156-315.81 practice questions 11–20

1. Question 11 · 336 in bank

   What are the Threat Prevention software components available on the Check Point Security Gateway?

   • AIPS, Threat Emulation and Threat Extraction
   • BIPS, Anti-Bot, Anti-Virus, SandBlast and Macro Extraction
   • CIPS, Anti-Bot, Anti-Virus, Threat Emulation and Threat Extraction
   • DIDS, Forensics, Anti-Virus, Sandboxing

   Show answer

   Answer: C

   Next question

2. Question 12 · 336 in bank

   When using Automatic Hide NAT, what is enabled by default?

   • ASource Port Address Translation (PAT)
   • BStatic NAT
   • CStatic Route
   • DHTTPS Inspection

   Show answer

   Answer: A

   Next question

3. Question 13 · 336 in bank

   In which deployment is the security management server and Security Gateway installed on the same appliance?

   • AStandalone
   • BRemote
   • CDistributed
   • DBridge Mode

   Show answer

   Answer: A

   Next question

4. Question 14 · 336 in bank

   What is the main objective when using Application Control?

   • ATo filter out specific content.
   • BTo assist the firewall blade with handling traffic.
   • CTo see what users are doing.
   • DEnsure security and privacy of information.

   Show answer

   Answer: A

   Next question

5. Question 15 · 336 in bank

   Gaia has two default user accounts that cannot be deleted. What are those user accounts?

   • AAdmin and Default
   • BExpert and Clish
   • CControl and Monitor
   • DAdmin and Monitor

   Show answer

   Answer: D

   Next question

6. Question 16 · 336 in bank

   When changes are made to a Rule base, It is important to __________ to enforce changes.

   • APublish database
   • BActivate policy
   • CInstall policy
   • DSave changes

   Show answer

   Answer: C

   Next question

7. Question 17 · 336 in bank

   Why is a Central License the preferred and recommended method of licensing?

   • ACentral Licensing actually not supported with Gaia.
   • BCentral Licensing is the only option when deploying Gala.
   • CCentral Licensing ties to the IP address of a gateway and can be changed to any gateway if needed.
   • DCentral Licensing ties to the IP address of the management server and is not dependent on the IP of any gateway in the event it changes.

   Show answer

   Answer: D

   Next question

8. Question 18 · 336 in bank

   What does the "unknown" SIC status shown on SmartConsole mean?

   • ASIC activation key requires a reset
   • BAdministrator input the wrong SIC key
   • CThe management can contact the Security Gateway but cannot establish Secure Internal Communication
   • DThere is no connection between the Security Gateway and Security Management Server

   Show answer

   Answer: D

   Next question

9. Question 19 · 336 in bank

   What are valid authentication methods for mutual authenticating the VPN gateways?

   • APKI Certificates and Kerberos Tickets
   • BPKI Certificates and DynamicID OTP
   • CPre-Shared Secrets and Kerberos Ticket
   • DPre-shared Secret and PKI Certificates

   Show answer

   Answer: D

   Next question

10. Question 20 · 336 in bank

    What are the correct steps upgrading a HA cluster (M1 is active, M2 is passive) using Multi-Version Cluster(MVC)Upgrade?

    • A1) Enable the MVC mechanism on both cluster members #cphaprob mvc on 2) Upgrade the passive node M2 to R81.10 3) In SmartConsole, change the version of the cluster object 4) Install the Access Control Policy and make sure that the installation will not stop if installation on one cluster member fails 5) After examine the cluster states upgrade node M1 to R81.10 6) On each Cluster Member, disable the MVC mechanism
    • B1) Enable the MVC mechanism on both cluster members #cphaprob mvc on 2) Upgrade the passive node M2 to R81.10 3) In SmartConsole, change the version of the cluster object 4) Install the Access Control Policy 5) After examine the cluster states upgrade node M1 to R81.10 6) On each Cluster Member, disable the MVC mechanism and Install the Access Control Policy
    • C1) In SmartConsole, change the version of the cluster object 2) Upgrade the passive node M2 to R81.10 3) Enable the MVC mechanism on the upgraded R81.10 Cluster Member M2 #cphaconf mvc on 4) Install the Access Control Policy and make sure that the installation will not stop if installation on one cluster member fails 5) After examine the cluster states upgrade node M1 to R81.10 6) On each Cluster Member, disable the MVC mechanism and Install the Access Control Policy SmartConsole, change the version of the cluster object
    • D1) Upgrade the passive node M2 to R81.10 2) Enable the MVC mechanism on the upgraded R81.10 Cluster Member M2 #cphaconf mvc on 3) In SmartConsole, change the version of the cluster object 4) Install the Access Control Policy 5) After examine the cluster states upgrade node M1 to R81.10 6) On each Cluster Member, disable the MVC mechanism and Install the Access Control Policy upgrade the passive node M2 to R81.10

    Show answer

    Answer: C

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

156-315.81 practice, question 11. 336 questions available.