Updated Mar 25, 2024 Verified Pass 156-315.81 Exam in First Attempt Guaranteed
Free 156-315.81 Sample Questions and 100% Cover Real Exam Questions (Updated 616 Questions)
NEW QUESTION # 299
SandBlast agent extends 0 day prevention to what part of the network?
- A. Email servers
- B. DMZ server
- C. Web Browsers and user devices
- D. Cloud
Answer: C
NEW QUESTION # 300
What is the valid range for Virtual Router Identifier (VRID) value in a Virtual Routing Redundancy Protocol (VRRP) configuration?
- A. 1-255
- B. 1-254
- C. 0-254
- D. 0 - 255
Answer: A
NEW QUESTION # 301
Which of the following Check Point commands is true to enable Multi-Version Cluster (MVC)?
- A. Check Point Security Gateway Cluster Member: set cluster member mvc on
- B. Check Point Security Gateway Only: set cluster member mvc on
- C. Check Point Security Management HA (Secondary): set cluster member mvc on
- D. Check Point Security Management HA (Primary): set cluster member mvc on
Answer: A
Explanation:
Explanation
You can enable Multi-Version Cluster (MVC) by running set cluster member mvc on on the Check Point Security Gateway Cluster Member1. MVC is a feature that allows you to upgrade a Security Gateway Cluster to a higher version without downtime2. It works by upgrading one cluster member at a time, while the other cluster members continue to operate with the lower version2. MVC supports upgrading from R80.40 and above to R81 and above2. To use MVC, you need to do the following steps2:
Enable MVC on each cluster member by running set cluster member mvc on in Clish and rebooting the gateway.
Install the higher version on one cluster member using CPUSE or ISO image.
Install policy on the upgraded cluster member and verify that it works properly.
Repeat the previous steps for the remaining cluster members until all of them are upgraded.
Disable MVC on each cluster member by running set cluster member mvc off in Clish and rebooting the gateway.
References: Multi-Version Cluster (MVC) - Check Point Software, Multi-Version Cluster (MVC) - Check Point CheckMates
NEW QUESTION # 302
Kofi, the administrator of the ALPHA Corp network wishes to change the default Gaia WebUI Portal port number currently set on the default HTTPS port. Which CLISH commands are required to be able to change this TCP port?
- A. set Gaia-portal port <new port number>
- B. set web https-port <new port number>
- C. set web ssl-port <new port number>
- D. set Gaia-portal https-port <new port number>
Answer: C
Explanation:
Explanation
The CLISH command to change the default Gaia WebUI Portal port number is set web ssl-port <new port number>. This command will change the port that the WebUI listens on for HTTPS connections. After changing the port, you need to save the configuration with save config and verify that the change was applied with show web ssl-port. You also need to update the Main URL in the Platform Portal section of the gateway object in SmartConsole and install the policy.
NEW QUESTION # 303
What API command below creates a new host with the name "New Host" and IP address of "192.168.0.10"?
- A. add host name "New Host" ip-address "192.168.0.10"
- B. set host name "New Host" ip-address "192.168.0.10"
- C. create host name "New Host" ip-address "192.168.0.10"
- D. new host name "New Host" ip-address "192.168.0.10"
Answer: A
Explanation:
Explanation
The API command to create a new host with the name "New Host" and IP address "192.168.0.10" is:
This command adds a host object with the specified name and IP address to the Check Point configuration.
References: Check Point documentation or training materials related to API commands.
NEW QUESTION # 304
What are the two types of tests when using the Compliance blade?
- A. Access Control policy analysis and Threat Prevention policy analysis
- B. Global tests and Object-based tests
- C. Tests conducted based on the loC XMfcfile and analysis of SOLR documents
- D. Policy-based tests and Global properties
Answer: B
Explanation:
The Check Point Compliance Blade has a library of Check Point-defined tests to use as a baseline for good gateway and policy configuration. A Best Practice test is related to specified regulations in different regulatory standards. It describes compliance status and recommends corrective steps. Global Tests - Examine all applicable configuration settings in the organization. Object-based Tests - Examine the configuration settings for specified objects (gateways, profiles and other objects)
https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk120256
NEW QUESTION # 305
What is the correct order of the default "fw monitor" inspection points?
