156-315.81 practice questions 61–70

1. Question 61 · 336 in bank

   What could NOT be a reason for synchronization issues in a Management HA environment?

   • AAccidentally, you have configured unique IP addresses per Management Server which invalidates the CA Certificate
   • BThere is a network connectivity failure between the servers
   • CServers are in Collision Mode. Two servers, both in active state cannot be synchronized either automatically or manually.
   • DThe products installed on the servers do not match: one device is a Standalone Server while the other is only a Security Management server.

   Show answer

   Answer: A

   Next question

2. Question 62 · 336 in bank

   What is the correct Syntax for adding an access-rule via R80 API?

   • Aadd access-rule layer "Network" action "Allow"
   • Badd access-rule layer "Network" position 1 name "Rule 1" service.1 "SMTP" service.2 "http"
   • Cadd access-rule and follow the wizard
   • Dadd rule position 1 name "Rule 1" policy-package "Standard" add service "http"

   Show answer

   Answer: B

   Next question

3. Question 63 · 336 in bank

   Secure Configuration Verification (SCV), makes sure that remote access client computers are configured in accordance with the enterprise Security Policy. Bob was asked by Alice to implement a specific SCV configuration but therefore Bob needs to edit and configure a specific Check Point file. Which location file and directory are true?

   • A$FWDIR/conf/client.scv
   • B$CPDIR/conf/local.scv
   • C$CPDIR/conf/client.scv
   • D$FWDIR/conf/local.scv

   Show answer

   Answer: D

   Next question

4. Question 64 · 336 in bank

   What feature allows Remote-access VPN users to access resources across a site-to-site VPN tunnel?

   • ANetwork Access VPN Domain
   • BRemote Access VPN Switch
   • CCommunity Specific VPN Domain
   • DMobile Access VPN Domain

   Show answer

   Answer: C

   Next question

5. Question 65 · 336 in bank

   Main Mode in IKEv1 uses how many packages for negotiation?

   • A4
   • Bdepends on the make of the peer gateway
   • C3
   • D6

   Show answer

   Answer: D

   Next question

6. Question 66 · 336 in bank

   To ensure that VMAC mode is enabled, which CLI command you should run on all cluster members?

   • Afw ctl set int fwha vmac global param enabled
   • Bcphaprob -a if
   • Cfw ctl get int fwha_vmac_global_param_enabled; result of command should return value 1
   • Dfw ctl get int fwha vmac global param enabled; result of command should return value 1

   Show answer

   Answer: C

   Next question

7. Question 67 · 336 in bank

   Can multiple administrators connect to a Security Management Server at the same time?

   • AYes, all administrators can modify a network object at the same time.
   • BNo, only one can be connected.
   • CYes, every administrator has their own username, and works in a session that is independent of other administrators.
   • DYes, but only one has the right to write.

   Show answer

   Answer: D

   Next question

8. Question 68 · 336 in bank

   You have used the "set inactivity-timeout 120" command to prevent the session to be disconnected after 10 minutes of inactivity. However, the Web session is being disconnected after 10 minutes. Why?

   • AThe idle timeout for the web session is specified with the “set web session-timeout" command.
   • BThe number specified is the amount of the idle timeout in seconds rather than in minutes. So you have to use the command "set inactivity-timeout 600" instead.
   • CProbably, you have forgotten to make sure that nobody is accessing the management server via the SmartConsole which locks the management database.
   • DThe number of minutes is correct. Probably, you have forgotten to save this setting with the "save config" command.

   Show answer

   Answer: A

   Next question

9. Question 69 · 336 in bank

   Your manager asked you to check the status of SecureXL, and its enabled templates and features. What command will you use to provide such information to manager?

   • Afw acces stats
   • Bfw accel stat
   • Cfwaccel stats
   • Dfwaccel stat

   Show answer

   Answer: D

   Next question

10. Question 70 · 336 in bank

    What command lists all interfaces using Multi-Queue?

    • Ashow multiqueue all
    • Bcpmq set
    • Cmq_mng --show
    • Dshow interface all

    Show answer

    Answer: C

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

156-315.81 practice, question 61. 336 questions available.