156-315.80 Free Practice Test

The Event List within the Event tab contains:

1. A. a list of options available for running a query.
2. B. the top events, destinations, sources, and users of the query results, either as a chart or in a tallied list.
3. C. events generated by a query.
4. D. the details of a selected event.

Correct Answer: C

Which remote Access Solution is clientless?

1. A. Checkpoint Mobile
2. B. Endpoint Security Suite
3. C. SecuRemote
4. D. Mobile Access Portal

Correct Answer: D

Fill in the blank: The R80 feature _______ permits blocking specific IP addresses for a specified time period.

1. A. Block Port Overflow
2. B. Local Interface Spoofing
3. C. Suspicious Activity Monitoring
4. D. Adaptive Threat Prevention

Correct Answer: C
Suspicious Activity Rules Solution
Suspicious Activity Rules is a utility integrated into SmartView Monitor that is used to modify access privileges upon detection of any suspicious network activity (for example, several attempts to gain unauthorized access).
The detection of suspicious activity is based on the creation of Suspicious Activity rules. Suspicious Activity rules are Firewall rules that enable the system administrator to instantly block suspicious connections that are not restricted by the currently enforced security policy. These rules, once set (usually with an expiration date), can be applied immediately without the need to perform an Install Policy operation.
References:

What must you do first if “fwm sic_reset” could not be completed?

1. A. Cpstop then find keyword “certificate” in objects_5_0.C and delete the section
2. B. Reinitialize SIC on the security gateway then run “fw unloadlocal”
3. C. Reset SIC from Smart Dashboard
4. D. Change internal CA via cpconfig

Correct Answer: D

When Dynamic Dispatcher is enabled, connections are assigned dynamically with the exception of:

1. A. Threat Emulation
2. B. HTTPS
3. C. QOS
4. D. VoIP

Correct Answer: D