100% Real & Accurate 156-315.81 Questions and Answers with Free and Fast Updates [Q351-Q373]

Rate this post

100% Real & Accurate 156-315.81 Questions and Answers with Free and Fast Updates

Get Unlimited Access to 156-315.81 Certification Exam Cert Guide

Q351. From SecureXL perspective, what are the tree paths of traffic flow:

Initial Path; Medium Path; Accelerated Path

Layer Path; Blade Path; Rule Path

Firewall Path; Accept Path; Drop Path

Firewall Path; Accelerated Path; Medium Path

SecureXL is a technology that improves the performance of Security Gateway by offloading the processing of some packets from the Firewall kernel to the SecureXL device driver1. SecureXL can handle packets in three different paths, depending on the type and state of the packet2:
Firewall Path: This is the slowest path, where packets are processed by the Firewall kernel and all the inspection blades. This path is used for packets that require full inspection, such as the first packet of a connection, packets that match a rule with a UTM blade, or packets that are not eligible for acceleration.
Accelerated Path: This is the fastest path, where packets are processed by the SecureXL device driver and bypass the Firewall kernel. This path is used for packets that belong to an established connection that is marked for acceleration, and do not require any further inspection by the Firewall or other blades.
Medium Path: This is a hybrid path, where packets are processed by both the SecureXL device driver and the Firewall kernel, but skip some inspection steps. This path is used for packets that belong to an established connection that is not marked for acceleration, but do not require full inspection by all the blades.
The other options are not correct because:
A) Initial Path; Medium Path; Accelerated Path: There is no such thing as Initial Path in SecureXL terminology. The initial packet of a connection is always handled by the Firewall Path.
B) Layer Path; Blade Path; Rule Path: These are not paths of traffic flow, but components of the unified policy in R80 and above versions. The Layer Path refers to the order of layers in the policy, the Blade Path refers to the order of blades within a layer, and the Rule Path refers to the order of rules within a blade3.
C) Firewall Path; Accept Path; Drop Path: These are not paths of traffic flow, but possible actions that the Firewall can take on a packet. The Firewall Path is one of the paths of traffic flow, but the Accept Path and Drop Path are not. The Accept Path means that the packet is allowed to pass through the Firewall, and the Drop Path means that the packet is blocked by the Firewall4.

Q352. Which of the following authentication methods ARE NOT used for Mobile Access?

RADIUS server

Username and password (internal, LDAP)

SecurID

TACACS+

Q353. What is the recommended configuration when the customer requires SmartLog indexing for 14 days and SmartEvent to keep events for 180 days?

Use Multi-Domain Management Server.

Choose different setting for log storage and SmartEvent db

Install Management and SmartEvent on different machines.

it is not possible.

Q354. UserCheck objects in the Application Control and URL Filtering rules allow the gateway to communicate with the users. Which action is not supported in UserCheck objects?

Ask

Drop

Inform

Reject

Q355. With SecureXL enabled, accelerated packets will pass through the following:

Network Interface Card, OSI Network Layer, OS IP Stack, and the Acceleration Device

Network Interface Card, Check Point Firewall Kernal, and the Acceleration Device

Network Interface Card and the Acceleration Device

Network Interface Card, OSI Network Layer, and the Acceleration Device

Q356. What kind of information would you expect to see using the sim affinity command?

The VMACs used in a Security Gateway cluster

The involved firewall kernel modules in inbound and outbound packet chain

Overview over SecureXL templated connections

Network interfaces and core distribution used for CoreXL

Q357. What two ordered layers make up the Access Control Policy Layer?

URL Filtering and Network

Network and Threat Prevention

Application Control and URL Filtering

Network and Application Control

Q358. As a valid Mobile Access Method, what feature provides Capsule Connect/VPN?

That is used to deploy the mobile device as a generator of one-time passwords for authenticating to an RSA Authentication Manager.

Fill Layer4 VPN -SSL VPN that gives users network access to all mobile applications.

Full Layer3 VPN -IPSec VPN that gives users network access to all mobile applications.

You can make sure that documents are sent to the intended recipients only.

