be built of layers, each containing a set of the security rule
• D. Layers are inspected in the order in which they are defined, allowing control over the rule base flow and which security functionalities take precedence.
• E. Time object to a rule to make the rule active only during specified times.

Answer: C

NEW QUESTION 11

In Advanced Permanent Tunnel Configuration, to set the amount of time the tunnel test runs without a response before the peer host is declared ‘down’, you would set the ?

• A. life sign polling interval
• B. life sign timeout
• C. life_sign_polling_interval
• D. life_sign_timeout

Answer: D

Explanation:
Reference: https://sc1.checkpoint.com/documents/R77/CP_R77_VPN_AdminGuide/html_frameset.htm? topic=documents/R77/CP_R77_VPN_AdminGuide/14018

NEW QUESTION 12

In Threat Prevention, you can create new or clone profiles but you CANNOT change the out-of-the-box profiles of:

• A. Basic, Optimized, Strict
• B. Basic, Optimized, Severe
• C. General, Escalation, Severe
• D. General, purposed, Strict

Answer: A

NEW QUESTION 13

What will be the effect of running the following command on the Security Management Server?

• A. Remove the installed Security Policy.
• B. Remove the local ACL lists.
• C. No effect.
• D. Reset SIC on all gateways.

Answer: A

NEW QUESTION 14

How can you see historical data with cpview?

• A. cpview -f <timestamp>
• B. cpview -e <timestamp>
• C. cpview -t <timestamp>
• D. cpview -d <timestamp>

Answer: C

NEW QUESTION 15

Ken wants to obtain a configuration lock from other administrator on R81 Security Management Server. He can do this via WebUI or via CLI.
Which command should he use in CLI? (Choose the correct answer.)

• A. remove database lock
• B. The database feature has one command lock database override.
• C. override database lock
• D. The database feature has two commands lock database override and unlock databas
• E. Both will work.

Answer: D

NEW QUESTION 16

Using Threat Emulation technologies, what is the best way to block .exe and .bat file types?

• A. enable DLP and select.exe and .bat file type
• B. enable .exe & .bat protection in IPS Policy
• C. create FW rule for particular protocol
• D. tecli advanced attributes set prohibited_file_types exe.bat

Answer: A

NEW QUESTION 17
......