Checkpoint 156-315.81 Exam Practice Questions (P. 5)
- Full Access (344 questions)
- Six months of Premium Access
- Access to one million comments
- Seamless ChatGPT Integration
- Ability to download PDF files
- Anki Flashcard files for revision
- No Captcha & No AdSense
- Advanced Exam Configuration
Question #41
Bob is going to prepare the import of the exported R81.10 management database. Now he wants to verify that the installed tools on the new target security management machine are able to handle the R81.10 release. Which of the following Check Point command is true?
- A$FWDIR/scripts/migrate_server print_installed_tools -v R77.30
- B$CPDIR/scripts/migrate_server print_installed_tools -v R81.10
- C$FWDIR/scripts/migrate_server print_installed_tools -v R81.10
- D$FWDIR/scripts/migrate_server print_uninstalled_tools -v R81.10
Correct Answer:
C
C
send
light_mode
delete
Question #42
What a valid SecureXL paths in R81.10?
- AF2F (Slow path), Templated Path, PQX and F2V
- BF2F (Slow path), PXL, QXL and F2V
- CF2F (Slow path), Accelerated Path, PQX and F2V
- DF2F (Slow path), Accelerated Path, Medium Path and F2VMost Voted
Correct Answer:
D
D
send
light_mode
delete
Question #43
Alice was asked by Bob to implement the Check Point Mobile Access VPN blade – therefore are some basic configuration steps required – which statement about the configuration steps is true?
- A1. Enable Mobile Access blade on the Security Gateway object and complete the wizard
2. Configure Mobile Access parameters in Security Gateway object
3. Add a rule in the Access Control Policy and install policy
4. Connect to the Mobile Access PortalMost Voted - B1. Configure Mobile Access parameters in Security Gateway object
2. Enable Mobile Access blade on the Security Gateway object and complete the wizard
3. Add a rule in the Access Control Policy and install policy
4. Connect to the Mobile Access Portal - C1. Connect to the Mobile Access Portal
2. Enable Mobile Access blade on the Security Gateway object and complete the wizard
3. Configure Mobile Access parameters in Security Gateway object
4. Add a rule in the Access Control Policy and install policy - D1. Add a rule in the Access Control Policy and install policy
2. Configure Mobile Access parameters in Security Gateway object
3. Enable Mobile Access blade on the Security Gateway object and complete the wizard
4. Connect to the Mobile Access Portal
Correct Answer:
A
A
send
light_mode
delete
Question #44
What are not possible commands to acquire the lock in order to make changes in Clish or Web GUI?
- Aset config-lock on override
- BClick the Lock icon in the WebUI
- C"set rbac rw = 1"Most Voted
- Dlock database override
Correct Answer:
C
C
send
light_mode
delete
Question #45
The customer has about 150 remote access user with a Windows laptop. Not more than 50 Clients will be connected at the same time. The customer wants to use multiple VPN Gateways as entry point and a personal firewall. What will be the best license for him?
- AHe will need Capsule Connect using MEP (multiple entry points).
- BBecause the customer uses only Windows clients SecuRemote will be sufficient and no additional license is needed.
- CHe will need Harmony Endpoint because of the personal firewall.Most Voted
- DMobile Access license because he needs only a 50 user license, license count is per concurrent user.
Correct Answer:
D
D
send
light_mode
delete
Question #46
SSL Network Extender (SNX) is a thin SSL VPN on-demand client that is installed on the remote user's machine via the web browser. What are the two modes of SNX?
- AApplication and Client Service
- BNetwork and Layers
- CVirtual Adapter and Mobile App
- DNetwork and ApplicationMost Voted
Correct Answer:
D
D
send
light_mode
delete
Question #47
The admin is connected via ssh to the management server. He wants to run a mgmt_cli command but got an Error 404 message. To check the listening ports on the management he runs netstat with the results shown below. What can be the cause for the issue?
[Expert@SMS:0]# mgmt_cli show service-tcp name FTP
Username: admin -
Password:
message: "Error 404. The Management API service is not available. Please check that the Management API server is up and running." code: "generic_error"
[Expert@SMS:0]# netstat -anp | grep http
tcp00 0.0.0.0:800.0.0.0:*LISTEN18114/httpd
tcp00127.0.0.1:810.0.0.0:*LISTEN18114/httpd
tcp00 0.0.0.0:44340.0.0.0:*LISTEN9019/httpd2
tcp00 0.0.0.0:4430.0.0.0:*LISTEN 18114/httpd
[Expert@SMS:0]# mgmt_cli show service-tcp name FTP
Username: admin -
Password:
message: "Error 404. The Management API service is not available. Please check that the Management API server is up and running." code: "generic_error"
[Expert@SMS:0]# netstat -anp | grep http
tcp00 0.0.0.0:800.0.0.0:*LISTEN18114/httpd
tcp00127.0.0.1:810.0.0.0:*LISTEN18114/httpd
tcp00 0.0.0.0:44340.0.0.0:*LISTEN9019/httpd2
tcp00 0.0.0.0:4430.0.0.0:*LISTEN 18114/httpd
- AWrong Management API Access settings for the client IP. To correct it go to SmartConsole / Management & Settings / Blades / Management API and press 'Advanced Settings...' and choose GUI clients or ALL IP's.
- BThe API didn't run on the default port check it with 'api status' and add '--port 4434' to the mgmt_cli command.
- CThe management permission in the user profile is missing. Go to SmartConsole / Management & Settings / Permissions & Administrators / Permission Profiles. Select the profile of the user and enable 'Management API Login' under Management Permissions.Most Voted
- DThe API is not running, the services shown by netstat are the Gaia services. To start the API run 'api start'.
Correct Answer:
D
D
send
light_mode
delete
Question #48
From SecureXL perspective, what are the three paths of traffic flow:
- AInitial Path; Medium Path; Accelerated Path
- BLayer Path; Blade Path; Rule Path
- CFirewall Path; Accelerated Path; Medium Path
- DFirewall Path; Accept Path; Drop Path
Correct Answer:
C
C
send
light_mode
delete
Question #49
What are the services used for Cluster Synchronization?
- A256/TCP for Full Sync and 8116/UDP for Delta SyncMost Voted
- B8116/UDP for Full Sync and Delta Sync
- CTCP/256 for Full Sync and Delta Sync
- DNo service needed when using Broadcast Mode
Correct Answer:
A
A
send
light_mode
delete
Question #50
Using Web Services to access the API, which Header Name-Value had to be in the HTTP Post request after the login?
- AX-chkp-sid Session Unique IdentifierMost Voted
- BAPI-Key
- Cuser-uid
- Duuid Universally Unique Identifier
Correct Answer:
A
A
send
light_mode
delete
All Pages