156-315.81 practice questions 71–80

1. Question 71 · 336 in bank

   There are 4 ways to use the Management API for creating host object with the Management API. Which one is NOT correct?

   • AUsing SmartConsole GUI console
   • BUsing CLISH
   • CUsing Web Services
   • DUsing cpconfig

   Show answer

   Answer: D

   Next question

2. Question 72 · 336 in bank

   Which 3 types of tracking are available for Threat Prevention Policy?

   • ASyslog, None, User-defined scripts
   • BAlert, SNMP trap, Mail
   • CNone, Log, Syslog
   • DSMS Alert, Log, SNMP alert

   Show answer

   Answer: B

   Next question

3. Question 73 · 336 in bank

   Bob is asked by Alice to disable the SecureXL mechanism temporary for further diagnostic by their Check Point partner. Which of the following Check Point Command is true?

   • Afwaccel suspend
   • Bfwaccel standby
   • Cfwaccel off
   • Dfwaccel templates

   Show answer

   Answer: C

   Next question

4. Question 74 · 336 in bank

   What are the attributes that SecureXL will check after the connection is allowed by Security Policy?

   • ASource address, Destination address, Destination port, Protocol
   • BSource MAC address, Destination MAC address, Source port, Destination port, Protocol
   • CSource address, Destination address, Source port, Destination port, Protocol
   • DSource address, Destination address, Source port, Destination port

   Show answer

   Answer: A

   Next question

5. Question 75 · 336 in bank

   The VPN Link Selection will perform the following if the primary VPN link goes down?

   • AThe Firewall will drop the packets
   • BThe Firewall will inform the client that the tunnel is down
   • CThe Firewall will send out the packet on all interfaces
   • DThe Firewall can update the Link Selection entries to start using a different link for the same tunnel

   Show answer

   Answer: D

   Next question

6. Question 76 · 336 in bank

   In CoreXL, the Firewall kernel is replicated multiple times. Each replicated copy or instance can perform the following:

   • AThe Firewall can run different policies per core
   • BThe Firewall can run the same policy on all cores
   • CThe Firewall kernel is replicated only with new connections and deletes itself once the connection times out
   • DThe Firewall kernel only touches the packet if the connection is accelerated

   Show answer

   Answer: B

   Next question

7. Question 77 · 336 in bank

   What is false regarding a Management HA environment?

   • AOnly one Management Server should be active, while any others be in standby mode.
   • BIt is not necessary to establish SIC between the primary and secondary management server, since the latter gets the exact same copy of the management database from the prior.
   • CSmartConsole can connect to any management server in ReadOnly mode.
   • DSynchronization will occur automatically with each Publish event if the Standby servers are available.

   Show answer

   Answer: B

   Next question

8. Question 78 · 336 in bank

   Which command will allow you to see the interface status?

   • Acphaprob interface
   • Bcphaprob stat
   • Ccphaprob -a if
   • Dcphaprob -l interface

   Show answer

   Answer: C

   Next question

9. Question 79 · 336 in bank

   Sticky Decision Function (SDF) is required to prevent which of the following? Assume you set up an Active-Active cluster.

   • AAsymmetric routing
   • BAnti-Spoofing
   • CFailovers
   • DSymmetric routing

   Show answer

   Answer: A

   Next question

10. Question 80 · 336 in bank

    Matt wants to upgrade his old Security Management Server to R80.x using the Advanced Upgrade with Database Migration. What is one of the requirements for a successful upgrade?

    • ASize of the /var/log folder of the target machine must be at least 25% of the size of the /var/log directory on the source machine
    • BSize of the /var/log folder of the source machine must be at least 25% of the size of the /var/log directory on the target machine
    • CSize of the /var/log folder of the target machine must be 25GB or more
    • DSize of the $FWDIR/log folder of the target machine must be at least 25% of the size of the $FWDIR/log directory on the source machine

    Show answer

    Answer: A

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

156-315.81 practice, question 71. 336 questions available.