156-315.81 practice questions 311–320

1. Question 311 · 336 in bank

   Which command will reset the kernel debug options to default settings?

   • Afw ctl dbg -a 0
   • Bfw ctl dbg resetall
   • Cfw ctl debug set 0
   • Dfw ctl debug 0

   Show answer

   Answer: D

   Next question

2. Question 312 · 336 in bank

   When simulating a problem on ClusterXL cluster with cphaprob –d STOP -s problem -t 0 register, to initiate a failover on an active cluster member, what command allows you remove the problematic state?

   • Acphaprob –d STOP unregister
   • Bcphaprob STOP unregister
   • Ccphaprob unregister STOP
   • Dcphaprob –d unregister STOP

   Show answer

   Answer: A

   Next question

3. Question 313 · 336 in bank

   How can you grant GAiA API Permissions for a newly created user?

   • AAssign the user a permission profile in SmartConsole
   • BAssign the user the admin RBAC role in clish
   • CNo need to grant access since every user has access by default.
   • DIn bash, use the following command: “gaia_api access --user Tom --enable true”

   Show answer

   Answer: D

   Next question

4. Question 314 · 336 in bank

   Can Check Point and Third-party Gateways establish a certificate-based Site-to-Site VPN tunnel?

   • AYes, but they need to have a mutually trusted certificate authority
   • BYes, but they have to have a pre-shared secret key
   • CNo, they cannot share certificate authorities
   • DNo, Certificate based VPNs are only possible between Check Point devices

   Show answer

   Answer: A

   Next question

5. Question 315 · 336 in bank

   Which of the following statements about Site-to-Site VPN Domain-based is NOT true?

   • ADomain-based- VPN domains are pre-defined for all VPN Gateways. When the Security Gateway encounters traffic originating from one VPN Domain with the destination to a VPN Domain of another VPN Gateway, that traffic is identified as VPN traffic and is sent through the VPN Tunnel between the two Gateways.
   • BRoute-based- The Security Gateways will have a Virtual Tunnel Interface (VTI) for each VPN Tunnel with a peer VPN Gateway. The Routing Table can have routes to forward traffic to these VTIs. Any traffic routed through a VTI is automatically identified as VPN Traffic and is passed through the VPN Tunnel associated with the VTI.
   • CDomain-based- VPN domains are pre-defined for all VPN Gateways. A VPN domain is a service or user that can send or receive VPN traffic through a VPN Gateway.
   • DDomain-based- VPN domains are pre-defined for all VPN Gateways. A VPN domain is a host or network that can send or receive VPN traffic through a VPN Gateway.

   Show answer

   Answer: C

   Next question

6. Question 316 · 336 in bank

   What is the best sync method in the ClusterXL deployment?

   • AUse 3 clusters + 1st sync + 2nd sync + 3rd sync
   • BUse 2 clusters + 1st sync + 2nd sync
   • CUse 1 cluster + 1st sync
   • DUse 1 dedicated sync interface

   Show answer

   Answer: D

   Next question

7. Question 317 · 336 in bank

   Alice & Bob are concurrently logged in via SSH on the same Check Point Security Gateway as user "admin" however Bob was first logged in and acquired the lock. Alice tells Bob that she also needs to perform some important configuration changes. Therefore, Bob is releasing his read/write lock from the GAIA configuration database - which of the following GAIA clish command is true:

   • Aunlock clish database
   • Block database override
   • Cunlock database
   • Doverride lock database

   Show answer

   Answer: C

   Next question

8. Question 318 · 336 in bank

   SandBlast agent extends Zero-day prevention to what part of the network?

   • AEmail servers
   • BWeb Browsers and user devices
   • CDMZ server
   • DCloud

   Show answer

   Answer: B

   Next question

9. Question 319 · 336 in bank

   As a valid Mobile Access Method, what feature provides Capsule Connect/VPN?

   • AFull layer3 VPN -IPSec VPN that gives users network access to all mobile applications
   • BThat is used to deploy the mobile device as a generator of one-time passwords for authenticating to an RSA Authentication Manager
   • CFull Layer4 VPN -SSL VPN that gives users network access to all mobile applications
   • DYou can make sure that documents are sent to the intended recipients only

   Show answer

   Answer: A

   Next question

10. Question 320 · 336 in bank

    After finishing installation admin John likes to use top command in expert mode. John has to set the expert-password and was able to use top command. A week later John has to use the top command again. He detected that the expert password is no longer valid. What is the most probable reason for this behavior?

    • Achanges are only possible via SmartConsole
    • B"save config" was not issued in expert mode
    • C"write memory" was not issued on clish
    • D"save config" was not issued on clish

    Show answer

    Answer: D

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

156-315.81 practice, question 311. 336 questions available.