04 November, 2021

What Virtual 156-315.80 Exam Question Is

Exam Code: 156-315.80 (Practice Exam Latest Test Questions VCE PDF)
Exam Name: Check Point Certified Security Expert - R80
Certification Provider: Check-Point
Free Today! Guaranteed Training- Pass 156-315.80 Exam.

Page: 1 / 35

Total 428 questions Full Exam Access

Question 1

Which feature is NOT provided by all Check Point Mobile Access solutions?

Support for IPv6

Granular access control

Strong user authentication

Secure connectivity

Question 2

Which GUI client is supported in R80?

SmartProvisioning

SmartView Tracker

SmartView Monitor

SmartLog

Question 3

Which of the following is an identity acquisition method that allows a Security Gateway to identify Active Directory users and computers?

UserCheck

Active Directory Query

Account Unit Query

User Directory Query

Question 4

What is the purpose of the CPCA process?

Monitoring the status of processes.

Sending and receiving logs.

Communication between GUI clients and the SmartCenter server.

Generating and modifying certificates.

Question 5

You plan to automate creating new objects using new R80 Management API. You decide to use GAIA CLI for this task.
What is the first step to run management API commands on GAIA’s shell?

mgmt_admin@teabag > id.txt

mgmt_login

mgmt_cli login user “admin” password “teabag” > id.txt

Question 6

Customer’s R80 management server needs to be upgraded to R80.10. What is the best upgrade method when the management server is not connected to the Internet?

Export R80 configuration, clean install R80.10 and import the configuration

CPUSE offline upgrade

CPUSE online upgrade

SmartUpdate upgrade

Question 7

When simulating a problem on ClusterXL cluster with cphaprob –d STOP -s problem -t 0 register, to initiate a failover on an active cluster member, what command allows you remove the problematic state?

cphaprob –d STOP unregister

cphaprob STOP unregister

cphaprob unregister STOP

cphaprob –d unregister STOP

Question 8

Office mode means that:

SecurID client assigns a routable MAC addres

After the user authenticates for a tunnel, the VPN gateway assigns a routable IP address to the remote client.

Users authenticate with an Internet browser and use secure HTTPS connection.

Local ISP (Internet service Provider) assigns a non-routable IP address to the remote user.

Allows a security gateway to assign a remote client an IP addres

After the user authenticates for a tunnel, the VPN gateway assigns a routable IP address to the remote client.

Question 9

GAiA Software update packages can be imported and installed offline in situation where:

Security Gateway with GAiA does NOT have SFTP access to Internet

Security Gateway with GAiA does NOT have access to Internet.

Security Gateway with GAiA does NOT have SSH access to Internet.

The desired CPUSE package is ONLY available in the Check Point CLOUD.

Question 10

As a valid Mobile Access Method, what feature provides Capsule Connect/VPN?

That is used to deploy the mobile device as a generator of one-time passwords for authenticating to an RSA Authentication Manager.

Fill Layer4 VPN –SSL VPN that gives users network access to all mobile applications.

Full Layer3 VPN –IPSec VPN that gives users network access to all mobile applications.

You can make sure that documents are sent to the intended recipients only.

Question 11

Which command can you use to enable or disable multi-queue per interface?

cpmq set

Cpmqueue set

Cpmq config

St cpmq enable

Question 12

When attempting to start a VPN tunnel, in the logs the error “no proposal chosen” is seen numerous times. No other VPN-related entries are present.
Which phase of the VPN negotiations has failed?

IKE Phase 1

IPSEC Phase 2

IPSEC Phase 1

IKE Phase 2

Question 13

Which command gives us a perspective of the number of kernel tables?

fw tab -t

fw tab -s

fw tab -n

fw tab -k

Question 14

In the Firewall chain mode FFF refers to:

Stateful Packets

No Match

All Packets

Stateless Packets

Question 15

Which statement is most correct regarding about “CoreXL Dynamic Dispatcher”?

The CoreXL FW instances assignment mechanism is based on Source MAC addresses, Destination MAC addresses

The CoreXL FW instances assignment mechanism is based on the utilization of CPU cores

The CoreXL FW instances assignment mechanism is based on IP Protocol type

The CoreXl FW instances assignment mechanism is based on Source IP addresses, Destination IP addresses, and the IP ‘Protocol’ type

Question 16

True or False: In a Distributed Environment, a Central License can be installed via CLI on a Security Gateway.

True, CLI is the prefer method for Licensing

False, Central License are handled via Security Management Server

False, Central Licenses are installed via Gaia on Security Gateways

True, Central License can be installed with CPLIC command on a Security Gateway

Question 17

Advanced Security Checkups can be easily conducted within:

Reports

Advanced

Checkups

Views

Summary

Question 18

Which of the following is NOT a component of Check Point Capsule?

Capsule Docs

Capsule Cloud

Capsule Enterprise

Capsule Workspace

Page: 1 / 35

Total 428 questions Full Exam Access