This page was exported from All The Latest MCTS Exam Questions And Answers For Free Share [ https://www.mctsdump.com ]

Export date:Thu Nov 21 11:28:40 2024 / +0000 GMT

___________________________________________________


Title: [4/July/2018 Updated] Download New Free PassLeader 417q 156-215.80 Exam Questions Help 100% Passing Exam (Part A)

---------------------------------------------------


New Updated 156-215.80 Exam Questions from PassLeader 156-215.80 PDF dumps! Welcome to download the newest PassLeader 156-215.80 VCE dumps:&nbsp;https://www.passleader.com/156-215-80.html (417 Q&amp;As) Keywords: 156-215.80 exam dumps, 156-215.80 exam questions, 156-215.80 VCE dumps, 156-215.80 PDF dumps, 156-215.80 practice tests, 156-215.80 study guide, 156-215.80 braindumps, Check Point Certified Security Administrator (CCSA) R80 Exam P.S. New 156-215.80 dumps PDF: https://drive.google.com/open?id=0B-ob6L_QjGLpdm81T0hOX1ZpWGs NEW QUESTION 284Check Point APIs allow system engineers and developers to make changes to their organization's security policy with CLI tools and Web Services for all of the following except? A.&nbsp;&nbsp;&nbsp; Create new dashboards to manage 3rd party task.B.&nbsp;&nbsp;&nbsp; Create products that use and enhance 3rd party solutions.C.&nbsp;&nbsp;&nbsp; Execute automated scripts to perform common tasks.D.&nbsp;&nbsp;&nbsp; Create products that use and enhance the Check Point Solution.  Answer: A NEW QUESTION 285In what way are SSL VPN and IPSec VPN different? A.&nbsp;&nbsp;&nbsp; SSL VPN is using HTTPS in addition to IKE, whereas IPSec VPN is clientless.B.&nbsp;&nbsp;&nbsp; SSL VPN adds an extra VPN header to the packet, IPSec VPN does not.C.&nbsp;&nbsp;&nbsp; IPSec VPN does not support two factor authentication, SSL VPN does support this.D.&nbsp;&nbsp;&nbsp; IPSec VPN uses an additional virtual adapter, SSL VPN uses the client network adapter only. Answer: D NEW QUESTION 286Which command can you use to enable or disable multi-queue per interface? A.&nbsp;&nbsp;&nbsp; cpmq setB.&nbsp;&nbsp;&nbsp; Cpmqueue setC.&nbsp;&nbsp;&nbsp; Cpmq configD.&nbsp;&nbsp;&nbsp; Set cpmq enable Answer: A NEW QUESTION 287Which limitation of CoreXL is overcome by using (mitigated by) Multi-Queue? A.&nbsp;&nbsp;&nbsp; There is no traffic queue to be handled.B.&nbsp;&nbsp;&nbsp; Several NICs can use one traffic queue by one CPU.C.&nbsp;&nbsp;&nbsp; Each NIC has several traffic queues that are handled by multiple CPU cores.D.&nbsp;&nbsp;&nbsp; Each NIC has one traffic queue that is handled by one CPU. Answer: C NEW QUESTION 288To fully enable Dynamic Dispatcher on a Security Gateway, you should do what? A.&nbsp;&nbsp;&nbsp; Run fw ctl multik set_mode 9 in Expert mode and then reboot.B.&nbsp;&nbsp;&nbsp; Using cpconfig, update the Dynamic Dispatcher value to "full" under the CoreXL menu.C.&nbsp;&nbsp;&nbsp; Edit /proc/interrupts to include multik set_mode 1 at the bottom of the file, save, and reboot.D.&nbsp;&nbsp;&nbsp; Run fw ctl multik set_mode 1 in Expert mode and then reboot. Answer: A NEW QUESTION 289What are types of Check Point APIs available currently as part of R80.10 code? A.&nbsp;&nbsp;&nbsp; Security Gateway API, Management API, Threat Prevention API and Identity Awareness Web Services APIB.&nbsp;&nbsp;&nbsp; Management API, Threat Prevention API, Identity Awareness Web Services API and OPSEC SDK APIC.&nbsp;&nbsp;&nbsp; OSE API, OPSEC SDK API, Threat Prevention API and Policy Editor APID.