Most Up-to-date Check Point Certified Security Expert - R80 156-315.80 Brain Dumps

NEW QUESTION 1
You find one of your cluster gateways showing “Down” when you run the “cphaprob stat” command. You then run the “clusterXL_admin up” on the down member but unfortunately the member continues to show down. What command do you run to determine the cause?

• A. cphaprob –f register
• B. cphaprob –d –s report
• C. cpstat –f all
• D. cphaprob –a list

Answer: D

NEW QUESTION 2
What is mandatory for ClusterXL to work properly?

• A. The number of cores must be the same on every participating cluster node
• B. The Magic MAC number must be unique per cluster node
• C. The Sync interface must not have an IP address configured
• D. If you have “Non-monitored Private” interfaces, the number of those interfaces must be the same on all cluster members

Answer: B

NEW QUESTION 3
How do Capsule Connect and Capsule Workspace differ?

• A. Capsule Connect provides a Layer3 VP
• B. Capsule Workspace provides a Desktop with usable applications.
• C. Capsule Workspace can provide access to any application.
• D. Capsule Connect provides Business data isolation.
• E. Capsule Connect does not require an installed application at client.

Answer: A

NEW QUESTION 4
Which is the least ideal Synchronization Status for Security Management Server High Availability deployment?

• A. Synchronized
• B. Never been synchronized
• C. Lagging
• D. Collision

Answer: D

NEW QUESTION 5
Which process handles connection from SmartConsole R80?

• A. fwm
• B. cpmd
• C. cpm
• D. cpd

Answer: C

NEW QUESTION 6
What will SmartEvent automatically define as events?

• A. Firewall
• B. VPN
• C. IPS
• D. HTTPS

Answer: C

NEW QUESTION 7
Which command would disable a Cluster Member permanently?

• A. clusterXL_admin down
• B. cphaprob_admin down
• C. clusterXL_admin down-p
• D. set clusterXL down-p

Answer: C

NEW QUESTION 8
What scenario indicates that SecureXL is enabled?

• A. Dynamic objects are available in the Object Explorer
• B. SecureXL can be disabled in cpconfig
• C. fwaccel commands can be used in clish
• D. Only one packet in a stream is seen in a fw monitor packet capture

Answer: C

NEW QUESTION 9
Check Point Management (cpm) is the main management process in that it provides the architecture for a consolidated management console. It empowers the migration from legacy Client-side logic to Server-side logic. The cpm process:

• A. Allow GUI Client and management server to communicate via TCP Port 19001
• B. Allow GUI Client and management server to communicate via TCP Port 18191
• C. Performs database tasks such as creating, deleting, and modifying objects and compiling policy.
• D. Performs database tasks such as creating, deleting, and modifying objects and compiling as well as policy code generation.

Answer: C

NEW QUESTION 10
Which file gives you a list of all security servers in use, including port number?

• A. $FWDIR/conf/conf.conf
• B. $FWDIR/conf/servers.conf
• C. $FWDIR/conf/fwauthd.conf
• D. $FWDIR/conf/serversd.conf

Answer: C

NEW QUESTION 11
For best practices, what is the recommended time for automatic unlocking of locked admin accounts?

• A. 20 minutes
• B. 15 minutes
• C. Admin account cannot be unlocked automatically
• D. 30 minutes at least

Answer: D

NEW QUESTION 12
What statement best describes the Proxy ARP feature for Manual NAT in R80.10?

• A. Automatic proxy ARP configuration can be enabled
• B. Translate Destination on Client Side should be configured
• C. fw ctl proxy should be configured
• D. local.arp file must always be configured

Answer: D

NEW QUESTION 13
Which one of the following is true about Capsule Connect?

• A. It is a full layer 3 VPN client
• B. It offers full enterprise mobility management
• C. It is supported only on iOS phones and Windows PCs
• D. It does not support all VPN authentication methods

Answer: A

NEW QUESTION 14
The _______ software blade package uses CPU-level and OS-level sandboxing in order to detect and block malware.

• A. Next Generation Threat Prevention
• B. Next Generation Threat Emulation
• C. Next Generation Threat Extraction
• D. Next Generation Firewall

Answer: B

NEW QUESTION 15
When deploying SandBlast, how would a Threat Emulation appliance benefit from the integration of ThreatCloud?

• A. ThreatCloud is a database-related application which is located on-premise to preserve privacy of company-related data
• B. ThreatCloud is a collaboration platform for all the CheckPoint customers to form a virtual cloud consisting of a combination of all on-premise private cloud environments
• C. ThreatCloud is a collaboration platform for Check Point customers to benefit from VMWare ESXi infrastructure which supports the Threat Emulation Appliances as virtual machines in the EMC Cloud
• D. ThreatCloud is a collaboration platform for all the Check Point customers to share information about malicious and benign files that all of the customers can benefit from as it makes emulation of known files unnecessary

Answer: D

NEW QUESTION 16
If an administrator wants to add manual NAT for addresses now owned by the Check Point firewall, what else is necessary to be completed for it to function properly?

• A. Nothing - the proxy ARP is automatically handled in the R80 version
• B. Add the proxy ARP configurations in a file called /etc/conf/local.arp
• C. Add the proxy ARP configurations in a file called $FWDIR/conf/local.arp
• D. Add the proxy ARP configurations in a file called $CPDIR/conf/local.arp

Answer: D

NEW QUESTION 17
Fill in the blanks. There are________ types of software containers: ________.

• A. Three; security management, Security Gateway, and endpoint security
• B. Three; Security Gateway, endpoint security, and gateway management
• C. Two; security management and endpoint security
• D. Two; endpoint security and Security Gateway

Answer: A

NEW QUESTION 18
......