156-315.81 practice questions 261–270

1. Question 261 · 336 in bank

   When using the Mail Transfer Agent, where are the debug logs stored?

   • A$FWDIR/bin/emaild.mta.elg
   • B/var/log/mail.mta.elg
   • C$FWDIR/log/mtad.elg
   • D$CPDIR/log/emaild.elg

   Show answer

   Answer: C

   Next question

2. Question 262 · 336 in bank

   With SecureXL enabled, accelerated packets will pass through the following:

   • ANetwork Interface Card, OSI Network Layer, and the Acceleration Device
   • BNetwork Interface Card, Check Point Firewall Kernel, and the AccelerationDevice
   • CNetwork InterfaceCard and the Acceleration Device
   • DNetwork Interface Card, OSI Network Layer, OS IP Stack, and the Acceleration Device

   Show answer

   Answer: C

   Next question

3. Question 263 · 336 in bank

   Which of the following statements about SecureXL NAT Templates is true?

   • ANAT Templates are generated to achieve high session rate for NAT. These templates store the NAT attributes of connections matched by rulebase so that similar new connections can take advantage of this information and do NAT without the expensive rulebase lookup. These are enabled by default and work only if Accept Templates are enabled.
   • BDROP Templates are generated to achieve high session rate for NAT. These templates store the NAT attributes of connections matched by rulebase so that similar new connections can take advantage of this information and do NAT without the expensive rulebase lookup. These are disabled by default and work only if NAT Templates are disabled.
   • CNAT Templates are generated to achieve high session rate for NAT. These templates store the NAT attributes of connections matched by rulebase so that similar new connections can take advantage of this information and do NAT without the expensive rulebase lookup. These are disabled by default and work only if Accept Templates are disabled.
   • DACCEPT Templates are generated to achieve high session rate for NAT. These templates store the NAT attributes of connections matched by rulebase so that similar new connections can take advantage of this information and do NAT without the expensive rulebase lookup. These are disabled by default and work only if NAT Templates are disabled.

   Show answer

   Answer: A

   Next question

4. Question 264 · 336 in bank

   Which NAT rules are prioritized first?

   • AManual Post-Automatic NAT Rules
   • BAutomatic Hide NAT Rules
   • CManual Pre-Automatic NAT Rules
   • DAutomatic Static NAT Rules

   Show answer

   Answer: C

   Next question

5. Question 265 · 336 in bank

   What is the best method to upgrade a Security Management Server to R80.x when it is not connected to the Internet?

   • ASmartUpdate offline upgrade
   • BAdvanced upgrade or CPUSE offline upgrade
   • CAdvanced upgrade or CPUSE offline upgrade only
   • DAdvanced Upgrade only

   Show answer

   Answer: B

   Next question

6. Question 266 · 336 in bank

   Check Point APIs allow system engineers and developers to make changes to their organization’s security policy with CLI tools and Web Services. Which of the following is NOT a possible use case?

   • ACreate products that use and enhance 3rd party solutions.
   • BCreate new dashboards to manage 3rd party task.
   • CCreate products that use and enhance the Check Point Solution.
   • DExecute automated scripts to perform common tasks.

   Show answer

   Answer: B

   Next question

7. Question 267 · 336 in bank

   Which statement is true about ClusterXL?

   • ASupports Dynamic Routing (Unicast Only)
   • BDoes not support Dynamic Routing
   • CSupports Dynamic Routing (Unicast and Multicast)
   • DSupports Dynamic Routing (Multicast Only)

   Show answer

   Answer: C

   Next question

8. Question 268 · 336 in bank

   You have pushed policy to GW-3 and now cannot pass traffic through the gateway. As a last resort, to restore traffic flow, what command would you run to remove the latest policy from GW-3?

   • Afw unloadlocal
   • Bfwm unload policy
   • Cfw unloadpolicy
   • Dfwm unload local

   Show answer

   Answer: A

   Next question

9. Question 269 · 336 in bank

   If SecureXL is disabled which path is used to process traffic?

   • APassive path
   • BFirewall path
   • CAccelerated path
   • DMedium path

   Show answer

   Answer: B

   Next question

10. Question 270 · 336 in bank

    What kind of information would you expect to see when using the "sim affinity -l" command?

    • AAffinity Distribution
    • BOverview over SecureXL templated connections
    • CThe involved firewall kernel modules in inbound and outbound packet chain
    • DThe VMACs used in a Security Gateway cluster

    Show answer

    Answer: A

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

156-315.81 practice, question 261. 336 questions available.