&nbsp;&nbsp;&nbsp; CPMI API, Management API, Threat Prevention API and Identity Awareness Web Services API Answer: B NEW QUESTION 290What is the purpose of Priority Delta in VRRP? A.&nbsp;&nbsp;&nbsp; When a box is up, Effective Priority = Priority + Priority Delta.B.&nbsp;&nbsp;&nbsp; When an Interface is up, Effective Priority = Priority + Priority Delta.C.&nbsp;&nbsp;&nbsp; When an Interface fails, Effective Priority = Priority - Priority Delta.D.&nbsp;&nbsp;&nbsp; When a box fails, Effective Priority = Priority - Priority Delta. Answer: C NEW QUESTION 291The Firewall kernel is replicated multiple times, therefore ____. A.&nbsp;&nbsp;&nbsp; The Firewall kernel only touches the packet if the connection is accelerated.B.&nbsp;&nbsp;&nbsp; The Firewall can run different policies per core.C.&nbsp;&nbsp;&nbsp; The Firewall kernel is replicated only with new connections and deletes itself once the connection times out.D.&nbsp;&nbsp;&nbsp; The Firewall can run the same policy on all cores. Answer: D NEW QUESTION 292There are 4 ways to use the Management API for creating host object with R80 Management API. Which one is NOT correct? A.&nbsp;&nbsp;&nbsp; Using Web ServicesB.&nbsp;&nbsp;&nbsp; Using Mgmt_cli toolC.&nbsp;&nbsp;&nbsp; Using CLISHD.&nbsp;&nbsp;&nbsp; Using SmartConsole GUI console Answer: C NEW QUESTION 293Which the following type of authentication on Mobile Access can NOT be used as the first authentication method? A.&nbsp;&nbsp;&nbsp; Dynamic IDB.&nbsp;&nbsp;&nbsp; RADIUSC.&nbsp;&nbsp;&nbsp; Username and PasswordD.&nbsp;&nbsp;&nbsp; Certificate Answer: A NEW QUESTION 294Which command can you use to verify the number of active concurrent connections? A.&nbsp;&nbsp;&nbsp; fw conn allB.&nbsp;&nbsp;&nbsp; fw ctl pst pstatC.&nbsp;&nbsp;&nbsp; show all connectionsD.&nbsp;&nbsp;&nbsp; show connections Answer: B NEW QUESTION 295Which remote Access Solution is clientless? A.&nbsp;&nbsp;&nbsp; Checkpoint MobileB.&nbsp;&nbsp;&nbsp; Endpoint Security SuiteC.&nbsp;&nbsp;&nbsp; SecuRemoteD.&nbsp;&nbsp;&nbsp; Mobile Access Portal Answer: D NEW QUESTION 296What component of R80 Management is used for indexing? A.&nbsp;&nbsp;&nbsp; DBSyncB.&nbsp;&nbsp;&nbsp; API ServerC.&nbsp;&nbsp;&nbsp; fwmD.&nbsp;&nbsp;&nbsp; SOLR Answer: D NEW QUESTION 297Which NAT rules are prioritized first? A.&nbsp;&nbsp;&nbsp; Post-Automatic/Manual NAT rulesB.&nbsp;&nbsp;&nbsp; Manual/Pre-Automatic NATC.&nbsp;&nbsp;&nbsp; Automatic Hide NATD.&nbsp;&nbsp;&nbsp; Automatic Static NAT Answer: B NEW QUESTION 298What is the difference between an event and a log? A.&nbsp;&nbsp;&nbsp; Events are generated at gateway according to Event Policy.B.&nbsp;&nbsp;&nbsp; A log entry becomes an event when it matches any rule defined in Event Policy.C.&nbsp;&nbsp;&nbsp; Events are collected with SmartWorkflow from Trouble Ticket systems.D.&nbsp;&nbsp;&nbsp; Logs and Events are synonyms. Answer: B NEW QUESTION 299The system administrator of a company is trying to find out why acceleration is not working for the traffic. The traffic is allowed according to the rule base and checked for viruses. But it is not accelerated. What is the most likely reason that the traffic is not accelerated? A.&nbsp;&nbsp;&nbsp; There is a virus found. Traffic is still allowed but not accelerated.B.&nbsp;&nbsp;&nbsp; The connection required a Security server.C.&nbsp;&nbsp;&nbsp; Acceleration is not enabled.D.&nbsp;&nbsp;&nbsp; The traffic is originating from the gateway itself. Answer: D NEW QUESTION 300During the Check Point Stateful Inspection Process, for packets that do not pass Firewall Kernel Inspection and are rejected by the rule definition, packets are ____. A.