First Attempt Guaranteed Success in 156-315.81.20 Exam 2024
Real 156-315.81.20 Exam Questions are the Best Preparation Material
NEW QUESTION # 274
What is true about VRRP implementations?
- A. VRRP membership is enabled in cpconfig
- B. VRRP can be used together with ClusterXL, but with degraded performance
- C. You cannot have a standalone deployment
- D. You cannot have different VRIDs in the same physical network
Answer: C
NEW QUESTION # 275
Tom has connected to the R81 Management Server remotely using SmartConsole and is in the process of making some Rule Base changes, when he suddenly loses connectivity. Connectivity is restored shortly afterward.
What will happen to the changes already made?
- A. Tom's changes will be lost since he lost connectivity and he will have to start again.
- B. Tom's changes will have been stored on the Management when he reconnects and he will not lose any of his work.
- C. Tom will have to reboot his SmartConsole computer, and access the Management cache store on that computer, which is only accessible after a reboot.
- D. Tom will have to reboot his SmartConsole computer, clear to cache, and restore changes.
Answer: B
NEW QUESTION # 276
SandBlast has several functional components that work together to ensure that attacks are prevented in real-time.
Which the following is NOT part of the SandBlast component?
- A. Threat Emulation
- B. Mail Transfer Agent
- C. Mobile Access
- D. Threat Cloud
Answer: C
NEW QUESTION # 277
The Check Point installation history feature in provides the following:
- A. Policy Installation Date, view install changes and install specific version
- B. View install changes
- C. Policy Installation Date only
- D. View install changes and install specific version
Answer: A
NEW QUESTION # 278
Which command collects diagnostic data for analyzing a customer setup remotely?
- A. migrate export
- B. cpv
- C. cpinfo
- D. sysinfo
Answer: C
NEW QUESTION # 279
Which of the following is NOT an attribute of packet acceleration?
- A. Protocol
- B. Destination port
- C. Source address
- D. VLAN Tag
Answer: D
NEW QUESTION # 280
Fill in the blank: The IPS policy for pre-R81 gateways is installed during the _______ .
- A. Anti-bot policy install
- B. Threat Prevention policy install
- C. Access Control policy install
- D. Firewall policy install
Answer: A
NEW QUESTION # 281
Why would an administrator see the message below?
- A. A new Policy Package created on both the Management and Gateway will be deleted and must be backed up first before proceeding.
- B. A new Policy Package created on the Management is going to be installed to the existing Gateway.
- C. A new Policy Package created on the Gateway and transferred to the Management will be overwritten by the Policy Package currently on the Gateway but can be restored from a periodic backup on the Gateway.
- D. A new Policy Package created on the Gateway is going to be installed on the existing Management.
Answer: B
NEW QUESTION # 282
How would you deploy TE250X Check Point appliance just for email traffic and in-line mode without a Check Point Security Gateway?
- A. It is not possible, always Check Point SGW is needed to forward emails to SandBlast appliance.
- B. Install appliance TE250X on SpanPort on LAN switch in MTA mode.
- C. You can utilize only Check Point Cloud Services for this scenario.
- D. Install appliance TE250X in standalone mode and setup MTA.
Answer: C
NEW QUESTION # 283
IF the first packet of an UDP session is rejected by a rule definition from within a security policy (not including the clean up rule), what message is sent back through the kernel?
- A. TCP RST
- B. TCP FIN
- C. Nothing
- D. ICMP unreachable
Answer: C
NEW QUESTION # 284
While using the Gaia CLI. what is the correct command to publish changes to the management server?
- A. json publish
- B. mgmt publish
- C. commit
- D. mgmt_cli commit
Answer: B
NEW QUESTION # 285
What statement best describes the Proxy ARP feature for Manual NAT in R81.20?
- A. local.arp file must always be configured
- B. Translate Destination on Client Side should be configured
- C. Automatic proxy ARP configuration can be enabled
- D. fw ctl proxy should be configured
Answer: A
NEW QUESTION # 286
Check Pont Central Deployment Tool (CDT) communicates with the Security Gateway / Cluster Members over Check Point SIC _______.
