A fully updated 2022 156-315.80 Exam Dumps exam guide from training expert ExamDumpsVCE [Q54-Q76]

5/5 - (1 vote)

A fully updated 2022 156-315.80 Exam Dumps exam guide from training expert ExamDumpsVCE

Provides complete coverage of every objective on exam and exam preparation 156-315.80

NEW QUESTION 54
When a packet arrives at the gateway, the gateway checks it against the rules in the hop Policy Layer, sequentially from top to bottom, and enforces the first rule that matches a packet. Which of the following statements about the order of rule enforcement is true?

If the Action is Accept, the gateway allows the packet to pass through the gateway.

If the Action is Drop, the gateway continues to check rules in the next Policy Layer down.

If the Action is Accept, the gateway continues to check rules in the next Policy Layer down.

If the Action is Drop, the gateway applies the Implicit Clean-up Rule for that Policy Layer.

NEW QUESTION 55
The CPD daemon is a Firewall Kernel Process that does NOT do which of the following?

Secure Internal Communication (SIC)

Restart Daemons if they fail

Transfers messages between Firewall processes

Pulls application monitoring status

NEW QUESTION 56
Which is not a blade option when configuring SmartEvent?

Correlation Unit

SmartEvent Unit

SmartEvent Server

Log Server

On the Management tab, enable these Software Blades:

NEW QUESTION 57
Which of the following authentication methods ARE NOT used for Mobile Access?

RADIUS server

Username and password (internal, LDAP)

SecurID

TACACS+

NEW QUESTION 58
Which is NOT an example of a Check Point API?

Gateway API

Management API

OPSC SDK

Threat Prevention API

Explanation/Reference: https://sc1.checkpoint.com/documents/R80/APIs/#introduction%20

NEW QUESTION 59
Check Point Management (cpm) is the main management process in that it provides the architecture for a consolidates management console. CPM allows the GUI client and management server to communicate via web services using ___________.

TCP port 19009

TCP Port 18190

TCP Port 18191

TCP Port 18209

NEW QUESTION 60
In SmartEvent, what are the different types of automatic reactions that the administrator can configure?

Mail, Block Source, Block Event Activity, External Script, SNMP Trap

Mail, Block Source, Block Destination, Block Services, SNMP Trap

Mail, Block Source, Block Destination, External Script, SNMP Trap

Mail, Block Source, Block Event Activity, Packet Capture, SNMP Trap

Explanation/Reference: https://sc1.checkpoint.com/documents/R76/CP_R76_SmartEvent_AdminGuide/17401.htm

NEW QUESTION 61
True or False: In R80, more than one administrator can login to the Security Management Server with write permission at the same time.

False, this feature has to be enabled in the Global Properties.

True, every administrator works in a session that is independent of the other administrators.

True, every administrator works on a different database that is independent of the other administrators.

False, only one administrator can login with write permission.

NEW QUESTION 62
Which packet info is ignored with Session Rate Acceleration?

source port ranges

source ip

source port

same info from Packet Acceleration is used

References:

NEW QUESTION 63
SandBlast offers flexibility in implementation based on their individual business needs. What is an option for deployment of Check Point SandBlast Zero-Day Protection?

Smart Cloud Services

Load Sharing Mode Services

Threat Agent Solution

Public Cloud Services

NEW QUESTION 64
To verify enable Dynamic Dispatcher on a Security Gateway:

run fw multik set_mode 9 in Expert mode then reboot

Using spoofing update the Dynamic Dispatcher value to “full” under the CoreXl menu.

Edit/proc/interrupts to include multik mode 1 at the bottom of the file save and reboot.

run fw clt multik _mode 1 in Expert mode and then reboot.

NEW QUESTION 65
In ClusterXL Load Sharing Multicast Mode:

only the primary member received packets sent to the cluster IP address

only the secondary member receives packets sent to the cluster IP address

packets sent to the cluster IP address are distributed equally between all members of the cluster

every member of the cluster received all of the packets sent to the cluster IP address

NEW QUESTION 66
What are the main stages of a policy installations?

Verification & Compilation, Transfer and Commit

Verification & Compilation, Transfer and Installation

Verification, Commit, Installation

Verification, Compilation & Transfer, Installation

NEW QUESTION 67
In the Check Point Firewall Kernel Module, each Kernel is associated with a key, which specifies the type of traffic applicable to the chain module. For Stateful Mode configuration, chain modules marked with __________________ will not apply.

ffff

NEW QUESTION 68
Which command shows detailed information about VPN tunnels?

cat $FWDIR/conf/vpn.conf

vpn tu tlist

vpn tu

cpview

References:

NEW QUESTION 69
When setting up an externally managed log server, what is one item that will not be configured on the R80 Security Management Server?

SIC

NAT

FQDN

NEW QUESTION 70
For best practices, what is the recommended time for automatic unlocking of locked admin accounts?

20 minutes

15 minutes

Admin account cannot be unlocked automatically

30 minutes at least

NEW QUESTION 71
Which of the following commands shows the status of processes?

cpwd_admin -l

cpwd -l

cpwd admin_list

cpwd_admin list

Explanation/Reference: https://community.checkpoint.com/thread/8054-cpwdadmin-list-overview-sms

NEW QUESTION 72
Joey want to configure NTP on R80 Security Management Server. He decided to do this via WebUI. What is the correct address to access the Web UI for Gaia platform via browser?

https://<Device_IP_Adress>

http://<Device IP_Address>:443

https://<Device_IP_Address>:10000

https://<Device_IP_Address>:4434

Explanation/Reference: https://sc1.checkpoint.com/documents/R77/CP_R77_Gaia_AdminWebAdminGuide/ html_frameset.htm?topic=documents/R77/CP_R77_Gaia_AdminWebAdminGuide/75930

NEW QUESTION 73
What is the command to check the status of Check Point processes?

top

cptop

cphaprob list

cpws_admin list

Explanation/Reference: https://community.checkpoint.com/t5/General-Management-Topics/cpwd-admin-list-overview-SMS/ td-p/29589

NEW QUESTION 74
Which of the following is an identity acquisition method that allows a Security Gateway to identify Active Directory users and computers?

UserCheck

Active Directory Query

Account Unit Query

User Directory Query

Explanation
Reference : https://sc1.checkpoint.com/documents/R76/CP_R76_IdentityAwareness_AdminGuide/62402.htm

NEW QUESTION 75
Which command lists all tables in Gaia?

fw tab -t

fw tab -list

fw-tab -s

fw tab -1

Reference: http://dl3.checkpoint.com/paid/c7/c76b823d81bab77e1e40ac086fa81411/ CP_R77_versions_CLI_ReferenceGuide.pdf?
HashKey=1538418170_96def40f213f24a8b273cc77b408dd3f&xtn=.pdf

NEW QUESTION 76
Check point Central Deployment Tool (CDT) communication with the Security Gateway / Cluster Members over check point SIC________

TCP port 18190

TCP port 18209

TCP port 19009

TCP port 18191

Loading …

How to study the 156-315.80 Exam

ExamDumpsVCE expert team recommends you to prepare some notes on these topics along with it don’t forget to practice Check Point Certified Security Expert – R80 156-315.80 Exam which been written by our expert team, Both these will help you a lot to clear this exam with good marks.

Tested Material Used To 156-315.80: https://www.examdumpsvce.com/156-315.80-valid-exam-dumps.html