&nbsp;&nbsp;&nbsp; dropped without sending a negative acknowledgmentB.&nbsp;&nbsp;&nbsp; dropped without logs and without sending a negative acknowledgmentC.&nbsp;&nbsp;&nbsp; dropped with negative acknowledgmentD.&nbsp;&nbsp;&nbsp; dropped with logs and without sending a negative acknowledgment Answer: D NEW QUESTION 301Which one of the following is true about Threat Extraction? A.&nbsp;&nbsp;&nbsp; Always delivers a file to user.B.&nbsp;&nbsp;&nbsp; Works on all MS Office, Executables, and PDF files.C.&nbsp;&nbsp;&nbsp; Can take up to 3 minutes to complete.D.&nbsp;&nbsp;&nbsp; Delivers file only if no threats found. Answer: B NEW QUESTION 302Which is the correct order of a log flow processed by SmartEvent components? A.&nbsp;&nbsp;&nbsp; Firewall &gt; Correlation Unit &gt; Log Server &gt; SmartEvent Server Database &gt; SmartEvent ClientB.&nbsp;&nbsp;&nbsp; Firewall &gt; SmartEvent Server Database &gt; Correlation Unit &gt; Log Server &gt; SmartEvent ClientC.&nbsp;&nbsp;&nbsp; Firewall &gt; Log Server &gt; SmartEvent Server Database &gt; Correlation Unit &gt; SmartEvent ClientD.&nbsp;&nbsp;&nbsp; Firewall &gt; Log Server &gt; Correlation Unit &gt; SmartEvent Server Database &gt; SmartEvent Client Answer: D NEW QUESTION 303Which of the following statements describes the Check Point ThreatCloud? A.&nbsp;&nbsp;&nbsp; Blocks or limits usage of web applications.B.&nbsp;&nbsp;&nbsp; Prevents or controls access to web sites based on category.C.&nbsp;&nbsp;&nbsp; Prevents Cloud vulnerability exploits.D.&nbsp;&nbsp;&nbsp; A worldwide collaborative security network. Answer: D NEW QUESTION 304Packet acceleration (SecureXL) identifies connections by several attributes. Which of the attributes is NOT used for identifying connection? A.&nbsp;&nbsp;&nbsp; Source AddressB.&nbsp;&nbsp;&nbsp; Destination AddressC.&nbsp;&nbsp;&nbsp; TCP Acknowledgment NumberD.&nbsp;&nbsp;&nbsp; Source Port Answer: C NEW QUESTION 305When defining QoS global properties, which option below is not valid? A.&nbsp;&nbsp;&nbsp; WeightB.&nbsp;&nbsp;&nbsp; Authenticated timeoutC.&nbsp;&nbsp;&nbsp; ScheduleD.&nbsp;&nbsp;&nbsp; Rate Answer: C NEW QUESTION 306The WebUI offers three methods for downloading Hotfixes via CPUSE. One of them is Automatic method. How many times per day will CPUSE agent check for hotfixes and automatically download them? A.&nbsp;&nbsp;&nbsp; Six times per dayB.&nbsp;&nbsp;&nbsp; Seven times per dayC.&nbsp;&nbsp;&nbsp; Every two hoursD.&nbsp;&nbsp;&nbsp; Every three hours Answer: D NEW QUESTION 307How would you deploy TE250X Check Point appliance just for email traffic and in-line mode without a Check Point Security Gateway? A.&nbsp;&nbsp;&nbsp; Install appliance TE250X on SpanPort on LAN switch in MTA mode.B.&nbsp;&nbsp;&nbsp; Install appliance TE250X in standalone mode and setup MTA.C.&nbsp;&nbsp;&nbsp; You can utilize only Check Point Cloud Services for this scenario.D.&nbsp;&nbsp;&nbsp; It is not possible, always Check Point SGW is needed to forward emails to SandBlast appliance. Answer: C NEW QUESTION 308In SmartEvent, what are the different types of automatic reactions that the administrator can configure? A.&nbsp;&nbsp;&nbsp; Mail, Block Source, Block Event Activity, External Script, SNMP Trap.B.&nbsp;&nbsp;&nbsp; Mail, Block Source, Block Destination, Block Services, SNMP Trap.C.&nbsp;&nbsp;&nbsp; Mail, Block Source, Block Destination, External Script, SNMP Trap.D.