156-315.81 CheckPoint Exam Questions and Free Practice Test

Question 31

- (Exam Topic 3)
The SmartEvent R81 Web application for real-time event monitoring is called:

A. SmartView Monitor

B. SmartEventWeb

C. There is no Web application for SmartEvent

D. SmartView

Correct Answer:B

Question 32

- (Exam Topic 4)
What is a possible command to delete all of the SSH connections of a gateway?

A. fw sam -I dport 22

B. fw ctl conntab -x -dpott=22

C. fw tab -t connections -x -e 00000016

D. fwaccel dos config set dport ssh

Correct Answer:A

Question 33

- (Exam Topic 4)
D18912E1457D5D1DDCBD40AB3BF70D5D
The system administrator of a company is trying to find out why acceleration is not working for the traffic. The traffic is allowed according to the rule based and checked for viruses. But it is not accelerated. What is the most likely reason that the traffic is not accelerated?

A. The connection is destined for a server within the network

B. The connection required a Security server

C. The packet is the second in an established TCP connection

D. The packets are not multicast

Correct Answer:B

Question 34

- (Exam Topic 4)
John detected high load on sync interface. Which is most recommended solution?

A. For FTP connections – do not sync

B. Add a second interface to handle sync traffic

C. For short connections like http service – do not sync

D. For short connections like icmp service – delay sync for 2 seconds

Correct Answer:A

Question 35

- (Exam Topic 2)
What is the command to check the status of the SmartEvent Correlation Unit?

A. fw ctl get int cpsead_stat

B. cpstat cpsead

C. fw ctl stat cpsemd

D. cp_conf get_stat cpsemd

Correct Answer:B

Question 36

- (Exam Topic 3)
Pamela is Cyber Security Engineer working for Global Instance Firm with large scale deployment of Check Point Enterprise Appliances using GAiA/R81.10. Company’s Developer Team is having random access issue to newly deployed Application Server in DMZ’s Application Server Farm Tier and blames DMZ Security Gateway as root cause. The ticket has been created and issue is at Pamela’s desk for an investigation. Pamela decides to use Check Point’s Packet Analyzer Tool-fw monitor to iron out the issue during approved Maintenance window.
What do you recommend as the best suggestion for Pamela to make sure she successfully captures entire traffic in context of Firewall and problematic traffic?

A. Pamela should check SecureXL status on DMZ Security gateway and if it’s turned O

B. She should turn OFF SecureXL before using fw monitor to avoid misleading traffic captures.

C. Pamela should check SecureXL status on DMZ Security Gateway and if it’s turned OF

D. She should turn ON SecureXL before using fw monitor to avoid misleading traffic captures.

E. Pamela should use tcpdump over fw monitor tool as tcpdump works at OS-level and captures entire traffic.

F. Pamela should use snoop over fw monitor tool as snoop works at NIC driver level and captures entire traffic.

Correct Answer:A

START 156-315.81 EXAM