Real 156-315.80 are Uploaded by TestSimulate provide 2023 Latest 156-315.80 Practice Tests Dumps.

All 156-315.80 Dumps and Check Point Certified Security Expert - R80 Training Courses Help candidates to study and pass the Check Point Certified Security Expert - R80 Exams hassle-free!

NEW QUESTION # 260
Fill in the blank: The R80 feature _____ permits blocking specific IP addresses for a specified time period.

• A. Local Interface Spoofing
• B. Block Port Overflow
• C. Suspicious Activity Monitoring
• D. Adaptive Threat Prevention

Answer: C

Explanation:
Suspicious Activity Rules Solution
Suspicious Activity Rules is a utility integrated into SmartView Monitor that is used to modify access privileges upon detection of any suspicious network activity (for example, several attempts to gain unauthorized access).
The detection of suspicious activity is based on the creation of Suspicious Activity rules. Suspicious Activity rules are Firewall rules that enable the system administrator to instantly block suspicious connections that are not restricted by the currently enforced security policy. These rules, once set (usually with an expiration date), can be applied immediately without the need to perform an Install Policy operation.
References:

NEW QUESTION # 261
In R80 spoofing is defined as a method of:

• A. Detecting people using false or wrong authentication logins
• B. Disguising an illegal IP address behind an authorized IP address through Port Address Translation.
• C. Making packets appear as if they come from an authorized IP address.
• D. Hiding your firewall from unauthorized users.

Answer: C

Explanation:
Explanation
IP spoofing replaces the untrusted source IP address with a fake, trusted one, to hijack connections to your
network. Attackers use IP spoofing to send malware and bots to your protected network, to execute DoS
attacks, or to gain unauthorized access.
References:

NEW QUESTION # 262
What CLI command compiles and installs a Security Policy on the target's Security Gateways?

• A. fwm compile
• B. fwm fetch
• C. fwm load
• D. fwm install

Answer: C

Explanation:
Explanation/Reference: https://sc1.checkpoint.com/documents/R77/CP_R77_SecurityManagement_WebAdminGuide/ html_frameset.htm?topic=documents/R77/CP_R77_SecurityManagement_WebAdminGuide/13141

NEW QUESTION # 263
You have a Geo-Protection policy blocking Australia and a number of other countries. Your network now requires a Check Point Firewall to be installed in Sydney, Australia.
What must you do to get SIC to work?

• A. Create a rule at the top in the Sydney firewall to allow control traffic from your network
• B. Create a rule at the top in your Check Point firewall to bypass the Geo-Protection
• C. Remove Geo-Protection, as the IP-to-country database is updated externally, and you have no control of this.
• D. Nothing - Check Point control connections function regardless of Geo-Protection policy

Answer: D

Explanation:
Explanation/Reference: https://sc1.checkpoint.com/documents/R76/CP_R76_Firewall_WebAdmin/92707.htm

NEW QUESTION # 264
Vanessa is expecting a very important Security Report. The Document should be sent as an attachment via e-mail. An e-mail with Security_report.pdf file was delivered to her e-mail inbox. When she opened the PDF file, she noticed that the file is basically empty and only few lines of text are in it. The report is missing some graphs, tables and links.
Which component of SandBlast protection is her company using on a Gateway?

• A. Check Point Protect
• B. SandBlast Agent
• C. SandBlast Threat Emulation
• D. SandBlast Threat Extraction

Answer: D

NEW QUESTION # 265
Which statement is true regarding redundancy?

• A. Machines in a ClusterXL High Availability configuration must be synchronized.
• B. ClusterXL offers three different Load Sharing solutions: Unicast, Broadcast, and Multicast.
• C. Both ClusterXL and VRRP are fully supported by Gaia and available to all Check Point appliances, open servers, and virtualized environments.
• D. System Administrators know their cluster has failed over and can also see why it failed over by using the cphaprob -f if command.

Answer: C

Explanation:
Reference: https://www.checkpoint.com/download/public-files/gaia-technical-brief.pdf

NEW QUESTION # 266
Which of these is an implicit MEP option?

• A. Round robin
• B. Primary-backup
• C. Source address based
• D. Load Sharing

Answer: B

Explanation:
Explanation/Reference:
Reference: https://sc1.checkpoint.com/documents/R77/CP_R77_VPN_AdminGuide/13812.htm

NEW QUESTION # 267
What are the available options for downloading Check Point hotfixes in Gaia WebUI (CPUSE)?

• A. Manually, Scheduled, Enabled
• B. Manually, Scheduled, Disabled
• C. Manually, Automatic, Disabled
• D. Manually, Scheduled, Automatic

Answer: D

Explanation:
Explanation/Reference: https://sc1.checkpoint.com/documents/R77/CP_R77_Gaia_AdminWebAdminGuide/ html_frameset.htm?topic=documents/R77/CP_R77_Gaia_AdminWebAdminGuide/112109

NEW QUESTION # 268
Which statement is true about ClusterXL?

