Free Check Point Certified Security Expert – R80 156-315.80 Exam Practice Test

Which of the following is a new R80.10 Gateway feature that had not been available in R77.X and older?

• The rule base can be built of layers, each containing a set of the security rules. Layers are inspected in the order in which they are defined, allowing control over the rule base flow and which security functionalities take precedence.
  
• Limits the upload and download throughput for streaming media in the company to 1 Gbps.
  
• Time object to a rule to make the rule active only during specified times.
  
• Sub Policies ae sets of rules that can be created and attached to specific rules. If the rule is matched, inspection will continue in the sub policy attached to it rather than in the next rule.
  References:
  

Traffic from source 192.168.1.1 is going to www.google.com. The Application Control Blade on the gateway is inspecting the traffic. Assuming acceleration is enabled which path is handling the traffic?

• Slow Path
  
• Medium Path
  
• Fast Path
  
• Accelerated Path
  

The Compliance Blade allows you to search for text strings in many windows and panes, to search for a value in a field, what would your syntax be?

• field_name:string
  
• name field:string
  
• name_field:string
  
• field name:string
  

Fill in the blank: An identity server uses a __________ for user authentication.

• Shared secret
  
• Certificate
  
• One-time password
  
• Token
  

How would you enable VMAC Mode in ClusterXL?

• Cluster Object -> Edit -> ClusterXL and VRRP -> Use Virtual MAC
  
• fw ctl set int vmac_mode 1
  
• cphaconf vmac_mode set 1
  
• Cluster Object -> Edit -> Cluster Members -> Edit -> Use Virtual MAC
  Explanation
  

What is the Implicit Clean-up Rule?

• A setting is defined in the Global Properties for all policies.
  
• A setting that is configured per Policy Layer.
  
• Another name for the Clean-up Rule.
  
• Automatically created when the Clean-up Rule is defined.
  

If an administrator wants to add manual NAT for addresses now owned by the Check Point firewall, what else is necessary to be completed for it to function properly?

• Nothing - the proxy ARP is automatically handled in the R80 version
  
• Add the proxy ARP configurations in a file called /etc/conf/local.arp
  
• Add the proxy ARP configurations in a file called $FWDIR/conf/local.arp
  
• Add the proxy ARP configurations in a file called $CPDIR/conf/local.arp
  

Which application should you use to install a contract file?

• SmartView Monitor
  
• WebUI
  
• SmartUpdate
  
• SmartProvisioning
  

What is the benefit of ''tw monitor'' over ''tcpdump''?

• ''fw monitor'' reveals Layer 2 information, while ''tcpdump'' acts at Layer 3.
  
• ''fw monitor'' is also available for 64-Bit operating systems.
  
• With ''fw monitor'', you can see the inspection points, which cannot be seen in ''tcpdump''
  
• ''fw monitor'' can be used from the CLI of the Management Server to collect information from multiple gateways.
  

You want to verify if your management server is ready to upgrade to R80.10. What tool could you use in this process?

• migrate export
  
• upgrade_tools verify
  
• pre_upgrade_verifier
  
• migrate import