Pass 156-315.82 Brain Dump Updated Certification Sample Questions [Q14-Q37]

NEW QUESTION 14
When the Management Server Database is exported using the migrate_server tool, what is exported?

The current database revision and unpublished changes that are saved are all exported

All previous and current revisions of the database are exported

Last 3 revisions of the database are exported

Only the current database revision is exported, unpublished changes are not exported

NEW QUESTION 15
Alice knows about the Check Point Management HA installation from Bob and needs to know which Check Point Security Management Server is currently in the “Active” state. Alice uses the Check Point SmartConsole tool. Which Check Point console location is needed to look up the Management High Availability status?

SmartView Tracker > Log Search > HA Status

SmartUpdate > Package Repository > Management High Availability

Gaia Portal > Overall View > Management High Availability

Check Point SmartConsole > Menu > Management High Availability

NEW QUESTION 16
The configuration option “Connections from Security Gateways to this Server” on the Check Point Host object sets the IP address that Security Gateways target when communicating with the Security Management Server. What is the default setting for this option?

Use this server’s translated IP address.

Based on topology configuration, use the server’s translated or original IP address.

Use the same IP as in the source of the Management connection.

Use this server’s original IP address.

NEW QUESTION 17
Bob was tasked from his security team lead to enhance their existing Primary Security Management solution in deploying a Management HA solution. What server component is required?

Log Server

Security Gateway

SmartEvent Server

Secondary Management Server

NEW QUESTION 18
Where does an administrator need to navigate to in the SmartConsole to carry out a Central Deployment upgrade?

COMMAND LINE

GATEWAYS & SERVERS

MANAGE & SETTINGS

INFINITY SERVICES

NEW QUESTION 19
Which Management Server is Primary?

It’s the Management Server with the highest firmware version and JHF

It’s the current Active Management Server

It’s the every Management Server that is not Standby

It’s the first installed Management Server

NEW QUESTION 20
Choose the right command to export management database with logs and log indexes.

$FWDIR/scripts/migrate_server export -v <target version> -n <file>

$FWDIR/bin/upgrade_tools/migrate export -l <file>

$FWDIR/scripts/migrate_server export -v <target version> -x <file>

$FWDIR/bin/upgrade_tools/migrate export -x <file>

NEW QUESTION 21
What should be upgraded first in Advanced Upgrade Method?

Primary Management Server

Security Gateway

Secondary Management Server

Dedicated Log Server

NEW QUESTION 22
Under which circumstances are automatic scans performed for Continuous Compliance Monitoring?

Every time the CPM and CPD process was restarted.

Every time the FWD or CPM service on the gateway was restarted.

Daily and SmartConsole changes with the Publish action.

Daily and weekly.

NEW QUESTION 23
What does the Firewall administrator need to do when Management servers are in a Collision Mode?

reboot both servers

nothing, server will re-synchronize in next synchronization interval

run cpstop; cpstart command in CLI on both servers

manually re-synchronize the servers

NEW QUESTION 24
How many Secondary Security Management Servers does Check Point allow a customer to deploy?

On-premises deployments allow only one Secondary server. Public cloud deployments allow multiple Secondary servers.

You can install only one Secondary Security Management Server. The licenses limit the solution to only one Standby server.

You can install one or more Secondary Security Management Servers.

You can install only one Security Management Server. The Active server can only synchronize to one Standby server.

NEW QUESTION 25
In Management HA the failover is:

Always manual

Automatic by default, but can be changed to manual

Manual by default, can be changed to automatic

Always automatic

NEW QUESTION 26
Which statement concerning Network Feeds is most correct?

Network Feeds are the objects manually created in the SmartConsole with a name but no IP address. They are used in security policies and resolve to an IP address locally on each Security Gateway

Network Feeds are generated on external HTTP/HTTPS servers that provides an ability to add custom cyber intelligence feeds into the Access Control engine

Network Feeds are external services like Zoom, Office365. Ips are maintained on the Check Point Cloud and objects are automatically synced with the cloud at regular intervals

Network Feeds are generated on external HTTP/HTTPS servers that are fetched by Security Gateways

NEW QUESTION 27
In what way is Secure Network Distributor (SND) a relevant feature of the Security Gateway?

SND is used to distribute packets among Firewall instances

SND is a feature to accelerate multiple SSL VPN connections

SND is a feature of fw monitor to capture accelerated packets

SND is an alternative to IPSec Main Mode, using only 3 packets.

NEW QUESTION 28
Which statement concerning Network Feeds is most correct?

Network Feeds are objects manually created in SmartConsole with a name but no IP address. They are used in security policies and resolve to an IP address locally on each Security Gateway.

Network Feeds are generated on external HTTP/HTTPS servers that provide an ability to add custom cyber intelligence feeds into the Access Control engine.

Network Feeds are external services like Zoom or Office 365. IPs are maintained on the Check Point Cloud, and objects are automatically synchronized with the cloud at regular intervals.

Network Feeds are generated on external HTTP/HTTPS servers that are fetched by Security Gateways.

NEW QUESTION 29
Select the most appropriate statement regarding the Management HA solution.

After installing the Primary Management Server, one or more Secondary Management Servers may be installed for redundancy and database backup.

After installing the Primary Management Server, only one Secondary Management Server can be deployed in the same environment.

The Management Server which is nearest to a Security Gateway becomes its Primary Management Server.

A Management Server running in Active mode is called the Primary Management Server.

NEW QUESTION 30
According to the policy installation, the transfer state (CPTA) is invoked by the FWM (Firewall) process which initiates the Transfer/Commit phase. On the Security Gateway side a process receives them and first stores them into a temporary directory. Which process is true for receiving these files?

FWD

CPD

FWM

RAD

NEW QUESTION 31
While working in the Compliance tab, you have identified under Security Best Practices Compliance a score of 25% for Poor. You click on Poor to review the Security Best Practices with Status Poor. What should you do next?

De-Activate each Poor Best Practice and add a Comment before clicking OK

Change the Status of each Best Practice to Good.

Analyze each Best Practice and review the details, investigate and take action where possible.

After reviewing, right click each Active Best Practice and click Correct and deactivate. The Copilot will configure the settings according to Best Practices.

NEW QUESTION 32
How many packets are used in IKEv1 Phase 1 Main Mode exchange?

6

5

8

3

NEW QUESTION 33
What does the CPTA, Check Point Transfer Agent, do?

CPTA communicates with ThreatCloud to transfer anonymized attack log data and download new signatures.

CPTA transfers the policy files from the Security Management Server to the Security Gateway for policy installation.

CPTA is the agent built into Gaia that downloads new software updates, including JHFAs and major version installation packages.

CPTA is the process that finds and downloads licenses and contracts from the UserCenter to the Security Management Server.

NEW QUESTION 34
Alice & Bob are tasked from their security team lead for deploying Advanced Security Monitoring for all their Check Point Security Gateway(s)/Cluster(s). Which of the features and capabilities of SmartEvent is included?

Full threat visibility

Medium threat visibility

Low threat visibility

High threat visibility

NEW QUESTION 35
From where can you open SmartEvent Settings & Policy App?

Menu > Global properties > Log and Alert

Logs & Events > New tab > External Apps

Logs & Events > Logs > External Apps

Security Policies > Manage Policies > External Apps

NEW QUESTION 36
Choose the correct names for the bonding interfaces that are present by default in an ElasticXL configuration.

Mgmt, eth1-Sync

magg1, Sync