&nbsp;&nbsp;&nbsp; Mail, Block Source, Block Event Activity, Packet Capture, SNMP Trap. Answer: A NEW QUESTION 309Identify the API that is not supported by Check Point currently. A.&nbsp;&nbsp;&nbsp; R80 Management APIB.&nbsp;&nbsp;&nbsp; Identity Awareness Web Services APIC.&nbsp;&nbsp;&nbsp; Open REST APID.&nbsp;&nbsp;&nbsp; OPSEC SDK Answer: C NEW QUESTION 310Using mgmt_cli, what is the correct syntax to import a host object called Server_1 from the CLI? A.&nbsp;&nbsp;&nbsp; mgmt_cli add-host "Server_1" ip_address "10.15.123.10" --format txtB.&nbsp;&nbsp;&nbsp; mgmt_cli add host name "Server_1" ip_address "10.15.123.10" --format jsonC.&nbsp;&nbsp;&nbsp; mgmt_cli add object-host "Server_1" ip_address "10.15.123.10" --format jsonD.&nbsp;&nbsp;&nbsp; mgmt_cli add object "Server_1" ip_address "10.15.123.10" --format json Answer: A NEW QUESTION 311SandBlast has several functional components that work together to ensure that attacks are prevented in real-time. Which the following is NOT part of the SandBlast component? A.&nbsp;&nbsp;&nbsp; Threat EmulationB.&nbsp;&nbsp;&nbsp; Mobile AccessC.&nbsp;&nbsp;&nbsp; Mail Transfer AgentD.&nbsp;&nbsp;&nbsp; Threat Cloud Answer: C NEW QUESTION 312Vanessa is expecting a very important Security Report. The Document should be sent as an attachment via e-mail. An e-mail with Security_report.pdf file was delivered to her e-mail inbox. When she opened the PDF file, she noticed that the file is basically empty and only few lines of text are in it. The report is missing some graphs, tables and links. Which component of SandBlast protection is her company using on a Gateway? A.&nbsp;&nbsp;&nbsp; SandBlast Threat EmulationB.&nbsp;&nbsp;&nbsp; SandBlast AgentC.&nbsp;&nbsp;&nbsp; Check Point ProtectD.&nbsp;&nbsp;&nbsp; SandBlast Threat Extraction Answer: D NEW QUESTION 313What is the command to see cluster status in cli expert mode? A.&nbsp;&nbsp;&nbsp; fw ctl statB.&nbsp;&nbsp;&nbsp; clusterXL statC.&nbsp;&nbsp;&nbsp; clusterXL statusD.&nbsp;&nbsp;&nbsp; cphaprob stat Answer: A NEW QUESTION 314On R80.10 when configuring Third-Party devices to read the logs using the LEA (Log Export API) the default Log Server uses port ____. A.&nbsp;&nbsp;&nbsp; 18210B.&nbsp;&nbsp;&nbsp; 18184C.&nbsp;&nbsp;&nbsp; 257D.&nbsp;&nbsp;&nbsp; 18191 Answer: B NEW QUESTION 315If the first packet of an UDP session is rejected by a security policy, what does the firewall send to the client? A.&nbsp;&nbsp;&nbsp; NothingB.&nbsp;&nbsp;&nbsp; TCP FINC.&nbsp;&nbsp;&nbsp; TCP RSTD.&nbsp;&nbsp;&nbsp; ICMP unreachable Answer: A NEW QUESTION 316What is the mechanism behind Threat Extraction? A.&nbsp;&nbsp;&nbsp; This is a new mechanism which extracts malicious files from a document to use it as a counter-attack against its sender.B.&nbsp;&nbsp;&nbsp; This is a new mechanism which is able to collect malicious files out of any kind of file types to destroy it prior to sending it to the intended recipient.C.&nbsp;&nbsp;&nbsp; This is a new mechanism to identify the IP address of the sender of malicious codes and to put it into the SAM database (Suspicious Activity Monitoring).D.&nbsp;&nbsp;&nbsp; Any active contents of a document, such as JavaScripts, macros and links will be removed from the document and forwarded to the intended recipient, which makes this solution very fast. Answer: D NEW QUESTION 317What is the benefit of Manual NAT over Automatic NAT? A.&nbsp;&nbsp;&nbsp; If you create a new Security Policy, the Manual NAT rules will be transferred to this new policy.B.