Pass Your CCSE 156-315.80 Exam on May 11, 2022 with 457 Questions [Q113-Q133]

By adminOn May 11, 2022

4.6/5 - (17 votes)

Pass Your CCSE 156-315.80 Exam on May 11, 2022 with 457 Questions

156-315.80 Free Exam Study Guide! (Updated 457 Questions)

How to study the 156-315.80 Exam

TestKingIT expert team recommends you to prepare some notes on these topics along with it don’t forget to practice Check Point Certified Security Expert – R80 156-315.80 Exam which been written by our expert team, Both these will help you a lot to clear this exam with good marks.

For more info visit:

156-215.80 Exam Reference

NO.113 Tom has been tasked to install Check Point R80 in a distributed deployment. Before Tom installs the systems this way, how many machines will he need if he does NOT include a SmartConsole machine in his calculations?

One machine, but it needs to be installed using SecurePlatform for compatibility purposes.

One machine

Two machines

Three machines

NO.114 The system administrator of a company is trying to find out why acceleration is not working for the traffic. The traffic is allowed according to the rule based and checked for viruses. But it is not accelerated. What is the most likely reason that the traffic is not accelerated?

The connection is destined for a server within the network

The connection required a Security server

The packet is the second in an established TCP connection

The packets are not multicast

NO.115 On R80.10 when configuring Third-Party devices o read the logs using the LEA (Log Export API) the default Log Server uses port:

18210

18184

257

18191

NO.116 What is the recommended number of physical network interfaces in a Mobile Access cluster deployment?

4 Interfaces – an interface leading to the organization, a second interface leading to the internet, a third interface for synchronization, a fourth interface leading to the Security Management Server.

3 Interfaces – an interface leading to the organization, a second interface leading to the Internet, a third interface for synchronization.

1 Interface – an interface leading to the organization and the Internet, and configure for synchronization.

2 Interfaces – a data interface leading to the organization and the Internet, a second interface for synchronization.

References:

NO.117 In the Check Point Firewall Kernel Module, each Kernel is associated with a key, which specifies the type of traffic applicable to the chain module. For Wire Mode configuration, chain modules marked with
____________ will not apply.

ffff

NO.118 Which of the following is a new R80.10 Gateway feature that had not been available in R77.X and older?

The rule base can be built of layers, each containing a set of the security rules. Layers are inspected in the order in which they are defined, allowing control over the rule base flow and which security functionalities take precedence.

Limits the upload and download throughput for streaming media in the company to 1 Gbps.

Time object to a rule to make the rule active only during specified times.

Sub Policies ae sets of rules that can be created and attached to specific rules. If the rule is matched, inspection will continue in the sub policy attached to it rather than in the next rule.

NO.119 To enable Dynamic Dispatch on Security Gateway without the Firewall Priority Queues, run the following
command in Expert mode and reboot:

fw ctl Dyn_Dispatch on

fw ctl Dyn_Dispatch enable

fw ctl multik set_mode 4

fw ctl multik set_mode 1

NO.120 To accelerate the rate of connection establishment, SecureXL groups all connection that match a particular service and whose sole differentiating element is the source port. The type of grouping enables even the very first packets of a TCP handshake to be accelerated. The first packets of the first connection on the same service will be forwarded to the Firewall kernel which will then create a template of the connection. Which of the these is NOT a SecureXL template?

Accept Template

Deny Template

Drop Template

NAT Template

References:

NO.121 SecureXL improves non-encrypted firewall traffic throughput and encrypted VPN traffic throughput.

This statement is true because SecureXL does improve all traffic.

This statement is false because SecureXL does not improve this traffic but CoreXL does.

This statement is true because SecureXL does improve this traffic.

This statement is false because encrypted traffic cannot be inspected.
SecureXL improved non-encrypted firewall traffic throughput, and encrypted VPN traffic throughput, by nearly an order-of-magnitude- particularly for small packets flowing in long duration connections.

NO.122 Which statement is most correct regarding about “CoreXL Dynamic Dispatcher”?

