BEST Verified CheckPoint 156-315.81.20 Exam Questions (2024) [Q198-Q219]

5/5 - (1 vote)

BEST Verified CheckPoint 156-315.81.20 Exam Questions (2024)

The Best Practice Test Preparation for the 156-315.81.20 Certification Exam

Q198. What state is the Management HA in when both members have different policies/databases?

Synchronized

Never been synchronized

Lagging

Collision

Q199. Vanessa is a Firewall administrator. She wants to test a backup of her company’s production Firewall cluster Dallas_GW. She has a lab environment that is identical to her production environment. She decided to restore production backup via SmartConsole in lab environment.
Which details she need to fill in System Restore window before she can click OK button and test the backup?

Server, SCP, Username, Password, Path, Comment, Member

Server, TFTP, Username, Password, Path, Comment, All Members

Server, Protocol, Username, Password, Path, Comment, All Members

Server, Protocol, username Password, Path, Comment, Member

Q200. When requiring certificates for mobile devices, make sure the authentication method is set to one of the following, Username and Password, RADIUS or ________.

SecureID

SecurID

Complexity

TacAcs

Q201. What does it mean if Deyra sees the gateway status? (Choose the BEST answer.)

SmartCenter Server cannot reach this Security Gateway.

There is a blade reporting a problem.

VPN software blade is reporting a malfunction.

Security Gateway’s MGNT NIC card is disconnected.

Q202. Which file gives you a list of all security servers in use, including port number?

$FWDIR/conf/conf.conf

$FWDIR/conf/servers.conf

$FWDIR/conf/fwauthd.conf

$FWDIR/conf/serversd.conf

Q203. Which tool is used to enable ClusterXL?

SmartUpdate

cpconfig

SmartConsole

sysconfig

Q204. Which components allow you to reset a VPN tunnel?

vpn tu command or SmartView monitor

delete vpn ike sa or vpn she11 command

vpn tunnelutil or delete vpn ike sa command

SmartView monitor only

Q205. Which is NOT an example of a Check Point API?

Gateway API

Management API

OPSC SDK

Threat Prevention API

Q206. The Firewall Administrator is required to create 100 new host objects with different IP addresses.
What API command can he use in the script to achieve the requirement?

add host name <New HostName> ip-address <ip address>

add hostname <New HostName> ip-address <ip address>

set host name <New HostName> ip-address <ip address>

set hostname <New HostName> ip-address <ip address>

Q207. When SecureXL is enabled, all packets should be accelerated, except packets that match the following conditions:

All UDP packets

All IPv6 Traffic

All packets that match a rule whose source or destination is the Outside Corporate Network

CIFS packets

Q208. Which member of a high-availability cluster should be upgraded first in a Zero downtime upgrade?

The Standby Member

The Active Member

The Primary Member

The Secondary Member

Q209. View the rule below.
What does the lock-symbol in the left column mean? (Choose the BEST answer.)

The current administrator has read-only permissions to Threat Prevention Policy.

Another user has locked the rule for editing.

Configuration lock is present. Click the lock symbol to gain read-write access.

The current administrator is logged in as read-only because someone else is editing the policy.

Q210. Which command is used to display status information for various components?

show all systems

show system messages

sysmess all

show sysenv all

Q211. What is the minimum number of CPU cores required to enable CoreXL?

Q212. What is NOT a Cluster Mode?

Load Sharing Unicast

Load Sharing Multicast

Active-Active

High Availability Multicast

Q213. What are the correct sleps upgrading a HA cluster (Ml is active. M2 is passive) using Multi-Version
Cluster(MVC) Upgrade?

1) Enable the MVC mechanism on both cluster members #cphaprob mvc on 2) Upgrade the passive node M2 to R81.20 3) In SmartConsole. change the version of the cluster object 4) Install the Access Control Policy and make sure that the installation will not stop if installation on one cluster member fails 5) After examine the cluster states upgrade node M1 to R81.20 6) On each Cluster Member, disable the MVC mechanism

1) Enable the MVC mechanism on both cluster members #cphaprob mvc on 2) Upgrade the passive node M2 to R81.20 3) In SmartConsole. change the version of the cluster object 4) Install the Access Control Policy 5) After examine the cluster states upgrade node M1 to R81.20 6) On each Cluster Member, disable the MVC mechanism and Install the Access Control Policy

1) In SmartConsole. change the version of the cluster object 2) Upgrade the passive node M2 to R81.20 3) Enable the MVC mechanism on the upgraded R81.20 Cluster Member M2 Wcphaconf mvc on 4) Install the Access Control Policy and make sure that the installation will not stop if installation on one cluster member fails 5) After examine the cluster states upgrade node M1 to R81.20 6) On each Cluster Member, disable the MVC mechanism and Install the Access Control Policy SmartConsole. change the version of the cluster object

1) Upgrade the passive node M2 to R81.20 2) Enable the MVC mechanism on the upgraded R81.20 Cluster Member M2 ttcphaconf mvc on 3) In SmartConsole, change the version of the cluster object 4} Install the Access Control Policy 5) After examine the cluster states upgrade node M1 to R81.20 6) On each Cluster Member, disable the MVC mechanism and Install the Access Control Policy upgrade the passive node M2 to R81.20

Q214. What is the command used to activated Multi-Version Cluster mode?

set cluster member mvc on in Clish

set mvc on on Clish

set cluster MVC on in Expert Mode

set cluster mvc on in Expert Mode

Q215. Which Check Point software blades could be enforced under Threat Prevention profile using Check Point R81.20 SmartConsole application?

IPS, Anti-Bot, URL Filtering, Application Control, Threat Emulation.

Firewall, IPS, Threat Emulation, Application Control.

IPS, Anti-Bot, Anti-Virus, Threat Emulation, Threat Extraction.

Firewall, IPS, Anti-Bot, Anti-Virus, Threat Emulation.

Q216. Gaia has two default user accounts that cannot be deleted.
What are those user accounts?

Admin and Default

Expert and Clish

Control and Monitor

Admin and Monitor

Q217. The WebUI offers several methods for downloading hotfixes via CPUSE except:

Automatic

Force override

Manually

Scheduled

Q218. IF the first packet of an UDP session is rejected by a rule definition from within a security policy (not including the clean up rule), what message is sent back through the kernel?

Nothing

TCP FIN

TCP RST

ICMP unreachable

Q219. What is the amount of Priority Queues by default?

There are 8 priority queues and this number cannot be changed.

There is no distinct number of queues since it will be changed in a regular basis based on its system requirements.

There are 7 priority queues by default and this number cannot be changed.

There are 8 priority queues by default, and up to 8 additional queues can be manually configured

Loading …

156-315.81.20 Exam Dumps, Practice Test Questions BUNDLE PACK: https://www.dumpstests.com/156-315.81.20-latest-test-dumps.html

BEST Verified CheckPoint 156-315.81.20 Exam Questions (2024) [Q198-Q219]

No Responses

Leave a Reply Cancel reply

Related Certifications

156-315.81.20 Practice Tests

Recent Posts

Recent Comments

Categories