&nbsp;&nbsp;&nbsp; There is no benefit since Automatic NAT has in any case higher priority over Manual NAT.C.&nbsp;&nbsp;&nbsp; You have the full control about the priority of the NAT rules.D.&nbsp;&nbsp;&nbsp; On IPSO and GAIA Gateways, it is handled in a Stateful manner. Answer: C NEW QUESTION 318The CPD daemon is a Firewall Kernel Process that does NOT do which of the following? A.&nbsp;&nbsp;&nbsp; Secure Internal Communication (SIC)B.&nbsp;&nbsp;&nbsp; Restart Daemons if they failC.&nbsp;&nbsp;&nbsp; Transfer messages between Firewall processesD.&nbsp;&nbsp;&nbsp; Pulls application monitoring status Answer: D NEW QUESTION 319Which of the following is NOT an attribute of packer acceleration? A.&nbsp;&nbsp;&nbsp; Source addressB.&nbsp;&nbsp;&nbsp; ProtocolC.&nbsp;&nbsp;&nbsp; Destination portD.&nbsp;&nbsp;&nbsp; Application Awareness Answer: D NEW QUESTION 320Which is a suitable command to check whether Drop Templates are activated or not? A.&nbsp;&nbsp;&nbsp; fw ctl get int activate_drop_templatesB.&nbsp;&nbsp;&nbsp; fwaccel statC.&nbsp;&nbsp;&nbsp; fwaccel statsD.&nbsp;&nbsp;&nbsp; fw ctl templates Answer: B NEW QUESTION 321Please choose correct command syntax to add an "emailserver1" host with IP address 10.50.23.90 using GAiA management CLI. A.&nbsp;&nbsp;&nbsp; host name myHost12 ip-address 10.50.23.90B.&nbsp;&nbsp;&nbsp; mgmt add host name ip-address 10.50.23.90C.&nbsp;&nbsp;&nbsp; add host name emailserver1 ip-address 10.50.23.90D.&nbsp;&nbsp;&nbsp; mgmt add host name emailserver1 ip-address 10.50.23.90 Answer: D NEW QUESTION 322The CDT utility supports which of the following? A.&nbsp;&nbsp;&nbsp; Major version upgrades to R77.30B.&nbsp;&nbsp;&nbsp; Only Jumbo HFA's and hotfixesC.&nbsp;&nbsp;&nbsp; Only major version upgrades to R80.10D.&nbsp;&nbsp;&nbsp; All upgrades Answer: D NEW QUESTION 323Using ClusterXL, what statement is true about the Sticky Decision Function? A.&nbsp;&nbsp;&nbsp; Can only be changed for Load Sharing implementations.B.&nbsp;&nbsp;&nbsp; All connections are processed and synchronized by the pivot.C.&nbsp;&nbsp;&nbsp; Is configured using cpconfig.D.&nbsp;&nbsp;&nbsp; Is only relevant when using SecureXL. Answer: A NEW QUESTION 324What command would show the API server status? A.&nbsp;&nbsp;&nbsp; cpm statusB.&nbsp;&nbsp;&nbsp; api restartC.&nbsp;&nbsp;&nbsp; api statusD.&nbsp;&nbsp;&nbsp; show api status Answer: D NEW QUESTION 325How Capsule Connect and Capsule Workspace differ? A.&nbsp;&nbsp;&nbsp; Capsule Connect provides a Layer3 VPN. Capsule Workspace provides a Desktop with usable applications.B.&nbsp;&nbsp;&nbsp; Capsule Workspace can provide access to any application.C.&nbsp;&nbsp;&nbsp; Capsule Connect provides Business data isolation.D.&nbsp;&nbsp;&nbsp; Capsule Connect does not require an installed application at client. Answer: A NEW QUESTION 326Which of the following is a new R80.10 Gateway feature that had not been available in R77.X and older? A.&nbsp;&nbsp;&nbsp; The rule base can be built of layers, each containing a set of the security rules.Layers are inspected in the order in which they are defined, allowing control over the rule base flow and which security functionalities take precedence.B.&nbsp;&nbsp;&nbsp; Limits the upload and download throughput for streaming media in the company to 1 Gbps.C.&nbsp;&nbsp;&nbsp; Time object to a rule to make the rule active only during specified times.D.