The CoreXL FW instances assignment mechanism is based on Source MAC addresses, Destination MAC addresses

The CoreXL FW instances assignment mechanism is based on the utilization of CPU cores

The CoreXL FW instances assignment mechanism is based on IP Protocol type

The CoreXL FW instances assignment mechanism is based on Source IP addresses, Destination IP addresses, and the IP ‘Protocol’ type

Explanation/Reference: https://supportcenter.checkpoint.com/supportcenter/portal?
eventSubmit_doGoviewsolutiondetails=&solutionid=sk105261

NO.123 Which one of the following is true about Threat Emulation?

Takes less than a second to complete

Works on MS Office and PDF files only

Always delivers a file

Takes minutes to complete (less than 3 minutes)

Explanation

NO.124 What is the order of NAT priorities?

Static NAT, IP pool NAT, hide NAT

IP pool NAT, static NAT, hide NAT

Static NAT, automatic NAT, hide NAT

Static NAT, hide NAT, IP pool NAT

NO.125 Fill in the blank: Permanent VPN tunnels can be set on all tunnels in the community, on all tunnels for specific gateways, or ______ .

On all satellite gateway to satellite gateway tunnels

On specific tunnels for specific gateways

On specific tunnels in the community

On specific satellite gateway to central gateway tunnels

Explanation/Reference:
https://sc1.checkpoint.com/documents/R77/CP_R77_VPN_AdminGuide/html_frameset.htm?topic=documents/ R77/CP_R77_VPN_AdminGuide/14018

NO.126 GAiA Software update packages can be imported and installed offline in situation where:

Security Gateway with GAiA does NOT have SFTP access to Internet

Security Gateway with GAiA does NOT have access to Internet.

Security Gateway with GAiA does NOT have SSH access to Internet.

The desired CPUSE package is ONLY available in the Check Point CLOUD.

NO.127 On R80.10 when configuring Third-Party devices to read the logs using the LEA (Log Export API) the default Log Server uses port:

18210

18184

257

18191

NO.128 Which command to used set the CCP protocol to Multicast?

cphaprob set_ccp multicast

cphaconf set_ccp multicast

cphaconf set_ccp no broardcast

cphaprob set_ccp no_broadcast

Explanation
https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid

NO.129 When gathering information about a gateway using CPINFO, what information is included or excluded when
using the “-x” parameter?

Includes the registry

Gets information about the specified Virtual System

Does not resolve network addresses

Output excludes connection table

NO.130 How do you enable virtual mac (VMAC) on-the-fly on a cluster member?

cphaprob set int fwha_vmac_global_param_enabled 1

clusterXL set int fwha_vmac_global_param_enabled 1

fw ctl set int fwha_vmac_global_param_enabled 1

cphaconf set int fwha_vmac_global_param_enabled 1

Explanation/Reference: https://supportcenter.checkpoint.com/supportcenter/portal?
eventSubmit_doGoviewsolutiondetails=&solutionid=sk50840

NO.131 By default, which port does the WebUI listen on?

4434

443

8080

Explanation/Reference: https://sc1.checkpoint.com/documents/R80/CP_R80_Gaia_IUG/html_frameset.htm?
topic=documents/R80/CP_R80_Gaia_IUG/132120

NO.132 What is true about the IPS-Blade?

in R80, IPS is managed by the Threat Prevention Policy

in R80, in the IPS Layer, the only three possible actions are Basic, Optimized and Strict

in R80, IPS Exceptions cannot be attached to “all rules”

in R80, the GeoPolicy Exceptions and the Threat Prevention Exceptions are the same

NO.133 Which of the following is a task of the CPD process?

Invoke and monitor critical processes and attempts to restart them if they fail

Transfers messages between Firewall processes

Log forwarding

Responsible for processing most traffic on a security gateway
https://sc1.checkpoint.com/documents/R76/CP_R76_CLI_WebAdmin/12496.htm

Loading …

156-315.80 Dumps for CCSE Certified Exam Questions and Answer: https://www.testkingit.com/CheckPoint/latest-156-315.80-exam-dumps.html

156-315.80, CheckPoint156-315.80 Downloadable PDF, 156-315.80 latest braindumps free download, 156-315.80 latest mock exam, 156-315.80 latest test braindumps, 156-315.80 new test materials, 156-315.80 reliable test guide files