- A. i, I, o, O
- B. i, o, I, O
- C. 1, 2, 3, 4
- D. I, i, O, o
Answer: B
NEW QUESTION # 306
Under which file is the proxy arp configuration stored?
- A. $FWDIR/conf/local.arp on the gateway
- B. $FWDIR/state/_tmp/proxy.arp on the security gateway
- C. $FWDIR/conf/local.arp on the management server
- D. $FWDIR/state/proxy_arp.conf on the management server
Answer: A
NEW QUESTION # 307
The back end database for Check Point R81 Management uses:
- A. PostgreSQL
- B. MongoDB
- C. MySQL
- D. DBMS
Answer: A
NEW QUESTION # 308
To enable Dynamic Dispatch on Security Gateway without the Firewall Priority Queues, run the following command in Expert mode and reboot:
- A. fw ctl multik set_mode 1
- B. fw ctl multik set_mode 4
- C. fw ctl Dyn_Dispatch on
- D. fw ctl Dyn_Dispatch enable
Answer: B
NEW QUESTION # 309
Which statement is false in respect of the SmartConsole after upgrading the management server to R81.20?
- A. Yes, the SmartConsole Upgrade package can be installed using CPUSE
- B. As far as you use version R80.40, no upgrade is needed due to compatibility mode
- C. Yes, using CPUSE you can make the installer available in the Web Portal of the Management Server
- D. Yes. You can download the SmartConsole directly from the Download Center
Answer: B
Explanation:
Explanation
The statement that is false in respect of the SmartConsole after upgrading the management server to R81.20 is that as far as you use version R80.40, no upgrade is needed due to compatibility mode. This is false because SmartConsole R80.40 is not compatible with R81.20 management server and you need to upgrade your SmartConsole to R81.20 as well. The other statements are true and valid ways to obtain the SmartConsole upgrade package. References: [Check Point Security Expert R81 Installation and Upgrade Guide], page 18.
NEW QUESTION # 310
In terms of Order Rule Enforcement, when a packet arrives at the gateway, the gateway checks it against the rules in the top Policy Layer, sequentially from top to bottom Which of the following statements is correct?
- A. If the Action of the matching rule is Accept the gateway will drop the packet
- B. If the rule does not matched in the Network policy it will continue to other enabled polices
- C. If the Action of the matching rule is Drop, the gateway continues to check rules in the next Policy Layer down
- D. If the Action of the matching rule is Drop the gateway stops matching against later rules in the Policy Rule Base and drops the packet
Answer: D
Explanation:
https://sc1.checkpoint.com/documents/R81/CP_R81_SecMGMT/html_frameset.htm?topic=documents/R81/CP_R81_SecMGMT/126197
NEW QUESTION # 311
Which Check Point feature enables application scanning and the detection?
- A. AppWiki
- B. Application Library
- C. CPApp
- D. Application Dictionary
Answer: A
NEW QUESTION # 312
To help SmartEvent determine whether events originated internally or externally you must define using the Initial Settings under General Settings in the Policy Tab. How many options are available to calculate the traffic direction?
- A. 2 Internal; External
- B. 5 Network; Host; Objects; Services; API
- C. 4 Incoming; Outgoing; Internal; Other
- D. 3 Incoming; Outgoing; Network
Answer: C
Explanation:
Explanation
To help SmartEvent determine whether events originated internally or externally, you must define the traffic direction using the Initial Settings under General Settings in the Policy Tab. There are four options available to calculate the traffic direction: Incoming, Outgoing, Internal, and Other. Incoming means the source is external and the destination is internal. Outgoing means the source is internal and the destination is external.
Internal means both the source and the destination are internal. Other means both the source and the destination are external. References: SmartEvent R81 Administration Guide
NEW QUESTION # 313
SmartEvent has several components that function together to track security threats. What is the function of the Correlation Unit as a component of this architecture?
- A. Collects syslog data from third party devices and saves them to the database.
- B. Connects with the SmartEvent Client when generating threat reports.
- C. Correlates all the identified threats with the consolidation policy.
- D. Analyzes each log entry as it arrives at the log server according to the Event Policy. When a threat pattern is identified, an event is forwarded to the SmartEvent Server.
