156-315.81 practice questions 251–260

1. Question 251 · 336 in bank

   To find records in the logs that shows log records from the Application URL Filtering Software Blade where traffic was dropped, what would be the query syntax?

   • Ablade:"application control" AND action:drop
   • Bblade;"application control" AND action;drop
   • Cblade: application control AND action:drop
   • D(blade: application control AND action;drop)

   Show answer

   Answer: A

   Next question

2. Question 252 · 336 in bank

   When an encrypted packet is decrypted, where does this happen?

   • AInbound chain
   • BOutbound chain
   • CSecurity policy
   • DDecryption is not supported

   Show answer

   Answer: A

   Next question

3. Question 253 · 336 in bank

   Which Check Point daemon invokes and monitors critical processes and attempts to restart them if they fail?

   • Afwm
   • Bcpd
   • Ccpm
   • Dcpwd

   Show answer

   Answer: D

   Next question

4. Question 254 · 336 in bank

   What is the SandBlast Agent designed to do?

   • AEnsure the Check Point SandBlast services is running on the end user's system
   • BClean up email sent with malicious attachments
   • CIf malware enters an end user's system, the SandBlast Agent prevents the malware from spreading with the network
   • DPerforms OS-level sandboxing for SandBlast Cloud architecture

   Show answer

   Answer: C

   Next question

5. Question 255 · 336 in bank

   After replacing a faulty Gateway the admin installed the new Hardware and want to push the policy. Installing the policy using the SmartConsole he got an Error for the Threat Prevention Policy. There is no error for the Access Control Policy. What will be the most common cause for the issue?

   • AThe admin forgot to reestablish the SIC for the new hardware. That is typically the case when configure only the interfaces of the replacement hardware instead restoring a backup.
   • BThe IPS Protection engine on the replacement hardware is too old. Before pushing the Threat Prevention Policy use SmartConsole -> Security Policies -> Updates -> IPS 'Update Now' to update the engine.
   • CThe admin forgot to apply the new license. The Access Control license is included by default but the service subscriptions for the Threat Prevention Blades are missing.
   • DThe Threat Prevention Policy can't be installed on a Gateway without an already installed Access Control Policy. First install only the Access Control Policy.

   Show answer

   Answer: D

   Next question

6. Question 256 · 336 in bank

   Which one of the following is true about Threat Extraction?

   • ATakes minutes to complete (less than 3 minutes)
   • BTakes less than a second to complete
   • CWorks on MS Office and PDF files only
   • DAlways delivers a file

   Show answer

   Answer: D

   Next question

7. Question 257 · 336 in bank

   In Advanced Permanent Tunnel Configuration, to set the amount of time the tunnel test runs without a response before the peer host is declared 'down', you would set the_______ ?

   • Alife sign polling interval
   • Blife sign timeout
   • Clife_sign_timeout
   • Dlife_sign_polling_interval

   Show answer

   Answer: C

   Next question

8. Question 258 · 336 in bank

   Which file contains the host address to be published, the MAC address that needs to be associated with the IP Address, and the unique IP of the interface that responds to ARP request?

   • A/var/opt/CPshrd-R80/conf/local.arp
   • B/opt/CPshrd-R80/conf/local.arp
   • C$CPDIR/conf/local.arp
   • D$FWDIR/conf/local.arp

   Show answer

   Answer: D

   Next question

9. Question 259 · 336 in bank

   What is the recommended configuration when the customer requires SmartLog indexing for 14 days and SmartEvent to keep events for 180 days?

   • AIt is not possible
   • BUse Multi-Domain Management Server
   • CChoose different setting for log storage and SmartEvent db
   • DInstall Management and SmartEvent on different machines

   Show answer

   Answer: C

   Next question

10. Question 260 · 336 in bank

    You want to set up a VPN tunnel to an external gateway. You had to make sure that the IKE P2 SA will only be established between two subnets and not all subnets defined in the default VPN domain of your gateway.

    • AIn the SmartConsole create a dedicated VPN Community for both Gateways. On the Gateway add the following line to the $FWDIR/conf/user.def.FW1 file -> subnet_for_range_and_peer = { };
    • BIn the SmartConsole create a dedicated VPN Community for both Gateways. Go to Security Policies /Access Control and create an in-line layer rule with source and destination containing the two networks used for the IKE P2 SA. Put the name of the Community in the VPN column.
    • CIn the SmartConsole create a dedicated VPN Community for both Gateways. Selecting the local gateway in the Community you can set the VPN Domain to 'User defined' and put in the local network.
    • DIn the SmartConsole create a dedicated VPN Community for both Gateways. On the Management add the following line to the $FWDIR/conf/user.def.FW1 file -> subnet_for_range_and_peer = { };

    Show answer

    Answer: C

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

156-315.81 practice, question 251. 336 questions available.