Check Point 156-315.80 Check Point Certified Security Expert – R80 Online Training
Check Point 156-315.80 Online Training
The questions for 156-315.80 were last updated at Nov 27,2024.
- Exam Code: 156-315.80
- Exam Name: Check Point Certified Security Expert - R80
- Certification Provider: Check Point
- Latest update: Nov 27,2024
Which Remote Access Client does not provide an Office-Mode Address?
- A . SecuRemote
- B . Endpoint Security Suite
- C . Endpoint Security VPN
- D . Check Point Mobile
Check Point security components are divided into the following components:
- A . GUI Client, Security Gateway, WebUI Interface
- B . GUI Client, Security Management, Security Gateway
- C . Security Gateway, WebUI Interface, Consolidated Security Logs
- D . Security Management, Security Gateway, Consolidate Security Logs
Which of the following is a new R80.10 Gateway feature that had not been available in R77.X and older?
- A . The rule base can be built of layers, each containing a set of the security rules. Layers are inspected in the order in which they are defined, allowing control over the rule base flow and which security functionalities take precedence.
- B . Limits the upload and download throughput for streaming media in the company to 1 Gbps.
- C . Time object to a rule to make the rule active only during specified times.
- D . Sub Policies ae sets of rules that can be created and attached to specific rules. If the rule is matched, inspection will continue in the sub policy attached to it rather than in the next rule.
What processes does CPM control?
- A . Object-Store, Database changes, CPM Process and web-services
- B . web-services, CPMI process, DLEserver, CPM process
- C . DLEServer, Object-Store, CP Process and database changes
- D . web_services, dle_server and object_Store
Which of the following is NOT a VPN routing option available in a star community?
- A . To satellites through center only.
- B . To center, or through the center to other satellites, to Internet and other VPN targets.
- C . To center and to other satellites through center.
- D . To center only.
Please choose correct command to add an “emailserver1” host with IP address 10.50.23.90 using GAiA management CLI?
- A . host name myHost12 ip-address 10.50.23.90
- B . mgmt: add host name ip-address 10.50.23.90
- C . add host name emailserver1 ip-address 10.50.23.90
- D . mgmt: add host name emailserver1 ip-address 10.50.23.90
Which is NOT a SmartEvent component?
- A . SmartEvent Server
- B . Correlation Unit
- C . Log Consolidator
- D . Log Server
Where do you create and modify the Mobile Access policy in R80?
- A . SmartConsole
- B . SmartMonitor
- C . SmartEndpoint
- D . SmartDashboard
What will be the effect of running the following command on the Security Management Server?
- A . Remove the installed Security Policy.
- B . Remove the local ACL lists.
- C . No effect.
- D . Reset SIC on all gateways.
When configuring SmartEvent Initial settings, you must specify a basic topology for SmartEvent to help it calculate traffic direction for events .
What is this setting called and what are you defining?
- A . Network, and defining your Class A space
- B . Topology, and you are defining the Internal network
- C . Internal addresses you are defining the gateways
- D . Internal network(s) you are defining your networks
Answer: fw accel stat = wrong.
fw ctl multik set_mode 9 does not work in R80.10 any more, correct answer is fw ctl multik dynamic_dispatching on for R80 and up.
cphaprob set_ccp multicast = wrong
Which is the *least ideal* Synchronization Status for Security Management Server High Availability deployment? => never been synchronized is the only correct answer. Other statuses are ofcourse not good, too. But Never been Synched is the worst: if something happens to the active SMS, the configuration is lost and you need to go back to backups. (https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk54160#1.5)
fw tab Ct = wrong. fw tab -t doesn’t work either. Did you mean fw tab?
fw-tab Cs = wrong. fw-tab is not a known command
fw ctl affinity Cl a Cr Cv = fw ctl affinity -l -a -r -v (instead of C there should be – signs. And the – in front of a was missing).