156-315.81 CheckPoint Exam Questions and Free Practice Test

Question 37

- (Exam Topic 1)
Which one of these features is NOT associated with the Check Point URL Filtering and Application Control Blade?

A. Detects and blocks malware by correlating multiple detection engines before users are affected.

B. Configure rules to limit the available network bandwidth for specified users or groups.

C. Use UserCheck to help users understand that certain websites are against the company’s security policy.

D. Make rules to allow or block applications and Internet sites for individual applications, categories, and risk levels.

Correct Answer:A

Question 38

- (Exam Topic 1)
When requiring certificates for mobile devices, make sure the authentication method is set to one of the following, Username and Password, RADIUS or ______.

A. SecureID

B. SecurID

C. Complexity

D. TacAcs

Correct Answer:B

Question 39

- (Exam Topic 3)
The essential means by which state synchronization works to provide failover in the event an active member goes down, _______ is used specifically for clustered environments to allow gateways to report their own state and learn about the states of other members in the cluster.

A. ccp

B. cphaconf

C. cphad

D. cphastart

Correct Answer:A

Question 40

- (Exam Topic 2)
How do you enable virtual mac (VMAC) on-the-fly on a cluster member?

A. cphaprob set int fwha_vmac_global_param_enabled 1

B. clusterXL set int fwha_vmac_global_param_enabled 1

C. fw ctl set int fwha_vmac_global_param_enabled 1

D. cphaconf set int fwha_vmac_global_param_enabled 1

Correct Answer:C

Question 41

- (Exam Topic 4)
Due to high CPU workload on the Security Gateway, the security administrator decided to purchase a new multicore CPU to replace the existing single core CPU. After installation, is the administrator required to perform any additional tasks?

A. After upgrading the hardware, increase the number of kernel instances using cpconfig

B. Hyperthreading must be enabled in the bios to use CoreXL

C. Run cprestart from dish

D. Administrator does not need to perform any tas

E. Check Point will make use of the newly installed CPU and Cores.

Correct Answer:A
https://sc1.checkpoint.com/documents/R80.40/WebAdminGuides/EN/CP_R80.40_PerformanceTuning_AdminG R81
https://sc1.checkpoint.com/documents/R81/WebAdminGuides/EN/CP_R81_PerformanceTuning_AdminGuide/ cpconfig -> Enter the number of the Check Point CoreXL option. ( Enter 1 to select Change the number of firewall instances. OR Enter 2 for the option Change the number of IPv6 firewall instances.) -> Enter the total number of IPv4 (IPv6) CoreXL Firewall instances you wish the Security Gateway to run. Follow the instructions on the screen. -> Exit from the cpconfig menu. - Reboot the Security Gateway.

Question 42

- (Exam Topic 2)
How would you deploy TE250X Check Point appliance just for email traffic and in-line mode without a Check Point Security Gateway?

A. Install appliance TE250X on SpanPort on LAN switch in MTA mode.

B. Install appliance TE250X in standalone mode and setup MTA.

C. You can utilize only Check Point Cloud Services for this scenario.

D. It is not possible, always Check Point SGW is needed to forward emails to SandBlast appliance.

Correct Answer:C

START 156-315.81 EXAM