• A. Supports Dynamic Routing (Unicast and Multicast)
• B. Does not support Dynamic Routing
• C. Supports Dynamic Routing (Unicast Only)
• D. Supports Dynamic Routing (Multicast Only)

Answer: A

Explanation:
Explanation/Reference: https://sc1.checkpoint.com/documents/R76/CP_R76_ClusterXL_AdminGuide/7300.htm

NEW QUESTION # 269
Which is the least ideal Synchronization Status for Security Management Server High Availability
deployment?

• A. Synchronized
• B. Lagging
• C. Collision
• D. Never been synchronized

Answer: C

NEW QUESTION # 270
Which directory below contains log files?

• A. /opt/CPsuite-R80/log
• B. /opt/CPSmartlog-R80/log
• C. /opt/CPshrd-R80/log
• D. /opt/CPsuite-R80/fw1/log

Answer: D

NEW QUESTION # 271
What are the available options for downloading Check Point hotfixes in Gala WebUI (CPUSE)?

• A. Manually, Scheduled, Enabled
• B. Manually, Scheduled, Disabled
• C. Manually, Automatic, Disabled
• D. Manually, Scheduled, Automatic

Answer: D

NEW QUESTION # 272
Which the following type of authentication on Mobile Access can NOT be used as the first authentication method?

• A. Username and password
• B. Dynamic ID
• C. Radius
• D. Certificate

Answer: B

NEW QUESTION # 273
R80.10 management server can manage gateways with which versions installed?

• A. Versions R75.20 and higher
• B. Versions R76 and higher
• C. Versions R75 and higher
• D. Versions R77 and higher

Answer: A

Explanation:
Explanation/Reference:
Reference: http://dl3.checkpoint.com/paid/88/88e25b652f62aa6f59dc955e34f98d5c/ CP_R80.10_ReleaseNotes.pdf?HashKey=1538443232_ff63052c2c5a68c42c47eae9e15273c8&xtn=.pdf

NEW QUESTION # 274
What is the valid range for VRID value in VRRP configuration?

• A. 1-255
• B. 0-254
• C. 0-255
• D. 1-254

Answer: A

Explanation:
Explanation
Virtual Router ID - Enter a unique ID number for this virtual router. The range of valid values is 1 to 255.

NEW QUESTION # 275
In SmartEvent, what are the different types of automatic reactions that the administrator can configure?

• A. Mail, Block Source, Block Destination, Block Services, SNMP Trap
• B. Mail, Block Source, Block Destination, External Script, SNMP Trap
• C. Mail, Block Source, Block Event Activity, Packet Capture, SNMP Trap
• D. Mail, Block Source, Block Event Activity, External Script, SNMP Trap

Answer: D

Explanation:
Explanation/Reference: https://sc1.checkpoint.com/documents/R76/CP_R76_SmartEvent_AdminGuide/17401.htm

NEW QUESTION # 276
The log server sends what to the Correlation Unit?

• A. Authentication requests
• B. CPMI dbsync
• C. Logs
• D. Event Policy

Answer: C

NEW QUESTION # 277
Fill in the blank: The R80 feature ______ permits blocking specific IP addresses for a specific time period.

• A. Local Interface Spoofing
• B. Block Port Overflow
• C. Suspicious Activity Monitoring
• D. Adaptive Threat Prevention

Answer: C

Explanation:
Explanation
Suspicious Activity Rules Solution
Suspicious Activity Rules is a utility integrated into SmartView Monitor that is used to modify access privileges upon detection of any suspicious network activity (for example, several attempts to gain unauthorized access).
The detection of suspicious activity is based on the creation of Suspicious Activity rules. Suspicious Activity rules are Firewall rules that enable the system administrator to instantly block suspicious connections that are not restricted by the currently enforced security policy. These rules, once set (usually with an expiration date), can be applied immediately without the need to perform an Install Policy operation

NEW QUESTION # 278
What is the default shell for the command line interface?

• A. Normal
• B. Clish
• C. Admin
• D. Expert

Answer: B

Explanation:
The default shell of the CLI is called clish
References:

NEW QUESTION # 279
Which GUI client is supported in R80?

• A. SmartLog
• B. SmartView Monitor
• C. SmartView Tracker
• D. SmartProvisioning

Answer: B

Explanation:
Explanation/Reference:

NEW QUESTION # 280
Fill in the blank: Permanent VPN tunnels can be set on all tunnels in the community, on all tunnels for specific gateways, or ______ .

• A. On specific tunnels in the community
• B. On all satellite gateway to satellite gateway tunnels
• C. On specific tunnels for specific gateways
• D. On specific satellite gateway to central gateway tunnels

Answer: A

NEW QUESTION # 281
Please choose correct command to add an "emailserver1" host with IP address 10.50.23.90 using GAiA
management CLI?

• A. add host name emailserver1 ip-address 10.50.23.90
• B. mgmt: add host name emailserver1 ip-address 10.50.23.90
• C. mgmt: add host name ip-address 10.50.23.90
• D. host name myHost12 ip-address 10.50.23.90

Answer: B

NEW QUESTION # 282
......

Valid Way To Pass CheckPoint's 156-315.80 Exam with : https://www.testsimulate.com/156-315.80-study-materials.html