156-315.81 Free Update With 100% Exam Passing Guarantee [2023]
[Apr-2023] Verified CheckPoint Exam Dumps with 156-315.81 Exam Study Guide
NEW QUESTION # 12
What is UserCheck?
- A. Communication tool used to inform a user about a website or application they are trying to access.
- B. Administrator tool used to monitor users on their network.
- C. Messaging tool used to verify a user's credentials.
- D. Communication tool used to notify an administrator when a new user is created.
Answer: A
NEW QUESTION # 13
How does the Anti-Virus feature of the Threat Prevention policy block traffic from infected websites?
- A. By dropping traffic that is not proven to be from clean websites in the URL Filtering blade
- B. By allowing traffic from websites that are known to run Antivirus Software on servers regularly
- C. By dropping traffic from websites identified through ThreatCloud Verification and URL Caching
- D. By matching logs against ThreatCloud information about the reputation of the website
Answer: D
NEW QUESTION # 14
Which two Cluster Solutions are available under R81.10?
- A. VRRPandHSRP
- B. VRRP and IP Clustering
- C. ClusterXL and VRitP
- D. ClusterXL and NSRP
Answer: C
NEW QUESTION # 15
To add a file to the Threat Prevention Whitelist, what two items are needed?
- A. IP address of Management Server and Gateway
- B. Object Name and MD5 signature
- C. File name and Gateway
- D. MD5 signature and Gateway
Answer: B
NEW QUESTION # 16
Bob works for a big security outsourcing provider company and as he receives a lot of change requests per day he wants to use for scripting daily tasks the API services (torn Check Point for the GAIA API. Firstly he needs to be aware if the API services are running for iheGAIA operating system. Which of the following Check Point Command is true:
- A. api_gala status
- B. status gaiaapi
- C. gala_api status
- D. gala_dlish status
Answer: D
NEW QUESTION # 17
What is correct statement about Security Gateway and Security Management Server failover in Check Point R81.X in terms of Check Point Redundancy driven solution?
- A. Security Gateway failover is an automatic procedure but Security Management Server failover is a manual procedure.
- B. Security Gateway failover is a manual procedure but Security Management Server failover is an automatic procedure.
- C. Security Gateway failover as well as Security Management Server failover is an automatic procedure.
- D. Security Gateway failover as well as Security Management Server failover is a manual procedure.
Answer: A
NEW QUESTION # 18
Fill in the blank: The R81 utility fw monitor is used to troubleshoot ______________________.
- A. User data base corruption
- B. Phase two key negotiations
- C. LDAP conflicts
- D. Traffic issues
Answer: D
Explanation:
Check Point's FW Monitor is a powerful built-in tool for capturing network traffic at the packet level. The FW Monitor utility captures network packets at multiple capture points along the FireWall inspection chains. These captured packets can be inspected later using the WireShark.
NEW QUESTION # 19
You are the administrator for ABC Corp. You have logged into your R81 Management server. You are making some changes in the Rule Base and notice that rule No.6 has a pencil icon next to it.
What does this mean?
- A. This rule No. 6 has been marked for editing in your Management session.
- B. This rule No. 6 has been marked for editing in another Management session.
- C. This rule No. 6 has been marked for deletion in another Management session.
- D. This rule No. 6 has been marked for deletion in your Management session.
Answer: A
NEW QUESTION # 20
What is false regarding prerequisites for the Central Deployment usage?
- A. No need to establish SIC between gateways and the management server, since the CDT tool will take care about SIC automatically.
- B. Security Gateway must have the latest CPUSE Deployment Agent
- C. The administrator must have write permission on SmartUpdate
- D. The Security Gateway must have a policy installed
Answer: A
Explanation:
Establishing SIC between gateways and the management server is a prerequisite for Central Deployment usage, as the CDT tool will not take care of this automatically. The administrator must have write permission on SmartUpdate, the Security Gateway must have the latest CPUSE Deployment Agent, and the Security Gateway must have a policy installed.
NEW QUESTION # 21
On what port does the CPM process run?
- A. TCP 19009
- B. TCP 857
- C. TCP 900
- D. TCP 18192
Answer: A
NEW QUESTION # 22
What traffic does the Anti-bot feature block?
- A. Command and Control traffic to servers with reputation for hosting malware
- B. Network traffic that is directed to unknown or malicious servers
- C. Command and Control traffic from hosts that have been identified as infected
- D. Network traffic to hosts that have been identified as infected
Answer: C
NEW QUESTION # 23
How often does Threat Emulation download packages by default?
- A. Once an hour
- B. Once per day
- C. Once a week
- D. Twice per day
Answer: B
NEW QUESTION # 24
The Correlation Unit performs all but the following actions:
- A. Generates an event based on the Event policy.
- B. Assigns a severity level to the event.
- C. Marks logs that individually are not events, but may be part of a larger pattern to be identified later.
- D. Takes a new log entry that is part of a group of items that together make up an event, and adds it to an ongoing event.
Answer: B
NEW QUESTION # 25
According to out of the box SmartEvent policy, which blade will automatically be correlated into events?
- A. VPN
- B. HTTPS
- C. Firewall
- D. IPS
Answer: D
NEW QUESTION # 26
What command would show the API server status?
- A. show api status
- B. api status
- C. cpm status
- D. api restart
Answer: B
NEW QUESTION # 27
Sieve is a Cyber Security Engineer working for Global Bank with a large scale deployment of Check Point Enterprise Appliances Steve's manager. Diana asks him to provide firewall connection table details from one of the firewalls for which he is responsible. Which of these commands may impact performance briefly and should not be used during heavy traffic times of day?
- A. fw tab -t connections
- B. fw tab -t connections -s
- C. fw tab -t connections -c
- D. fw tab -t connections -f
Answer: A
NEW QUESTION # 28
You want to gather data and analyze threats to your mobile device. It has to be a lightweight app. Which application would you use?
- A. Check Point Capsule Cloud
- B. SmartEvent Client Info
- C. Sandblast Mobile Protect
- D. SecuRemote
Answer: C
Explanation:
SandBlast Mobile Protect is a lightweight app for iOS and Android that gathers data and helps analyze threats to devices in your environment.
https://www.checkpoint.com/downloads/products/how-sandblast-mobile-works-solution-brief.pdf
NEW QUESTION # 29
......
Authentic Best resources for 156-315.81 Online Practice Exam: https://torrentvce.exam4free.com/156-315.81-valid-dumps.html
