156-315.81 Exam Questions

Total 422 Questions

Last Updated Exam : 30-Dec-2024

Which encryption algorithm is the least secured?


A. AES-128


B. AES-256


C. DES


D. 3DES





C.
  DES

Which command shows the current connections distributed by CoreXL FW instances?


A. fw ctl multik stat


B. fw ctl affinity -l


C. fw ctl instances -v


D. fw ctl iflist





A.
  fw ctl multik stat

Please choose correct command to add an “emailserver1” host with IP address 10.50.23.90 using GAiA management CLI?


A. host name myHost12 ip-address 10.50.23.90


B. mgmt: add host name ip-address 10.50.23.90


C. add host name emailserver1 ip-address 10.50.23.90


D. mgmt: add host name emailserver1 ip-address 10.50.23.90





D.
  mgmt: add host name emailserver1 ip-address 10.50.23.90

Explanation: The correct command to add an “emailserver1” host with IP address 10.50.23.90 using GAiA management CLI is mgmt: add host name emailserver1 ip-address 10.50.23.90. This command will create a new host object in the Security Management Server database, with the specified name and IP address. The mgmt: prefix indicates that the command is executed on the Security Management Server, and not on the local GAiA machine. The other commands are either missing the mgmt: prefix, or have incorrect syntax or parameters.

How do Capsule Connect and Capsule Workspace differ?


A. Capsule Connect provides a Layer3 VPN. Capsule Workspace provides a Desktop with usable applications.


B. Capsule Workspace can provide access to any application.


C. Capsule Connect provides Business data isolation.


D. Capsule Connect does not require an installed application at client.





A.
  Capsule Connect provides a Layer3 VPN. Capsule Workspace provides a Desktop with usable applications.

What is the most recommended way to install patches and hotfixes?


A. CPUSE Check Point Update Service Engine


B. rpm -Uv


C. Software Update Service


D. UnixinstallScript





A.
  CPUSE Check Point Update Service Engine

What is the port used for SmartConsole to connect to the Security Management Server?


A. CPMI port 18191/TCP


B. CPM port/TCP port 19009


C. SIC port 18191/TCP


D. https port 4434/TCP





A.
  CPMI port 18191/TCP

Which of the following will NOT affect acceleration?


A. Connections destined to or originated from the Security gateway


B. A 5-tuple match


C. Multicast packets


D. Connections that have a Handler (ICMP, FTP, H.323, etc.)





B.
  A 5-tuple match

Using Threat Emulation technologies, what is the best way to block .exe and .bat file types?


A. enable DLP and select.exe and .bat file type


B. enable .exe & .bat protection in IPS Policy


C. create FW rule for particular protocol


D. tecli advanced attributes set prohibited_file_types exe.bat





A.
  enable DLP and select.exe and .bat file type

Which of the following is NOT a component of Check Point Capsule?


A. Capsule Docs


B. Capsule Cloud


C. Capsule Enterprise


D. Capsule Workspace





C.
  Capsule Enterprise

Which directory below contains log files?


A. /opt/CPSmartlog-R81/log


B. /opt/CPshrd-R81/log


C. /opt/CPsuite-R81/fw1/log


D. /opt/CPsuite-R81/log





C.
  /opt/CPsuite-R81/fw1/log


Page 13 out of 43 Pages
Previous