Check Point Certified Security Expert R81 (156-315.81) Free Practice Test

Question 1

Using Threat Emulation technologies, what is the best way to block .exe and .bat file types?

A. create FW rule for particular protocol

B. tecli advanced attributes set prohibited_file_types exe.bat

C. enable .exe & .bat protection in IPS Policy

D. enable DLP and select.exe and .bat file type

Correct Answer: D

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 2

What is a best practice before starting to troubleshoot using the "fw monitor" tool?

A. Disable CoreXL

B. Disable SecureXL

C. Clear the connections table

D. Run the command: fw monitor debug on

Correct Answer: B

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 3

Which directory below contains log files?

A. /opt/CPSmartlog-R81/log

B. /opt/CPsuite-R81/fw1/log

C. /opt/CPshrd-R81/log

D. /opt/CPsuite-R81/log

Correct Answer: B

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 4

Please choose correct command to add an "emailserver1" host with IP address 10.50.23.90 using GAiA management CLI?

A. add host name emailserver1 ip-address 10.50.23.90

B. host name myHost12 ip-address 10.50.23.90

C. mgmt: add host name emailserver1 ip-address 10.50.23.90

D. mgmt: add host name ip-address 10.50.23.90

Correct Answer: C

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 5

What is the protocol and port used for Health Check and State Synchronization in ClusterXL?

A. CCP and 18190

B. CCP and 8116

C. CCP and 257

D. CPC and 8116

Correct Answer: B

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 6

Which VPN routing option uses VPN routing for every connection a satellite gateway handles?

A. To center and to other satellites through center

B. To satellites through center only

C. To center only

D. To center, or through the center to other satellites, to Internet and other VPN targets

Correct Answer: D

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 7

Due to high CPU workload on the Security Gateway, the security administrator decided to purchase a new multicore CPU to replace the existing single core CPU. After installation, is the administrator required to perform any additional tasks?

A. After upgrading the hardware, increase the number of kernel instances using cpconfig

B. Administrator does not need to perform any task. Check Point will make use of the newly installed CPU and Cores.

C. Hyperthreading must be enabled in the bios to use CoreXL

D. Run cprestart from dish

Correct Answer: A

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 8

What statement best describes the Proxy ARP feature for Manual NAT in R81.20?

A. Translate Destination on Client Side should be configured

B. Automatic proxy ARP configuration can be enabled

C. fw ctl proxy should be configured

D. local.arp file must always be configured

Correct Answer: D

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 9

According to out of the box SmartEvent policy, which blade will automatically be correlated into events?

A. HTTPS

B. Firewall

C. VPN

D. IPS

Correct Answer: D

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 10

Which firewall daemon is responsible for the FW CLI commands?

A. fwd

B. fwm

C. cpd

D. cpm

Correct Answer: A

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Welcome to TestSimulate

CheckPoint Check Point Certified Security Expert R81 (156-315.81) Free Practice Test