- A. TCP Port 18191
- B. TCP Port 19009
- C. TCP Port 18209
- D. TCP Port 18190
Answer: A
NEW QUESTION # 287
Packet acceleration (SecureXL) identities connections by several attributes.
Which of the attributes is NOT used for identifying connection?
- A. Destination Address
- B. Source Port
- C. Source Address
- D. TCP Acknowledgment Number
Answer: D
NEW QUESTION # 288
If the Active Security Management Server fails or if it becomes necessary to change the Active to Standby, the following steps must be taken to prevent data loss. Providing the Active Security Management Server is responsive, which if these steps should NOT be performed:
- A. Change the Standby Security Management Server to Active.
- B. Rename the hostname of the Standby member to match exactly the hostname of the Active member.
- C. Change the Active Security Management Server to Standby.
- D. Manually synchronize the Active and Standby Security Management Servers.
Answer: B
NEW QUESTION # 289
What is false regarding prerequisites for the Central Deployment usage?
- A. Security Gateway must have the latest CPUSE Deployment Agent
- B. The administrator must have write permission on SmartUpdate
- C. No need to establish SIC between gateways and the management server, since the CDT tool will take care about SIC automatically.
- D. The Security Gateway must have a policy installed
Answer: C
NEW QUESTION # 290
The Event List within the Event tab contains:
- A. the details of a selected event.
- B. the top events, destinations, sources, and users of the query results, either as a chart or in a tallied list.
- C. a list of options available for running a query.
- D. events generated by a query.
Answer: D
NEW QUESTION # 291
The "MAC magic" value must be modified under the following condition:
- A. There are more than two members in a firewall cluster
- B. A firewall cluster is configured to use Multicast for CCP traffic
- C. There is more than one cluster connected to the same VLAN
- D. A firewall cluster is configured to use Broadcast for CCP traffic
Answer: C
NEW QUESTION # 292
John is using Management HA.
Which Smartcenter should be connected to for making changes?
- A. active Smartenter
- B. secondary Smartcenter
- C. connect virtual IP of Smartcenter HA
- D. primary Smartcenter
Answer: A
NEW QUESTION # 293
You pushed a policy to your gateway and you cannot access the gateway remotely any more.
What command should you use to remove the policy from the gateway by logging in through console access?
- A. "fw unloadpolicy''
- B. "fwundo"
- C. "fw unloadlocal"
- D. "fw cpstop"
Answer: C
NEW QUESTION # 294
Which of the following is an identity acquisition method that allows a Security Gateway to identify Active Directory users and computers?
- A. Account Unit Query
- B. User Directory Query
- C. Active Directory Query
- D. UserCheck
Answer: C
NEW QUESTION # 295
What is the command to check the status of the SmartEvent Correlation Unit?
- A. fw ctl get int cpsead_stat
- B. fw ctl stat cpsemd
- C. cp_conf get_stat cpsemd
- D. cpstat cpsead
Answer: D
NEW QUESTION # 296
Fill in the blank: The R81 feature _____ permits blocking specific IP addresses for a specified time period.
- A. Suspicious Activity Monitoring
- B. Adaptive Threat Prevention
- C. Local Interface Spoofing
- D. Block Port Overflow
Answer: A
NEW QUESTION # 297
What processes does CPM control?
- A. web_services, dle_server and object_Store
- B. web-services, CPMI process, DLEserver, CPM process
- C. Object-Store, Database changes, CPM Process and web-services
- D. DLEServer, Object-Store, CP Process and database changes
Answer: A
NEW QUESTION # 298
Name the authentication method that requires token authenticator.
- A. SecurelD
- B. DynamiclD
- C. TACACS
- D. Radius
Answer: A
NEW QUESTION # 299
......
Practice LATEST 156-315.81.20 Exam Updated 615 Questions: https://www.guidetorrent.com/156-315.81.20-pdf-free-download.html
Download Latest 156-315.81.20 Dumps with Authentic Real Exam QA's: https://drive.google.com/open?id=11MU6GWGO66AMVRM9Pjdy1apQ2KTARgyP