156-315.80 Free Practice Test

In the Check Point Firewall Kernel Module, each Kernel is associated with a key, which specifies the type of traffic applicable to the chain module. For Wire Mode configuration, chain modules marked with _______ will not apply.

1. A. ffff
2. B. 1
3. C. 2
4. D. 3

Correct Answer: B

Due to high CPU workload on the Security Gateway, the security administrator decided to purchase a new CPU to replace the existing single core CPU. After installation, is the administrator required to perform any additional tasks?

1. A. Go to clash-Run cpstop | Run cpstart
2. B. Go to clash-Run cpconfig | Configure CoreXL to make use of the additional Cores | Exit cpconfig | Reboot Security Gateway
3. C. Administrator does not need to perform any tas
4. D. Check Point will make use of the newly installed CPU and Cores
5. E. Go to clash-Run cpconfig | Configure CoreXL to make use of the additional Cores | Exit cpconfig | Reboot Security Gateway | Install Security Policy

Correct Answer: B

With MTA (Mail Transfer Agent) enabled the gateways manages SMTP traffic and holds external email with potentially malicious attachments. What is required in order to enable MTA (Mail Transfer Agent) functionality in the Security Gateway?

1. A. Threat Cloud Intelligence
2. B. Threat Prevention Software Blade Package
3. C. Endpoint Total Protection
4. D. Traffic on port 25

Correct Answer: B

During inspection of your Threat Prevention logs you find four different computers having one event each with a Critical Severity. Which of those hosts should you try to remediate first?

1. A. Host having a Critical event found by Threat Emulation
2. B. Host having a Critical event found by IPS
3. C. Host having a Critical event found by Antivirus
4. D. Host having a Critical event found by Anti-Bot

Correct Answer: D

There are two R77.30 Security Gateways in the Firewall Cluster. They are named FW_A and FW_B. The cluster is configured to work as HA (High availability) with default cluster configuration. FW_A is configured to have higher priority than FW_B. FW_A was active and processing the traffic in the morning. FW_B was standby. Around 1100 am, its interfaces went down and this caused a failover. FW_B became active. After an hour, FW_A’s interface issues were resolved and it became operational.
When it re-joins the cluster, will it become active automatically?

1. A. No, since ‘maintain’ current active cluster member’ option on the cluster object properties is enabled by default.
2. B. No, since ‘maintain’ current active cluster member’ option is enabled by default on the Global Properties.
3. C. Yes, since ‘Switch to higher priority cluster member’ option on the cluster object properties is enabled by default.
4. D. Yes, since ‘Switch to higher priority cluster member’ option is enabled by default on the Global Properties.

Correct Answer: A