The Up To The Immediate Present Guide To 156-315.80 Testing Engine

NEW QUESTION 1
What is the purpose of a SmartEvent Correlation Unit?

• A. The SmartEvent Correlation Unit is designed to check the connection reliability from SmartConsole to the SmartEvent Server.
• B. The SmartEvent Correlation Unit’s task it to assign severity levels to the identified events.
• C. The Correlation unit role is to evaluate logs from the log server component to identify patterns/threats and convert them to events.
• D. The SmartEvent Correlation Unit is designed to check the availability of the SmartReporter Server.

Answer: C

NEW QUESTION 2
In R80 spoofing is defined as a method of:

• A. Disguising an illegal IP address behind an authorized IP address through Port Address Translation.
• B. Hiding your firewall from unauthorized users.
• C. Detecting people using false or wrong authentication logins
• D. Making packets appear as if they come from an authorized IP address.

Answer: D

Explanation:
IP spoofing replaces the untrusted source IP address with a fake, trusted one, to hijack connections to your network. Attackers use IP spoofing to send malware and bots to your protected network, to execute DoS attacks, or to gain unauthorized access.

NEW QUESTION 3
Which one of these features is NOT associated with the Check Point URL Filtering and Application Control Blade?

• A. Detects and blocks malware by correlating multiple detection engines before users are affected.
• B. Configure rules to limit the available network bandwidth for specified users or groups.
• C. Use UserCheck to help users understand that certain websites are against the company’s security policy.
• D. Make rules to allow or block applications and Internet sites for individual applications, categories, and risk levels.

Answer: A

NEW QUESTION 4
Fill in the blank: The command _______ provides the most complete restoration of a R80 configuration.

• A. upgrade_import
• B. cpconfig
• C. fwm dbimport -p <export file>
• D. cpinfo –recover

Answer: A

NEW QUESTION 5
SandBlast appliances can be deployed in the following modes:

• A. using a SPAN port to receive a copy of the traffic only
• B. detect only
• C. inline/prevent or detect
• D. as a Mail Transfer Agent and as part of the traffic flow only

Answer: C

NEW QUESTION 6
Which one of the following is true about Threat Extraction?

• A. Always delivers a file to user
• B. Works on all MS Office, Executables, and PDF files
• C. Can take up to 3 minutes to complete
• D. Delivers file only if no threats found

Answer: A

NEW QUESTION 7
Which one of the following is true about Threat Emulation?

• A. Takes less than a second to complete
• B. Works on MS Office and PDF files only
• C. Always delivers a file
• D. Takes minutes to complete (less than 3 minutes)

Answer: D

NEW QUESTION 8
Fill in the blanks: Gaia can be configured using the ________ or _______.

• A. GaiaUI; command line interface
• B. WebUI; Gaia Interface
• C. Command line interface; WebUI
• D. Gaia Interface; GaiaUI

Answer: C

NEW QUESTION 9
Which of the following is NOT a type of Endpoint Identity Agent?

• A. Terminal
• B. Light
• C. Full
• D. Custom

Answer: A

NEW QUESTION 10
During the Check Point Stateful Inspection Process, for packets that do not pass Firewall Kernel Inspection and are rejected by the rule definition, packets are:

• A. Dropped without sending a negative acknowledgment
• B. Dropped without logs and without sending a negative acknowledgment
• C. Dropped with negative acknowledgment
• D. Dropped with logs and without sending a negative acknowledgment

Answer: D

NEW QUESTION 11
Sieve is a Cyber Security Engineer working for Global Bank with a large scale deployment of Check Point Enterprise Appliances Steve's manager. Diana asks him to provide firewall connection table details from one of the firewalls for which he is responsible. Which of these commands may impact performance briefly and should not be used during heavy traffic times of day?

• A. fw tab -t connections -s
• B. fw tab -t connections
• C. fw tab -t connections -c
• D. fw tab -t connections -f

Answer: B

NEW QUESTION 12
Check Point APIs allow system engineers and developers to make changes to their organization’s security policy with CLI tools and Web Services for all the following except:

• A. Create new dashboards to manage 3rd party task
• B. Create products that use and enhance 3rd party solutions
• C. Execute automated scripts to perform common tasks
• D. Create products that use and enhance the Check Point Solution

Answer: A

Explanation:
Check Point APIs let system administrators and developers make changes to the security policy with CLI tools and web-services. You can use an API to:
• Use an automated script to perform common tasks
• Integrate Check Point products with 3rd party solutions
• Create products that use and enhance the Check Point solution References:

NEW QUESTION 13
If there are two administration logged in at the same time to the SmartConsole, and there are objects locked for editing, what must be done to make them available or other administrators? (Choose the BEST answer.)

• A. Publish or discard the session.
• B. Revert the session.
• C. Save and install the Policy.
• D. Delete older versions of database.

Answer: A

NEW QUESTION 14
What Factor preclude Secure XL Templating?

• A. Source Port Ranges/Encrypted Connections
• B. IPS
• C. ClusterXL in load sharing Mode
• D. CoreXL

Answer: A

NEW QUESTION 15
In R80.10, how do you manage your Mobile Access Policy?

• A. Through the Unified Policy
• B. Through the Mobile Console
• C. From SmartDashboard
• D. From the Dedicated Mobility Tab

Answer: A

NEW QUESTION 16
SandBlast agent extends 0 day prevention to what part of the network?

• A. Web Browsers and user devices
• B. DMZ server
• C. Cloud
• D. Email servers

Answer: A

NEW QUESTION 17
To accelerate the rate of connection establishment, SecureXL groups all connection that match a particular service and whose sole differentiating element is the source port. The type of grouping enables even the very first packets of a TCP handshake to be accelerated. The first packets of the first connection on the same service will be forwarded to the Firewall kernel which will then create a template of the connection. Which of the these is NOT a SecureXL template?

• A. Accept Template
• B. Deny Template
• C. Drop Template
• D. NAT Template

Answer: B

NEW QUESTION 18
......