Answer: D
Explanation:
Explanation
The Correlation Unit in SmartEvent architecture has the function of analyzing each log entry as it arrives at the log server according to the Event Policy. When it identifies a threat pattern, it forwards an event to the SmartEvent Server. This is an essential function in threat detection and analysis, as it helps in identifying and alerting about security threats based on the configured policies.
Option A correctly describes the function of the Correlation Unit, making it the verified answer.
References: Check Point Certified Security Expert (CCSE) R81 documentation and learning resources.
NEW QUESTION # 314
When Identity Awareness is enabled, which identity source(s) is(are) used for Application Control?
- A. AD Query
- B. AD Query and Browser-based Authentication
- C. RADIUS
- D. Remote Access and RADIUS
Answer: B
Explanation:
Explanation
Identity Awareness gets identities from these acquisition sources:
NEW QUESTION # 315
Check Pont Central Deployment Tool (CDT) communicates with the Security Gateway / Cluster Members over Check Point SIC _______ .
- A. TCP Port 18209
- B. TCP Port 18190
- C. TCP Port 18191
- D. TCP Port 19009
Answer: C
Explanation:
Explanation
Check Point Central Deployment Tool (CDT) communicates with the Security Gateway / Cluster Members over Check Point SIC using TCP port 18191 by default. CDT is a tool that allows you to perform simultaneous configuration changes on multiple gateways or clusters using predefined commands or scripts. References:
Check Point Central Deployment Tool (CDT)
NEW QUESTION # 316
Which command lists firewall chain?
- A. fwctl chain
- B. fw list chain
- C. fw tab -t chainmod
- D. fw chain module
Answer: A
Explanation:
Explanation
https://sc1.checkpoint.com/documents/R81/WebAdminGuides/EN/CP_R81_NextGenSecurityGateway_Guide/T
NEW QUESTION # 317
The admin is connected via ssh lo the management server. He wants to run a mgmt_dl command but got a Error 404 message. To check the listening ports on the management he runs netstat with the results shown below. What can be the cause for the issue?
- A. Wrong Management API Access setting^for Ihe client IP To correct it go to SmartConsole / Management & Settings / Blades / Management API and press "Advanced Settings..' and choose GUI clients or ALL IP's.
- B. The API didn't run on the default port check it with api status' and add '-port 4434' to the mgmt_clt command.
- C. The API is not running, the services shown by netstat are the gaia services. To start the API run 'api start'
- D. The management permission in the user profile is mrssing. Go to SmartConsole / Management & Settings I Permissions & Administrators / Permission Profiles. Select the profile of the user and enable 'Management API Login' under Management Permissions
Answer: C
Explanation:
https://community.checkpoint.com/t5/Security-Gateways/R81-x-Ports-Used-for-Communication-by-Various-Check-Point/td-p/38153 https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk156472
NEW QUESTION # 318
What is "Accelerated Policy Installation"?
- A. Starting R81, the Desktop Security Policy installation process is accelerated thereby reducing the duration of the process significantly
- B. Starting R81, the QoS Policy installation process is accelerated thereby reducing the duration of the process significantly
- C. Starting R81, the Access Control Policy installation process is accelerated thereby reducing the duration of the process significantly
- D. Starting R81, the Threat Prevention Policy installation process is accelerated thereby reducing the duration of the process significantly
Answer: C
NEW QUESTION # 319
The Compliance Blade allows you to search for text strings in many windows and panes, to search for a value in a field, what would your syntax be?
- A. name field:string
- B. field name:string
- C. name_field:string
- D. field_name:string
Answer: D
NEW QUESTION # 320
What command is used to manually failover a cluster during a zero downtime upgrade?
- A. clusterXL_admin down
- B. set clusterXL down
- C. set cluster member down
- D. cpstop
Answer: A
NEW QUESTION # 321
......
Download Real CheckPoint 156-315.81 Exam Dumps Test Engine Exam Questions: https://www.prepawayete.com/CheckPoint/156-315.81-practice-exam-dumps.html
Verified 156-315.81 Dumps Q&As - 156-315.81 Test Engine with Correct Answers: https://drive.google.com/open?id=1brbz7LSEcO5lAEhLuQZ6Y7NVjuYOHkgL