&nbsp;&nbsp;&nbsp; Sub Policies are sets of rules that can be created and attached to specific rules.If the rule is matched, inspection will continue in the sub policy attached to it rather than in the next rule. Answer: D NEW QUESTION 327What are the three components for Check Point Capsule? A.&nbsp;&nbsp;&nbsp; Capsule Docs, Capsule Cloud, Capsule ConnectB.&nbsp;&nbsp;&nbsp; Capsule Workspace, Capsule Cloud, Capsule ConnectC.&nbsp;&nbsp;&nbsp; Capsule Workspace, Capsule Docs, Capsule ConnectD.&nbsp;&nbsp;&nbsp; Capsule Workspace, Capsule Docs, Capsule Cloud Answer: D NEW QUESTION 328Full synchronization between cluster members is handled by Firewall Kernel. Which port is used for this? A.&nbsp;&nbsp;&nbsp; UDP port 265B.&nbsp;&nbsp;&nbsp; TCP port 265C.&nbsp;&nbsp;&nbsp; UDP port 256D.&nbsp;&nbsp;&nbsp; TCP port 256 Answer: B NEW QUESTION 329What is true about the IPS-Blade? A.&nbsp;&nbsp;&nbsp; In R80, IPS is managed by the Threat Prevention Policy.B.&nbsp;&nbsp;&nbsp; In R80, in the IPS Layer, the only three possible actions are Basic, Optimized and Strict.C.&nbsp;&nbsp;&nbsp; In R80, IPS Exceptions cannot be attached to "all rules".D.&nbsp;&nbsp;&nbsp; In R80, the GeoPolicy Exceptions and the Threat Prevention Exceptions are the same. Answer: A NEW QUESTION 330Due to high CPU workload on the Security Gateway, the security administrator decided to purchase a new multicore CPU to replace the existing single core CPU. After installation, is the administrator required to perform any additional tasks? A.&nbsp;&nbsp;&nbsp; Go to clash-Run cpstop | Run cpstart.B.&nbsp;&nbsp;&nbsp; Go to clash-Run cpconfig | Configure CoreXL to make use of the additional Cores | Exit cpconfig | Reboot Security Gateway.C.&nbsp;&nbsp;&nbsp; Administrator does not need to perform any task. Check Point will make use of the newly installed CPU and Cores.D.&nbsp;&nbsp;&nbsp; Go to clash-Run cpconfig | Configure CoreXL to make use of the additional Cores | Exit cpconfig | Reboot Security Gateway | Install Security Policy. Answer: B NEW QUESTION 331When installing a dedicated R80 SmartEvent server, what is the recommended size of the root partition? A.&nbsp;&nbsp;&nbsp; Any size.B.&nbsp;&nbsp;&nbsp; Less than 20 GB.C.&nbsp;&nbsp;&nbsp; More than 10 GB and less than 20 GB.D.&nbsp;&nbsp;&nbsp; At least 20 GB. Answer: D NEW QUESTION 332Which firewall daemon is responsible for the FW CLI commands? A.&nbsp;&nbsp;&nbsp; fwdB.&nbsp;&nbsp;&nbsp; fwmC.&nbsp;&nbsp;&nbsp; cpmD.&nbsp;&nbsp;&nbsp; cpd Answer: A NEW QUESTION 333If the Active Security Management Server fails or if it becomes necessary to change the Active to Standby, the following steps must be taken to prevent data loss. Providing the Active Security Management Server is responsible, which of the following steps should NOT be performed? A.&nbsp;&nbsp;&nbsp; Rename the hostname of the Standby member to match exactly the hostname of the Active member.B.&nbsp;&nbsp;&nbsp; Change the Standby Security Management Server to Active.C.&nbsp;&nbsp;&nbsp; Change the Active Security Management Server to Standby.D.&nbsp;&nbsp;&nbsp; Manually synchronize the Active and Standby Security Management Servers. Answer: A NEW QUESTION 334Using R80 Smart Console, what does a "pencil icon" in a rule mean? A.&nbsp;&nbsp;&nbsp; I have changed this rule.B.&nbsp;&nbsp;&nbsp; Someone else has changed this rule.C.&nbsp;&nbsp;&nbsp; This rule is managed by check point's SOC.D.&nbsp;&nbsp;&nbsp; This rule can't be changed as it's an implied rule. Answer: A NEW QUESTION 335Which method below is NOT one of the ways to communicate using the Management API's? A.