156-215.81 Free Practice Test

In SmartEvent, a correlation unit (CU) is used to do what?

1. A. Collect security gateway logs, Index the logs and then compress the logs.
2. B. Receive firewall and other software blade logs in a region and forward them to the primary log server.
3. C. Analyze log entries and identify events.
4. D. Send SAM block rules to the firewalls during a DOS attack.

Correct Answer: C
https://sc1.checkpoint.com/documents/R80.40/WebAdminGuides/EN/CP_R80.40_LoggingAndMonitoring_Ad

When changes are made to a Rule base, it is important to _______ to enforce changes.

1. A. Publish database
2. B. Activate policy
3. C. Install policy
4. D. Save changes

Correct Answer: C

Due to high CPU workload on the Security Gateway, the security administrator decided to purchase a new multicore CPU to replace the existing single core CPU. After installation, is the administrator required to perform any additional tasks?

1. A. Go to clash-Run cpstop | Run cpstart
2. B. Go to clash-Run cpconfig | Configure CoreXL to make use of the additional Cores | Exit cpconfig | Reboot Security Gateway
3. C. Administrator does not need to perform any tas
4. D. Check Point will make use of the newly installed CPU and Cores
5. E. Go to clash-Run cpconfig | Configure CoreXL to make use of the additional Cores | Exit cpconfig | Reboot Security Gateway | Install Security Policy

Correct Answer: B

A Check Point Software license consists of two components, the Software Blade and the Software Container. There are _____ types of Software Containers: _________ .

1. A. Two; Security Management and Endpoint Security
2. B. Two; Endpoint Security and Security Gateway
3. C. Three; Security Management, Security Gateway, and Endpoint Security
4. D. Three; Security Gateway, Endpoint Security, and Gateway Management

Correct Answer: C
There are three types of Software Containers: Security Management, Security Gateway, and Endpoint Security. Ref: https://downloads.checkpoint.com/dc/download.htm?ID=11608

The “Hit count” feature allows tracking the number of connections that each rule matches. Will the Hit count feature work independently from logging and Track the hits even if the Track option is set to “None”?

1. A. No, it will not work independentl
2. B. Hit Count will be shown only for rules with Track options set as Log or alert
3. C. Yes, it will work independently as long as “analyze all rules” tick box is enabled on the Security Gateway
4. D. No, it will not work independently because hit count requires all rules to be logged
5. E. Yes, it will work independently because when you enable Hit Count, the SMS collects the data from supported Security Gateways

Correct Answer: D