Check Point 156-315.80 Check Point Certified Security Expert – R80 Online Training
Check Point 156-315.80 Online Training
The questions for 156-315.80 were last updated at Nov 26,2024.
- Exam Code: 156-315.80
- Exam Name: Check Point Certified Security Expert - R80
- Certification Provider: Check Point
- Latest update: Nov 26,2024
Which statement is correct about the Sticky Decision Function?
- A . It is not supported with either the Performance pack of a hardware based accelerator card
- B . Does not support SPI’s when configured for Load Sharing
- C . It is automatically disabled if the Mobile Access Software Blade is enabled on the cluster
- D . It is not required L2TP traffic
What is true about the IPS-Blade?
- A . In R80, IPS is managed by the Threat Prevention Policy
- B . In R80, in the IPS Layer, the only three possible actions are Basic, Optimized and Strict
- C . In R80, IPS Exceptions cannot be attached to “all rules”
- D . In R80, the GeoPolicy Exceptions and the Threat Prevention Exceptions are the same
Session unique identifiers are passed to the web api using which http header option?
- A . X-chkp-sid
- B . Accept-Charset
- C . Proxy-Authorization
- D . Application
Which of the following blades is NOT subscription-based and therefore does not have to be renewed on a regular basis?
- A . Application Control
- B . Threat Emulation
- C . Anti-Virus
- D . Advanced Networking Blade
Which of these is an implicit MEP option?
- A . Primary-backup
- B . Source address based
- C . Round robin
- D . Load Sharing
What SmartEvent component creates events?
- A . Consolidation Policy
- B . Correlation Unit
- C . SmartEvent Policy
- D . SmartEvent GUI
Which one of the following is true about Threat Emulation?
- A . Takes less than a second to complete
- B . Works on MS Office and PDF files only
- C . Always delivers a file
- D . Takes minutes to complete (less than 3 minutes)
SandBlast agent extends 0 day prevention to what part of the network?
- A . Web Browsers and user devices
- B . DMZ server
- C . Cloud
- D . Email servers
After verifying that API Server is not running, how can you start the API Server?
- A . Run command "set api start" in CLISH mode
- B . Run command "mgmt__cli set api start" in Expert mode
- C . Run command "mgmt api start" in CLISH mode
- D . Run command "api start" in Expert mode
While using the Gaia CLI. what is the correct command to publish changes to the management server?
- A . json publish
- B . mgmt publish
- C . mgmt_cli commit
- D . commit
Answer: fw accel stat = wrong.
fw ctl multik set_mode 9 does not work in R80.10 any more, correct answer is fw ctl multik dynamic_dispatching on for R80 and up.
cphaprob set_ccp multicast = wrong
Which is the *least ideal* Synchronization Status for Security Management Server High Availability deployment? => never been synchronized is the only correct answer. Other statuses are ofcourse not good, too. But Never been Synched is the worst: if something happens to the active SMS, the configuration is lost and you need to go back to backups. (https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk54160#1.5)
fw tab Ct = wrong. fw tab -t doesn’t work either. Did you mean fw tab?
fw-tab Cs = wrong. fw-tab is not a known command
fw ctl affinity Cl a Cr Cv = fw ctl affinity -l -a -r -v (instead of C there should be – signs. And the – in front of a was missing).