156-315.81.20 practice questions 161–170

1. Question 161 · 193 in bank

   What command is used to manually failover a Multi-Version Cluster during the upgrade?

   • Aset cluster member state down in Clish
   • BclusterXL_admin down in Expert Mode
   • Cset cluster down in Expert Mode
   • DclusterXL_admin down in Clish

   Show answer

   Answer: B

   Next question

2. Question 162 · 193 in bank

   Fill in the blank: An identity server uses a ____________ to trust a Terminal Server Identity Agent.

   • AShared secret
   • BOne-time password
   • CCertificate
   • DToken

   Show answer

   Answer: A

   Next question

3. Question 163 · 193 in bank

   How can you make sure that the old logs will be available after updating the Management to version R81.20 using the Advanced Upgrade Method?

   • AUse the WebUI -> Maintenance > System Backup and store the backup on a remote FTP server
   • BThe logs will be included running $FWDIR/scripts/migrate_server export -v R81.10
   • CUse the WebUI to save a snapshot before updating the Management -> Maintenance > Snapshot Management
   • DUse the migrate_server tool with the option ‘-l’ for the logs and ‘-x’ for the index

   Show answer

   Answer: D

   Next question

4. Question 164 · 193 in bank

   The Check Point Central Deployment Tool (CDT) communicates with the Security Gateway(s) over Check Point SIC via ___________.

   • ATCP Port 19009
   • BTCP Port 18190
   • CTCP Port 18191
   • DTCP Port 18209

   Show answer

   Answer: D

   Next question

5. Question 165 · 193 in bank

   What is the command to check the status of Check Point processes?

   • Acphaprob list
   • Btop
   • Ccpwd_admin list
   • Dcptop

   Show answer

   Answer: C

   Next question

6. Question 166 · 193 in bank

   Which of the following processes pulls the application monitoring status from gateways?

   • Acpm
   • Bcpd
   • Cfwm
   • Dcpwd

   Show answer

   Answer: B

   Next question

7. Question 167 · 193 in bank

   What is false regarding a Management HA environment?

   • ASmartConsole can connect to any management server in ReadOnly mode.
   • BIt is not necessary to establish SIC between the primary and secondary management server, since the latter gets the exact same copy of the management database from the prior.
   • COnly one Management Server should be active, while any others be in standby mode
   • DSynchronization will occur automatically with each Publish event if the Standby servers are available.

   Show answer

   Answer: B

   Next question

8. Question 168 · 193 in bank

   In CoreXL, the Firewall kernel is replicated multiple times. Each replicated copy or instance can perform the following:

   • AThe Firewall kernel only touches the packet if the connection is accelerated
   • BThe Firewall kernel is replicated only with new connections and deletes itself once the connection times out
   • CThe Firewall can run the same policy on all cores
   • DThe Firewall can run different policies per core

   Show answer

   Answer: C

   Next question

9. Question 169 · 193 in bank

   An established connection is going to www.google.com. The Application Control Blade is inspecting the traffic. If SecureXL and CoreXL are both enabled, which path is handling the traffic?

   • AMedium Path
   • BAccelerated Path
   • CSlow Path
   • DFast Path

   Show answer

   Answer: A

   Next question

10. Question 170 · 193 in bank

    Which is the lowest gateway version supported by R81.20 management server?

    • AR77.30
    • BR80.20
    • CR77
    • DR65

    Show answer

    Answer: A

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

156-315.81.20 practice, question 161. 193 questions available.