&nbsp;&nbsp;&nbsp; Typing API commands using the "mgmt_cli" command.B.&nbsp;&nbsp;&nbsp; Typing API commands from a dialog box inside the SmartConsole GUI application.C.&nbsp;&nbsp;&nbsp; Typing API commands using Gaia's secure shell (clash) 19+.D.&nbsp;&nbsp;&nbsp; Sending API commands over an http connection using web-services. Answer: D NEW QUESTION 336Session unique identifiers are passed to the web api using which http header option? A.&nbsp;&nbsp;&nbsp; X-chkp-sidB.&nbsp;&nbsp;&nbsp; Accept-CharsetC.&nbsp;&nbsp;&nbsp; Proxy-AuthorizationD.&nbsp;&nbsp;&nbsp; Application Answer: C NEW QUESTION 337What is the main difference between Threat Extraction and Threat Emulation? A.&nbsp;&nbsp;&nbsp; Threat Emulation never delivers a file and takes more than 3 minutes to complete.B.&nbsp;&nbsp;&nbsp; Threat Extraction always delivers a file and takes less than a second to complete.C.&nbsp;&nbsp;&nbsp; Threat Emulation never delivers a file that takes less than a second to complete.D.&nbsp;&nbsp;&nbsp; Threat Extraction never delivers a file and takes more than 3 minutes to complete. Answer: B NEW QUESTION 338Which one of these features is NOT associated with the Check Point URL Filtering and Application Control Blade? A.&nbsp;&nbsp;&nbsp; Detects and blocks malware by correlating multiple detection engines before users are affected.B.&nbsp;&nbsp;&nbsp; Configure rules to limit the available network bandwidth for specified users or groups.C.&nbsp;&nbsp;&nbsp; Use UserCheck to help users understand that certain websites are against the company's security policy.D.&nbsp;&nbsp;&nbsp; Make rules to allow or block applications and Internet sites for individual applications, categories, and risk levels. Answer: A NEW QUESTION 339You want to store the GAiA configuration in a file for later reference. What command should you use? A.&nbsp;&nbsp;&nbsp; write mem &lt;filename&gt;B.&nbsp;&nbsp;&nbsp; show config -f &lt;filename&gt;C.&nbsp;&nbsp;&nbsp; save config -o &lt;filename&gt;D.&nbsp;&nbsp;&nbsp; save configuration &lt;filename&gt; Answer: D NEW QUESTION 340Traffic from source 192.168.1.1 is going to www.google.com. The Application Control Blade on the gateway is inspecting the traffic. Assuming acceleration is enable which path is handling the traffic? A.&nbsp;&nbsp;&nbsp; Slow PathB.&nbsp;&nbsp;&nbsp; Medium PathC.&nbsp;&nbsp;&nbsp; Fast PathD.&nbsp;&nbsp;&nbsp; Accelerated Path Answer: A NEW QUESTION 341From SecureXL perspective, what are the tree paths of traffic flow? A.&nbsp;&nbsp;&nbsp; Initial Path; Medium Path; Accelerated PathB.&nbsp;&nbsp;&nbsp; Layer Path; Blade Path; Rule PathC.&nbsp;&nbsp;&nbsp; Firewall Path; Accept Path; Drop PathD.&nbsp;&nbsp;&nbsp; Firewall Path; Accelerated Path; Medium Path Answer: D NEW QUESTION 342You are asked to check the status of several user-mode processes on the management server and gateway. Which of the following processes can only be seen on a Management Server? A.&nbsp;&nbsp;&nbsp; fwdB.&nbsp;&nbsp;&nbsp; fwmC.&nbsp;&nbsp;&nbsp; cpdD.&nbsp;&nbsp;&nbsp; cpwd Answer: B NEW QUESTION 343R80.10 management server can manage gateways with which versions installed? A.&nbsp;&nbsp;&nbsp; Versions R77 and higherB.&nbsp;&nbsp;&nbsp; Versions R76 and higherC.&nbsp;&nbsp;&nbsp; Versions R75.20 and higherD.&nbsp;&nbsp;&nbsp; Version R75 and higher Answer: B NEW QUESTION 344You want to verify if there are unsaved changes in GAiA that will be lost with a reboot. What command can be used? A.