Check Point 156-315.80 시험

Question No : 1

You have pushed policy to GW-3 and now cannot pass traffic through the gateway.
As a last resort, to restore traffic flow, what command would you run to remove the latest policy from GW-3?

• A.fw unloadlocal
• B.fw unloadpolicy
• C.fwm unload local
• D.fwm unload policy

답을 확인하기

정답:

Question No : 2

There are 4 ways to use the Management API for creating host object with R80 Management API .
Which one is NOT correct?

• A.Using Web Services
• B.Using Mgmt_cli tool
• C.Using CLISH
• D.Using SmartConsole GUI console
• E.Events are collected with SmartWorkflow from Trouble Ticket systems

답을 확인하기

정답:

Question No : 3

What destination versions are supported for a Multi-Version Cluster Upgrade?

• A.R80.40 and later
• B.R76 and later
• C.R70 and Later
• D.R80.10 and Later

답을 확인하기

정답:

Question No : 4

What is not a component of Check Point SandBlast?

• A.Threat Emulation
• B.Threat Simulator
• C.Threat Extraction
• D.Threat Cloud

답을 확인하기

정답:

Question No : 5

Which NAT rules are prioritized first?

• A.Post-Automatic/Manual NAT rules
• B.Manual/Pre-Automatic NAT
• C.Automatic Hide NAT
• D.Automatic Static NAT

답을 확인하기

정답:

Question No : 6

What command can you use to have cpinfo display all installed hotfixes?

• A.cpinfo -hf
• B.cpinfo Cy all
• C.cpinfo Cget hf
• D.cpinfo installed_jumbo

답을 확인하기

정답:

Question No : 7

Within the Check Point Firewall Kernel resides Chain Modules, which are individually responsible for the inspection of a specific blade or feature that has been enabled in the configuration of the gateway. For Wire mode configuration, chain modules marked with _______ will not apply.

• A.ffffffff
• B.00000001
• C.00000002
• D.00000003

답을 확인하기

정답:

Question No : 8

You can select the file types that are sent for emulation for all the Threat Prevention profiles. Each profile defines a(n) _____ or _____ action for the file types.

• A.Inspect/Bypass
• B.Inspect/Prevent
• C.Prevent/Bypass
• D.Detect/Bypass

답을 확인하기

정답:

Question No : 9

Which of the following is NOT a type of Endpoint Identity Agent?

• A.Terminal
• B.Light
• C.Full
• D.Custom

답을 확인하기

정답:

Question No : 10

Which software blade does NOT accompany the Threat Prevention policy?

• A.Anti-virus
• B.IPS
• C.Threat Emulation
• D.Application Control and URL Filtering

답을 확인하기

정답:

Question No : 11

What is the minimum amount of RAM needed for a Threat Prevention Appliance?

• A.6 GB
• B.8GB with Gaia in 64-bit mode
• C.4 GB
• D.It depends on the number of software blades enabled

답을 확인하기

정답:

Question No : 12

In which formats can Threat Emulation forensics reports be viewed in?

• A.TXT, XML and CSV
• B.PDF and TXT
• C.PDF, HTML, and XML
• D.PDF and HTML

답을 확인하기

정답:

Question No : 13

To optimize Rule Base efficiency, the most hit rules should be where?

• A.Removed from the Rule Base.
• B.Towards the middle of the Rule Base.
• C.Towards the top of the Rule Base.
• D.Towards the bottom of the Rule Base.

답을 확인하기

정답:

Question No : 14

You have existing dbedit scripts from R77. Can you use them with R80.10?

• A.dbedit is not supported in R80.10
• B.dbedit is fully supported in R80.10
• C.You can use dbedit to modify threat prevention or access policies, but not create or modify layers
• D.dbedit scripts are being replaced by mgmt_cli in R80.10

답을 확인하기

정답:

Question No : 15

When configuring SmartEvent Initial settings, you must specify a basic topology for SmartEvent to help it calculate traffic direction for events .
What is this setting called and what are you defining?

• A.Network, and defining your Class A space
• B.Topology, and you are defining the Internal network
• C.Internal addresses you are defining the gateways
• D.Internal network(s) you are defining your networks

답을 확인하기

정답: