156-215.81 CheckPoint Exam Questions and Free Practice Test

Question 91

You noticed that CPU cores on the Security Gateway are usually 100% utilized and many packets were dropped. You don’t have a budget to perform a hardware upgrade at this time. To optimize drops you decide to use Priority Queues and fully enable Dynamic Dispatcher. How can you enable them?

A. fw ctl multik dynamic_dispatching on

B. fw ctl multik dynamic_dispatching set_mode 9

C. fw ctl multik set_mode 9

D. fw ctl miltik pq enable

Correct Answer:C

Question 92

In a Distributed deployment, the Security Gateway and the Security Management software are installed on what platforms?

A. Different computers or appliances.

B. The same computer or appliance.

C. Both on virtual machines or both on appliances but not mixed.

D. In Azure and AWS cloud environments.

Correct Answer:A
"The Security Management ServerClosed (1) and the Security GatewayClosed (3) are installed on different computers, with a network connection (2)." https://sc1.checkpoint.com/documents/R81/WebAdminGuides/EN/CP_R81_Installation_and_Upgrade_Guide/T

Question 93

What is a reason for manual creation of a NAT rule?

A. In R80 all Network Address Translation is done automatically and there is no need for manually defined NAT-rules.

B. Network Address Translation of RFC1918-compliant networks is needed to access the Internet.

C. Network Address Translation is desired for some services, but not for others.

D. The public IP-address is different from the gateway’s external IP

Correct Answer:D

Question 94

Which of the following is NOT supported by Bridge Mode on the Check Point Security Gateway?

A. Data Loss Prevention

B. Antivirus

C. Application Control

D. NAT

Correct Answer:D
NAT rules (specifically, Firewall kernel in logs shows the traffic as accepted, but Security Gateway does not actually forward it). For more information, see sk106146. https://sc1.checkpoint.com/documents/R81/WebAdminGuides/EN/CP_R81_Installation_and_Upgrade_Guide/T

Question 95

How Capsule Connect and Capsule Workspace differ?

A. Capsule Connect provides a Layer3 VP

B. Capsule Workspace provides a Desktop with usable applications

C. Capsule Workspace can provide access to any application

D. Capsule Connect provides Business data isolation

E. Capsule Connect does not require an installed application at client

Correct Answer:A

START 156-215.81 EXAM