File Info
| Exam | Check Point Certified Security Expert R81 |
| Number | 156-315.81 |
| File Name | Checkpoint.156-315.81.VCEplus.2022-07-09.50q.vcex |
| Size | 26 KB |
| Posted | Jul 09, 2022 |
| Download | Checkpoint.156-315.81.VCEplus.2022-07-09.50q.vcex |
How to open VCEX & EXAM Files?
Files with VCEX & EXAM extensions can be opened by ProfExam Simulator.
Coupon: MASTEREXAM
With discount: 20%
Demo Questions
Question 1
SmartEvent has several components that function together to track security threats. What is the function of the Correlation Unit as a component of this architecture?
- Analyzes each log entry as it arrives at the log server according to the Event Policy. When a threat pattern is identified, an event is forwarded to the SmartEvent Server.
- Correlates all the identified threats with the consolidation policy.
- Collects syslog data from third party devices and saves them to the database.
- Connects with the SmartEvent Client when generating threat reports.
Correct answer: A
Question 2
SecureXL improves non-encrypted firewall traffic throughput and encrypted VPN traffic throughput.
- This statement is true because SecureXL does improve all traffic.
- This statement is false because SecureXL does not improve this traffic but CoreXL does.
- This statement is true because SecureXL does improve this traffic.
- This statement is false because encrypted traffic cannot be inspected.
Correct answer: C
Explanation:
SecureXL improved non-encrypted firewall traffic throughput, and encrypted VPN traffic throughput, by nearly an order-of-magnitude- particularly for small packets flowing in long duration connections. SecureXL improved non-encrypted firewall traffic throughput, and encrypted VPN traffic throughput, by nearly an order-of-magnitude- particularly for small packets flowing in long duration connections.
Question 3
Which command gives us a perspective of the number of kernel tables?
- fw tab -t
- fw tab -s
- fw tab -n
- fw tab -k
Correct answer: B
Question 4
When simulating a problem on ClusterXL cluster with cphaprob d STOP -s problem -t 0 register, to initiate a failover on an active cluster member, what command allows you remove the problematic state?
- cphaprob d STOP unregister
- cphaprob STOP unregister
- cphaprob unregister STOP
- cphaprob d unregister STOP
Correct answer: A
Explanation:
esting a failover in a controlled manner using following command; # cphaprob -d STOP -s problem -t 0 register This will register a problem state on the cluster member this was entered on; If you then run; # cphaprob list this will show an entry named STOP. to remove this problematic register run following; # cphaprob -d STOP unregister esting a failover in a controlled manner using following command; # cphaprob -d STOP -s problem -t 0 register This will register a problem state on the cluster member this was entered on; If you then run; # cphaprob list this will show an entry named STOP. to remove this problematic register run following; # cphaprob -d STOP unregister
Question 5
How would you deploy TE250X Check Point appliance just for email traffic and in-line mode without a Check Point Security Gateway?
- Install appliance TE250X on SpanPort on LAN switch in MTA mode.
- Install appliance TE250X in standalone mode and setup MTA.
- You can utilize only Check Point Cloud Services for this scenario.
- It is not possible, always Check Point SGW is needed to forward emails to SandBlast appliance.
Correct answer: C
Question 6
What is the main difference between Threat Extraction and Threat Emulation?
- Threat Emulation never delivers a file and takes more than 3 minutes to complete.
- Threat Extraction always delivers a file and takes less than a second to complete.
- Threat Emulation never delivers a file that takes less than a second to complete.
- Threat Extraction never delivers a file and takes more than 3 minutes to complete.
Correct answer: B
Question 7
When Dynamic Dispatcher is enabled, connections are assigned dynamically with the exception of:
- Threat Emulation
- HTTPS
- QOS
- VoIP
Correct answer: D
Question 8
SandBlast offers flexibility in implementation based on their individual business needs. What is an option for deployment of Check Point SandBlast Zero-Day Protection?
- Smart Cloud Services
- Load Sharing Mode Services
- Threat Agent Solution
- Public Cloud Services
Correct answer: A
Question 9
Which of the following is NOT a component of Check Point Capsule?
- Capsule Docs
- Capsule Cloud
- Capsule Enterprise
- Capsule Workspace
Correct answer: C
Question 10
What is the purpose of Priority Delta in VRRP?
- When a box up, Effective Priority = Priority + Priority Delta
- When an Interface is up, Effective Priority = Priority + Priority Delta
- When an Interface fail, Effective Priority = Priority Priority Delta
- When a box fail, Effective Priority = Priority Priority Delta
Correct answer: C
Explanation:
Each instance of VRRP running on a supported interface may monitor the link state of other interfaces. The monitored interfaces do not have to be running VRRP.If a monitored interface loses its link state, then VRRP will decrement its priority over a VRID by the specified delta value and then will send out a new VRRP HELLO packet. If the new effective priority is less than the priority a backup platform has, then the backup platform will beging to send out its own HELLO packet.Once the master sees this packet with a priority greater than its own, then it releases the VIP. Each instance of VRRP running on a supported interface may monitor the link state of other interfaces. The monitored interfaces do not have to be running VRRP.
If a monitored interface loses its link state, then VRRP will decrement its priority over a VRID by the specified delta value and then will send out a new VRRP HELLO packet. If the new effective priority is less than the priority a backup platform has, then the backup platform will beging to send out its own HELLO packet.
Once the master sees this packet with a priority greater than its own, then it releases the VIP.