Q359. Identity Awareness lets an administrator easily configure network access and auditing based on three items.
Choose the correct statement.

Network location, the identity of a user and the identity of a machine.

Geographical location, the identity of a user and the identity of a machine.

Network location, the identity of a user and the active directory membership.

Network location, the telephone number of a user and the UID of a machine.

Q360. What are possible Automatic Reactions in SmartEvent?

Mail. SNMP Trap, Block Source. Block Event Activity, External Script

Web Mail. Block Destination, SNMP Trap. SmartTask

Web Mail, Block Service. SNMP Trap. SmartTask, Geo Protection

Web Mail, Forward to SandBlast Appliance, SNMP Trap, External Script

Q361. What does it mean if Deyra sees the gateway status? (Choose the BEST answer.)

SmartCenter Server cannot reach this Security Gateway.

There is a blade reporting a problem.

VPN software blade is reporting a malfunction.

Security Gateway’s MGNT NIC card is disconnected.

Q362. SmartConsole R81 requires the following ports to be open for SmartEvent R81 management:

19090,22

19190,22

18190,80

19009,443

Q363. You have a Geo-Protection policy blocking Australia and a number of other countries. Your network now requires a Check Point Firewall to be installed in Sydney, Australia.
What must you do to get SIC to work?

Remove Geo-Protection, as the IP-to-country database is updated externally, and you have no control of this.

Create a rule at the top in the Sydney firewall to allow control traffic from your network

Nothing – Check Point control connections function regardless of Geo-Protection policy

Create a rule at the top in your Check Point firewall to bypass the Geo-Protection

Q364. In which VPN community is a satellite VPN gateway not allowed to create a VPN tunnel with another satellite VPN gateway?

Pentagon

Combined

Meshed

Star

Q365. An administrator wishes to enable Identity Awareness on the Check Point firewalls. However, they allow users to use company issued or personal laptops. Since the administrator cannot manage the personal laptops, which of the following methods would BEST suit this company?

AD Query

Terminal Servers Agent

Identity Agents

Browser-Based Authentication

Q366. What is the base level encryption key used by Capsule Docs?

RSA 2048

RSA 1024

SHA-256

AES

Q367.

You are the administrator for ABC Corp. You have logged into your R81 Management server. You are making some changes in the Rule Base and notice that rule No.6 has a pencil icon next to it.
What does this mean?

This rule No. 6 has been marked for deletion in your Management session.

This rule No. 6 has been marked for deletion in another Management session.

This rule No. 6 has been marked for editing in your Management session.

This rule No. 6 has been marked for editing in another Management session.

Q368. Which method below is NOT one of the ways to communicate using the Management API’s?

Typing API commands using the “mgmt_cli” command

Typing API commands from a dialog box inside the SmartConsole GUI application

Typing API commands using Gaia’s secure shell(clish)19+

Sending API commands over an http connection using web-services

Q369. To fully enable Dynamic Dispatcher with Firewall Priority Queues on a Security Gateway, run the following command in Expert mode then reboot:

fw ctl multik set_mode 1

fw ctl Dynamic_Priority_Queue on

fw ctl Dynamic_Priority_Queue enable

fw ctl multik set_mode 9

Q370. Check Point Support in many cases asks you for a configuration summary of your Check Point system. This is also called:

cpexport

sysinfo

cpsizeme

cpinfo

Q371. Which two Identity Awareness daemons are used to support identity sharing?

Policy Activation Point (PAP) and Policy Decision Point (PDP)

Policy Manipulation Point (PMP) and Policy Activation Point (PAP)

Policy Enforcement Point (PEP) and Policy Manipulation Point (PMP)

Policy Decision Point (PDP) and Policy Enforcement Point (PEP)

Q372. You plan to automate creating new objects using new R81 Management API. You decide to use GAIA CLI for this task.
What is the first step to run management API commands on GAIA’s shell?

mgmt_admin@teabag > id.txt

mgmt_login

mgmt_cli login user “admin” password “teabag” > id.txt

Q373. What is the command to check the status of Check Point processes?

top

cptop

cphaprob list

cpwd_admin list