Free CheckPoint 156-215.81 Exam Dumps and 156-215.81 Exam Questions

Question No: 11

MultipleChoice

An internal router is sending UDP keep-alive packets that are being encapsulated with GRE and sent through your R77 Security Gateway to a partner site. A rule for GRE traffic is configured for ACCEPT/LOG. Although the keep-alive packets are being sent every minute, a search through the SmartView Tracker logs for GRE traffic only shows one entry for the whole day (early in the morning after a Policy install).

Your partner site indicates they are successfully receiving the GRE encapsulated keep-alive packets on the 1-minute interval.

If GRE encapsulation is turned off on the router, SmartView Tracker shows a log entry for the UDP keep-alive packet every minute.

Which of the following is the BEST for this behavior?

Options

AThe setting Log does not capture this level of detail for GRE. Set the rule tracking action to Audit since certain types of traffic can only be tracked this way.

BThe log unification process is using a LUUID (Log Unification Unique Identification) that has become corrupt. Because it is encrypted, the R77 Security Gateway cannot distinguish between GRE sessions. This is a known issue with GRE. Use IPSEC instead of the non-standard GRE protocol for encapsulation.

CThe Log Server log unification process unifies all log entries from the Security Gateway on a specific connection into only one log entry in the SmartView Tracker. GRE traffic has a 10 minute session timeout, thus each keep-alive packet is considered part of the original logged connection at the beginning of the day.

DThe Log Server is failing to log GRE traffic properly because it is VPN traffic. Disable all VPN configuration to the partner site to enable proper logging.

Question No: 12

MultipleChoice

What are types of Check Point APIs available currently as part of R80.10 code?

Options

ASecurity Gateway API, Management API, Threat Prevention API and Identity Awareness Web Services API

BManagement API, Threat Prevention API, Identity Awareness Web Services API and OPSEC SDK API

COSE API, OPSEC SDK API, Threat Prevention API and Policy Editor API

DCPMI API, Management API, Threat Prevention API and Identity Awareness Web Services API

Question No: 13

MultipleChoice

Which Threat Prevention Software Blade provides protection from malicious software that can infect your network computers?

Options

AAnti-Malware

BIPS

CAnti-bot

DAnti-Spam

Question No: 14

MultipleChoice

Administrator Dave logs into R80 Management Server to review and makes some rule changes. He notices that there is a padlock sign next to the DNS rule in the Rule Base.

What is the possible for this?

Options

ADNS Rule is using one of the new feature of R80 where an administrator can mark a rule with the padlock icon to let other administrators know it is important.

BAnother administrator is logged into the Management and currently editing the DNS Rule.

CDNS Rule is a placeholder rule for a rule that existed in the past but was deleted.

DThis is normal behavior in R80 when there are duplicate rules in the Rule Base.

Question No: 15

MultipleChoice

Which the following type of authentication on Mobile Access can NOT be used as the first authentication method?

Options

ADynamic ID

BRADIUS

CUsername and Password

DCertificate

Question No: 16

MultipleChoice

Which remote Access Solution is clientless?

Options

ACheckpoint Mobile

BEndpoint Security Suite

CSecuRemote

DMobile Access Portal

Question No: 17

MultipleChoice

What component of R80 Management is used for indexing?

Options

ADBSync

BAPI Server

Cfwm

DSOLR

Question No: 18

MultipleChoice

Which is the correct order of a log flow processed by SmartEvent components:

Options

AFirewall > Correlation Unit > Log Server > SmartEvent Server Database > SmartEvent Client

BFirewall > SmartEvent Server Database > Correlation Unit > Log Server > SmartEvent Client

CFirewall > Log Server > SmartEvent Server Database > Correlation Unit > SmartEvent Client

DFirewall > Log Server > Correlation Unit > SmartEvent Server Database > SmartEvent Client

Question No: 19

MultipleChoice

The WebUI offers three methods for downloading Hotfixes via CPUSE. One of them is Automatic method. How many times per day will CPUSE agent check for hotfixes and automatically download them?

Options

ASix times per day

BSeven times per day

CEvery two hours

DEvery three hours

Question No: 20

MultipleChoice

On R80.10 when configuring Third-Party devices to read the logs using the LEA (Log Export API) the default Log Server uses port:

Options

A18210

B18184

C257

D18191

Free CheckPoint 156-215.81 Exam Dumps - Page 2