156-315.81 CheckPoint Exam Questions and Free Practice Test

Question 61

- (Exam Topic 2)
Using ClusterXL, what statement is true about the Sticky Decision Function?

A. Can only be changed for Load Sharing implementations

B. All connections are processed and synchronized by the pivot

C. Is configured using cpconfig

D. Is only relevant when using SecureXL

Correct Answer:A

Question 62

- (Exam Topic 4)
What does Backward Compatibility mean upgrading the Management Server and how can you check it?

A. The Management Server is able to manage older Gateway

B. The lowest supported version is documented in the Installation and Upgrade Guide

C. The Management Server is able to manage older Gateways The lowest supported version is documented in the Release Notes

D. You will be able to connect to older Management Server with the SmartConsol

E. The lowest supported version is documented in the Installation and Upgrade Guide

F. You will be able to connect to older Management Server with the SmartConsole The lowest supported version is documented in the Release Notes

Correct Answer:A

Question 63

- (Exam Topic 4)
What state is the Management HA in when both members have different policies/databases?

A. Synchronized

B. Never been synchronized

C. Lagging

D. Collision

Correct Answer:D
https://sc1.checkpoint.com/documents/R77/CP_R77_SecurityManagement_WebAdminGuide/ html_frameset.htm?topic=documents/R77/CP_R77_SecurityManagement_WebAdminGuide/98838

Question 64

- (Exam Topic 1)
The Firewall kernel is replicated multiple times, therefore:

A. The Firewall kernel only touches the packet if the connection is accelerated

B. The Firewall can run different policies per core

C. The Firewall kernel is replicated only with new connections and deletes itself once the connection times out

D. The Firewall can run the same policy on all cores.

Correct Answer:D
On a Security Gateway with CoreXL enabled, the Firewall kernel is replicated multiple times. Each replicated copy, or instance, runs on one processing core. These instances handle traffic concurrently, and each instance is a complete and independent inspection kernel. When CoreXL is enabled, all the kernel instances in the Security Gateway process traffic through the same interfaces and apply the same security policy.

Question 65

- (Exam Topic 2)
You are investigating issues with to gateway cluster members are not able to establish the first initial cluster
synchronization. What service is used by the FWD daemon to do a Full Synchronization?

A. TCP port 443

B. TCP port 257

C. TCP port 256

D. UDP port 8116

Correct Answer:C

Question 66

- (Exam Topic 4)
Packet acceleration (SecureXL) identifies connections by several attributes- Which of the attributes is NOT used for identifying connection?

A. Source Address

B. Destination Address

C. TCP Acknowledgment Number

D. Source Port

Correct Answer:C
https //sc1.checkpoint.com/documents/R77/CP R77_Firewall_WebAdmm/92711.htm

START 156-315.81 EXAM