Check the Available 156-315.80 Exam Dumps with 457 QA’s UPDATED 2022 [Q57-Q74]

Rate this post

Check the Available 156-315.80 Exam Dumps with 457 QA’s UPDATED 2022

Download 156-315.80 Exam Dumps Questions to get 100% Success in CheckPoint

The benefit in Obtaining the 156-315.80 Exam Certification

Capture the attention of recruiters
Score CP job opportunities
Gain employer recognition for promotions and raises
This 156-315.80 exam covers a different technology to meet the needs of varying job roles

How to study the 156-315.80 Exam

ExamsTorrent expert team recommends you to prepare some notes on these topics along with it don’t forget to practice Check Point Certified Security Expert – R80 156-315.80 Exam which been written by our expert team, Both these will help you a lot to clear this exam with good marks.

NO.57 When simulating a problem on ClusterXL cluster with cphaprob -d STOP -s problem -t 0 register, to initiate a failover on an active cluster member, what command allows you remove the problematic state?

cphaprob -d STOP unregister

cphaprob STOP unregister

cphaprob unregister STOP

cphaprob -d unregister STOP
esting a failover in a controlled manner using following command;
# cphaprob -d STOP -s problem -t 0 register
This will register a problem state on the cluster member this was entered on; If you then run;
# cphaprob list
this will show an entry named STOP.
to remove this problematic register run following;
# cphaprob -d STOP unregister

NO.58 Fill in the blank: A ________ VPN deployment is used to provide remote users with secure access to internal corporate resources by authenticating the user through an internet browser.

Clientless remote access

Clientless direct access

Client-based remote access

Direct access

Explanation/Reference:
Reference: https://sc1.checkpoint.com/documents/R80/CP_R80BC_Firewall/html_frameset.htm?
topic=documents/R80/CP_R80BC_Firewall/92704

NO.59 The Event List within the Event tab contains:

a list of options available for running a query.

the top events, destinations, sources, and users of the query results, either as a chart or in a tallied list.

events generated by a query.

the details of a selected event.

Explanation/Reference: https://sc1.checkpoint.com/documents/R80/CP_R80_LoggingAndMonitoring/html_frameset.htm?
topic=documents/R80/CP_R80_LoggingAndMonitoring/131915

NO.60 View the rule below. What does the lock-symbol in the left column mean? (Choose the BEST answer.)

The current administrator has read-only permissions to Threat Prevention Policy.

Another user has locked the rule for editing.

Configuration lock is present. Click the lock symbol to gain read-write access.

The current administrator is logged in as read-only because someone else is editing the policy.
https://sc1.checkpoint.com/documents/R80/CP_R80_SecMGMT/html_frameset.htm?topic=documents/R80/CP_R80_SecMGMT/124265

NO.61 Full synchronization between cluster members is handled by Firewall Kernel. Which port is used for this?

UDP port 265

TCP port 265

UDP port 256

TCP port 256

Synchronization works in two modes:
Full Sync transfers all Security Gateway kernel table information from one cluster member to another. It is handled by the fwd daemon using an encrypted TCP connection on port 256.
Delta Sync transfers changes in the kernel tables between cluster members. Delta sync is handled by the Security Gateway kernel using UDP connections on port 8116.
References:

NO.62 What are different command sources that allow you to communication with the API server?

SmartView Monoter, API_cli Tool, Gala CLI. Web Services

SmartConsole GUI Console,MGMT_Cli Tool,Gala CLI, Web Services

SmartConsole GUI Console API Console _cli Tool,CLI,Web Services

API_cli Tool Gala CLI, Web Services

NO.63 Full synchronization between cluster members is handled by Firewall kernel. Which port is used for this?

UDP port 265

TCP port 265

UDP port 256

TCP port 256

NO.64 Tom has connected to the R80 Management Server remotely using SmartConsole and is in the process of making some Rule Base changes, when he suddenly loses connectivity. Connectivity is restored shortly afterward.
What will happen to the changes already made?

Tom’s changes will have been stored on the Management when he reconnects and he will not lose any of his work.

Tom will have to reboot his SmartConsole computer, and access the Management cache store on that computer, which is only accessible after a reboot.

Tom’s changes will be lost since he lost connectivity and he will have to start again.

Tom will have to reboot his SmartConsole computer, clear to cache, and restore changes.

NO.65 On R80.10 when configuring Third-Party devices o read the logs using the LEA (Log Export API) the default Log Server uses port:

18210

18184

257

18191

Reference:
https://sc1.checkpoint.com/documents/R80/CP_R8Q_LoggingAndMonitorinq/html_framese t.htm?
topic=documents/R80/CP_R80_LoggingAndMonitoring/120829

NO.66 One of major features in R80 SmartConsole is concurrent administration.
Which of the following is NOT possible considering that AdminA, AdminB and AdminC are editing the same Security Policy?

A lock icon shows that a rule or an object is locked and will be available.

AdminA and AdminB are editing the same rule at the same time.

A lock icon next to a rule informs that any Administrator is working on this particular rule.

AdminA, AdminB and AdminC are editing three different rules at the same time.

NO.67 Advanced Security Checkups can be easily conducted within:

Reports

Advanced

Checkups

Views

Summary

Explanation

NO.68 What is the least amount of CPU cores required to enable CoreXL?

Reference:
https://sc1.checkpoint.com/documents/R76/CP_R76_PerformanceTuning_WebAdmin/6731
.htm

NO.69 Which TCP-port does CPM process listen to?

18191

18190

8983

19009

NO.70 SmartEvent uses it’s event policy to identify events. How can this be customized?

By modifying the firewall rulebase

By creating event candidates

By matching logs against exclusions

By matching logs against event rules

NO.71 When gathering information about a gateway using CPINFO, what information is included or excluded when using the “-x” parameter?

Includes the registry

Gets information about the specified Virtual System

Does not resolve network addresses

Output excludes connection table

References:

NO.72 Which command can you use to enable or disable multi-queue per interface?

cpmq set

Cpmqueue set

Cpmq config

St cpmq enable

Explanation/Reference:
Reference: https://sc1.checkpoint.com/documents/R76/
CP_R76_PerformanceTuning_WebAdmin/93689.htm

NO.73 What state is the Management HA in when both members have different policies/databases?

Synchronized

Never been synchronized

Lagging

Collision
https://sc1.checkpoint.com/documents/R77/CP_R77_SecurityManagement_WebAdminGuide/ html_frameset.htm?topic=documents/R77/CP_R77_SecurityManagement_WebAdminGuide/98838

NO.74 The log server sends what to the Correlation Unit?

Authentication requests

CPMI dbsync

Logs

Event Policy

Loading …