&nbsp;&nbsp;&nbsp; show unsavedB.&nbsp;&nbsp;&nbsp; show save-stateC.&nbsp;&nbsp;&nbsp; show configuration diffD.&nbsp;&nbsp;&nbsp; show config-state Answer: D NEW QUESTION 345In what way is Secure Network Distributor (SND) a relevant feature of the Security Gateway? A.&nbsp;&nbsp;&nbsp; SND is a feature to accelerate multiple SSL VPN connections.B.&nbsp;&nbsp;&nbsp; SND is an alternative to IPSec Main Mode, using only 3 packets.C.&nbsp;&nbsp;&nbsp; SND is used to distribute packets among Firewall instances.D.&nbsp;&nbsp;&nbsp; SND is a feature of fw monitor to capture accelerated packets. Answer: C NEW QUESTION 346Sticky Decision Function (SDF) is required to prevent which of the following? Assume you set up an Active-Active cluster. A.&nbsp;&nbsp;&nbsp; Symmetric routingB.&nbsp;&nbsp;&nbsp; FailoversC.&nbsp;&nbsp;&nbsp; Asymmetric routingD.&nbsp;&nbsp;&nbsp; Anti-Spoofing Answer: B NEW QUESTION 347What are the steps to configure the HTTPS Inspection Policy? A.&nbsp;&nbsp;&nbsp; Go to Manage&amp;Settings &gt; Blades &gt; HTTPS Inspection &gt; Configure in SmartDashboardB.&nbsp;&nbsp;&nbsp; Go to Application&amp;url filtering blade &gt; Advanced &gt; Https Inspection &gt; PolicyC.&nbsp;&nbsp;&nbsp; Go to Manage&amp;Settings &gt; Blades &gt; HTTPS Inspection &gt; PolicyD.&nbsp;&nbsp;&nbsp; Go to Application&amp;url filtering blade &gt; Https Inspection &gt; Policy Answer: C NEW QUESTION 348What is the difference between SSL VPN and IPSec VPN? A.&nbsp;&nbsp;&nbsp; IPSec VPN does not require installation of a resident VPN client.B.&nbsp;&nbsp;&nbsp; SSL VPN requires installation of a resident VPN client.C.&nbsp;&nbsp;&nbsp; SSL VPN and IPSec VPN are the same.D.&nbsp;&nbsp;&nbsp; IPSec VPN requires installation of a resident VPN client and SSL VPN requires only an installed Browser. Answer: D NEW QUESTION 349Which statement is NOT TRUE about Delta synchronization? A.&nbsp;&nbsp;&nbsp; Using UDP Multicast or Broadcast on port 8161.B.&nbsp;&nbsp;&nbsp; Using UDP Multicast or Broadcast on port 8116.C.&nbsp;&nbsp;&nbsp; Quicker than Full sync.D.&nbsp;&nbsp;&nbsp; Transfers changes in the Kernel tables between cluster members. Answer: A NEW QUESTION 350Under which file is the proxy arp configuration stored? A.&nbsp;&nbsp;&nbsp; $FWDIR/state/proxy_arp.conf on the management serverB.&nbsp;&nbsp;&nbsp; $FWDIR/conf/local.arp on the management serverC.&nbsp;&nbsp;&nbsp; $FWDIR/state/_tmp/proxy.arp on the security gatewayD.&nbsp;&nbsp;&nbsp; $FWDIR/conf/local.arp on the gateway Answer: D    Download the newest PassLeader 156-215.80 dumps from passleader.com now! 100% Pass Guarantee! 156-215.80 PDF dumps &amp; 156-215.80 VCE dumps:&nbsp;https://www.passleader.com/156-215-80.html (417 Q&amp;As) (New Questions Are 100% Available and Wrong Answers Have Been Corrected! Free VCE simulator!) P.S. New 156-215.80 dumps PDF: https://drive.google.com/open?id=0B-ob6L_QjGLpdm81T0hOX1ZpWGs

---------------------------------------------------


Images: 

---------------------------------------------------




---------------------------------------------------


Post date: 2018-07-04 07:47:23

Post date GMT: 2018-07-04 07:47:23

Post modified date: 2018-07-04 07:47:23

Post modified date GMT: 2018-07-04 07:47:23



____________________________________________________________________________________________


Export of Post and Page as text file has been powered by [ Universal Post Manager ] plugin from www.gconverters.com