Download Check Point Certified Security Expert R81.VCEPlus.156-315.81.2022-07-09.1e.50q.vcex

SmartEvent has several components that function together to track security threats. What is the function of the Correlation Unit as a component of this architecture?

• A: Analyzes each log entry as it arrives at the log server according to the Event Policy. When a threat pattern is identified, an event is forwarded to the SmartEvent Server.
• B: Correlates all the identified threats with the consolidation policy.
• C: Collects syslog data from third party devices and saves them to the database.
• D: Connects with the SmartEvent Client when generating threat reports.

Correct Answer: A

SecureXL improves non-encrypted firewall traffic throughput and encrypted VPN traffic throughput.

• A: This statement is true because SecureXL does improve all traffic.
• B: This statement is false because SecureXL does not improve this traffic but CoreXL does.
• C: This statement is true because SecureXL does improve this traffic.
• D: This statement is false because encrypted traffic cannot be inspected.

Correct Answer: C

Which command gives us a perspective of the number of kernel tables?

• A: fw tab -t
• B: fw tab -s
• C: fw tab -n
• D: fw tab -k

Correct Answer: B

When simulating a problem on ClusterXL cluster with cphaprob d STOP -s problem -t 0 register, to initiate a failover on an active cluster member, what command allows you remove the problematic state?

• A: cphaprob d STOP unregister
• B: cphaprob STOP unregister
• C: cphaprob unregister STOP
• D: cphaprob d unregister STOP

Correct Answer: A

How would you deploy TE250X Check Point appliance just for email traffic and in-line mode without a Check Point Security Gateway?

• A: Install appliance TE250X on SpanPort on LAN switch in MTA mode.
• B: Install appliance TE250X in standalone mode and setup MTA.
• C: You can utilize only Check Point Cloud Services for this scenario.
• D: It is not possible, always Check Point SGW is needed to forward emails to SandBlast appliance.

Correct Answer: C

What is the main difference between Threat Extraction and Threat Emulation?

• A: Threat Emulation never delivers a file and takes more than 3 minutes to complete.
• B: Threat Extraction always delivers a file and takes less than a second to complete.
• C: Threat Emulation never delivers a file that takes less than a second to complete.
• D: Threat Extraction never delivers a file and takes more than 3 minutes to complete. 

Correct Answer: B

When Dynamic Dispatcher is enabled, connections are assigned dynamically with the exception of:

• A: Threat Emulation
• B: HTTPS
• C: QOS
• D: VoIP

Correct Answer: D

SandBlast offers flexibility in implementation based on their individual business needs. What is an option for deployment of Check Point SandBlast Zero-Day Protection?

• A: Smart Cloud Services
• B: Load Sharing Mode Services
• C: Threat Agent Solution
• D: Public Cloud Services 

Correct Answer: A

Which of the following is NOT a component of Check Point Capsule?

• A: Capsule Docs
• B: Capsule Cloud
• C: Capsule Enterprise
• D: Capsule Workspace

Correct Answer: C

What is the purpose of Priority Delta in VRRP?

• A: When a box up, Effective Priority = Priority + Priority Delta
• B: When an Interface is up, Effective Priority = Priority + Priority Delta
• C: When an Interface fail, Effective Priority = Priority  Priority Delta 
• D: When a box fail, Effective Priority = Priority  Priority Delta

Correct Answer: C