Renovate Check Point Certified Security Expert - R80 156-315.80 Actual Exam

NEW QUESTION 1
With Mobile Access enabled, administrators select the web-based and native applications that can be accessed by remote users and define the actions that users can perform the applications. Mobile Access encrypts all traffic using:

• A. HTTPS for web-based applications and 3DES or RC4 algorithm for native application
• B. For end users to access the native applications, they need to install the SSL Network Extender.
• C. HTTPS for web-based applications and AES or RSA algorithm for native application
• D. For end users to access the native application, they need to install the SSL Network Extender.
• E. HTTPS for web-based applications and 3DES or RC4 algorithm for native application
• F. For end users to access the native applications, no additional software is required.
• G. HTTPS for web-based applications and AES or RSA algorithm for native application
• H. For end users to access the native application, no additional software is required.

Answer: A

NEW QUESTION 2
To fully enable Dynamic Dispatcher on a Security Gateway:

• A. run fw ctl multik set_mode 9 in Expert mode and then Reboot.
• B. Using cpconfig, update the Dynamic Dispatcher value to “full” under the CoreXL menu.
• C. Edit/proc/interrupts to include multik set_mode 1 at the bottom of the file, save, and reboot.
• D. run fw multik set_mode 1 in Expert mode and then reboot.

Answer: A

NEW QUESTION 3
Check Point ClusterXL Active/Active deployment is used when:

• A. Only when there is Multicast solution set up.
• B. There is Load Sharing solution set up.
• C. Only when there is Unicast solution set up.
• D. There is High Availability solution set up.

Answer: D

NEW QUESTION 4
Which software blade does NOT accompany the Threat Prevention policy?

• A. Anti-virus
• B. IPS
• C. Threat Emulation
• D. Application Control and URL Filtering

Answer: D

NEW QUESTION 5
Customer’s R80 management server needs to be upgraded to R80.10. What is the best upgrade method when the management server is not connected to the Internet?

• A. Export R80 configuration, clean install R80.10 and import the configuration
• B. CPUSE offline upgrade
• C. CPUSE online upgrade
• D. SmartUpdate upgrade

Answer: C

NEW QUESTION 6
Fill in the blank: The R80 SmartConsole, SmartEvent GUI client, and _______ consolidate billions of logs and shows then as prioritized security events.

• A. SmartMonitor
• B. SmartView Web Application
• C. SmartReporter
• D. SmartTracker

Answer: B

NEW QUESTION 7
When using the Mail Transfer Agent, where are the debug logs stored?

• A. $FWDIR/bin/emaild.mt
• B. elg
• C. $FWDIR/log/mtad elg
• D. /var/log/mail.mta elg
• E. $CPDIR/log/emaild elg

Answer: A

NEW QUESTION 8
Fill in the blank: A new license should be generated and installed in all of the following situations EXCEPT when _______ .

• A. The license is attached to the wrong Security Gateway.
• B. The existing license expires.
• C. The license is upgraded.
• D. The IP address of the Security Management or Security Gateway has changed.

Answer: A

NEW QUESTION 9
In the Check Point Firewall Kernel Module, each Kernel is associated with a key, which specifies the type of traffic applicable to the chain module. For Wire Mode configuration, chain modules marked with _______ will not apply.

• A. ffff
• B. 1
• C. 2
• D. 3

Answer: B

NEW QUESTION 10
In the Check Point Security Management Architecture, which component(s) can store logs?

• A. SmartConsole
• B. Security Management Server and Security Gateway
• C. Security Management Server
• D. SmartConsole and Security Management Server

Answer: B

NEW QUESTION 11
SmartEvent does NOT use which of the following procedures to identify events:

• A. Matching a log against each event definition
• B. Create an event candidate
• C. Matching a log against local exclusions
• D. Matching a log against global exclusions

Answer: C

Explanation:
Events are detected by the SmartEvent Correlation Unit. The Correlation Unit task is to scan logs for criteria that match an Event Definition. SmartEvent uses these procedures to identify events:
• Matching a Log Against Global Exclusions
• Matching a Log Against Each Event Definition
• Creating an Event Candidate
• When a Candidate Becomes an Event References:

NEW QUESTION 12
What is true about the IPS-Blade?

• A. In R80, IPS is managed by the Threat Prevention Policy
• B. In R80, in the IPS Layer, the only three possible actions are Basic, Optimized and Strict
• C. In R80, IPS Exceptions cannot be attached to “all rules”
• D. In R80, the GeoPolicy Exceptions and the Threat Prevention Exceptions are the same

Answer: A

NEW QUESTION 13
Which path below is available only when CoreXL is enabled?

• A. Slow path
• B. Firewall path
• C. Medium path
• D. Accelerated path

Answer: C

NEW QUESTION 14
You have enabled “Full Log” as a tracking option to a security rule. However, you are still not seeing any data type information. What is the MOST likely reason?

• A. Logging has disk space issue
• B. Change logging storage options on the logging server or Security Management Server properties and install database.
• C. Data Awareness is not enabled.
• D. Identity Awareness is not enabled.
• E. Logs are arriving from Pre-R80 gateways.

Answer: A

NEW QUESTION 15
Fill in the blank: Browser-based Authentication sends users to a web page to acquire identities using ______ .

• A. User Directory
• B. Captive Portal and Transparent Kerberos Authentication
• C. Captive Portal
• D. UserCheck

Answer: B

NEW QUESTION 16
An administrator is creating an IPsec site-to-site VPN between his corporate office and branch office. Both offices are protected by Check Point Security Gateway managed by the same Security Management Server. While configuring the VPN community to specify the pre-shared secret the administrator found that the check box to enable pre-shared secret and cannot be enabled.
Why does it not allow him to specify the pre-shared secret?

• A. IPsec VPN blade should be enabled on both Security Gateway.
• B. Pre-shared can only be used while creating a VPN between a third party vendor and Check Point Security Gateway.
• C. Certificate based Authentication is the only authentication method available between two Security Gateway managed by the same SMS.
• D. The Security Gateways are pre-R75.40.

Answer: C

NEW QUESTION 17
What processes does CPM control?

• A. Object-Store, Database changes, CPM Process and web-services
• B. web-services, CPMI process, DLEserver, CPM process
• C. DLEServer, Object-Store, CP Process and database changes
• D. web_services, dle_server and object_Store

Answer: D

NEW QUESTION 18
......