CheckPoint Check Point Certified Security Expert - R80

QUESTION NO: 1
Which of the following is NOT a type of Check Point API available in R80.x?

A. Management B. Identity Awareness Web Services C. OPSEC SDK D. Mobile Access

Correct Answer: D

QUESTION NO: 2
Which two of these Check Point Protocols are used by SmartEvent Processes?

A. FWD and LEA B. ELA and CPLOG C. FWD and CPLOG D. ELA and CPD

Correct Answer: B

QUESTION NO: 3
What is the responsibility of SOLR process on R80.10 management server?

A. Communication between SmartConsole applications and the Security Management Server B. Validating all data before it's written into the database C. Writing all information into the database D. It generates indexes of data written to the database

Correct Answer: D

QUESTION NO: 4
Which Remote Access Client does not provide an Office-Mode Address?

A. Check Point Mobile B. Endpoint Security VPN C. Endpoint Security Suite D. SecuRemote

Correct Answer: D

QUESTION NO: 5
Ken wants to obtain a configuration lock from other administrator on R80 Security Management Server. He can do this via WebUI or via CLI.
Which command should he use in CLI? (Choose the correct answer.)

A. override database lock B. The database feature has one command lock database override. C. remove database lock D. The database feature has two commands lock database override and unlock database. Both will work.

Correct Answer: D

QUESTION NO: 6
DLP and Geo Policy are examples of what type of Policy?

A. Standard Policies B. Shared Policies C. Unified Policies D. Inspection Policies

Correct Answer: B

QUESTION NO: 7
You noticed that CPU cores on the Security Gateway are usually 100% utilized and many packets were dropped. You don't have a budget to perform a hardware upgrade at this time. To optimize drops you decide to use Priority Queues and fully enable Dynamic Dispatcher. How can you enable them?

A. fw ctl multik dynamic_dispatching on B. fw ctl multik dynamic_dispatching set_mode 9 C. fw ctl multik pq enable D. fw ctl multik set_mode 9

Correct Answer: D

QUESTION NO: 8
As a valid Mobile Access Method, what feature provides Capsule Connect/VPN?

A. Full Layer3 VPN -IPSec VPN that gives users network access to all mobile applications. B. That is used to deploy the mobile device as a generator of one-time passwords for authenticating to an RSA Authentication Manager. C. Fill Layer4 VPN -SSL VPN that gives users network access to all mobile applications. D. You can make sure that documents are sent to the intended recipients only.

Correct Answer: A

QUESTION NO: 9
Tom has been tasked to install Check Point R80 in a distributed deployment. Before Tom installs the systems this way, how many machines will he need if he does NOT include a SmartConsole machine in his calculations?

A. One machine B. Two machines C. Three machines D. One machine, but it needs to be installed using SecurePlatform for compatibility purposes.

Correct Answer: B

Explanation: Only visible for Pass4Test members. You can sign-up / login (it's free).

QUESTION NO: 10
Fill in the blanks: A _______ license requires an administrator to designate a gateway for attachment whereas a ________ license is automatically attached to a Security Gateway.

A. Central; local B. Local; central C. Formal; corporate D. Local; formal

Correct Answer: A

QUESTION NO: 11
Which statement is NOT TRUE about Delta synchronization?

A. Using UDP Multicast or Broadcast on port 8161 B. Transfers changes in the Kernel tables between cluster members. C. Using UDP Multicast or Broadcast on port 8116 D. Quicker than Full sync

Correct Answer: A

QUESTION NO: 12
With Mobile Access enabled, administrators select the web-based and native applications that can be accessed by remote users and define the actions that users can perform the applications. Mobile Access encrypts all traffic using:

A. HTTPS for web-based applications and AES or RSA algorithm for native applications. For end users to access the native application, they need to install the SSL Network Extender. B. HTTPS for web-based applications and AES or RSA algorithm for native applications. For end users to access the native application, no additional software is required. C. HTTPS for web-based applications and 3DES or RC4 algorithm for native applications. For end users to access the native applications, they need to install the SSL Network Extender. D. HTTPS for web-based applications and 3DES or RC4 algorithm for native applications. For end users to access the native applications, no additional software is required.

Correct Answer: C

QUESTION NO: 13
What are the different command sources that allow you to communicate with the API server?

A. SmartView Monitor, API_cli Tool, Gaia CLI, Web Services B. SmartConsole GUI Console, API_cli Tool, Gaia CLI, Web Services C. SmartConsole GUI Console, mgmt_cli Tool, Gaia CLI, Web Services D. API_cli Tool, Gaia CLI, Web Services

Correct Answer: C

QUESTION NO: 14
Besides fw monitor, what is another command that can be used to capture packets?

A. arp B. traceroute C. tcpdump D. ping

Correct Answer: C

CheckPoint Check Point Certified Security Expert - R80 - 156-315.80 Exam Questions