156-315.80 Free Practice Test

Which features are only supported with R80.10 Gateways but not R77.x?

1. A. Access Control policy unifies the Firewall, Application Control & URL Filtering, Data Awareness, and Mobile Access Software Blade policies.
2. B. Limits the upload and download throughput for streaming media in the company to 1 Gbps.
3. C. The rule base can be built of layers, each containing a set of the security rule
4. D. Layers are inspected in the order in which they are defined, allowing control over the rule base flow and which security functionalities take precedence.
5. E. Time object to a rule to make the rule active only during specified times.

Correct Answer: C

What is the SandBlast Agent designed to do?

1. A. Performs OS-level sandboxing for SandBlast Cloud architecture
2. B. Ensure the Check Point SandBlast services is running on the end user’s system
3. C. If malware enters an end user’s system, the SandBlast Agent prevents the malware from spreading with the network
4. D. Clean up email sent with malicious attachments

Correct Answer: C

When deploying SandBlast, how would a Threat Emulation appliance benefit from the integration of ThreatCloud?

1. A. ThreatCloud is a database-related application which is located on-premise to preserve privacy of company-related data
2. B. ThreatCloud is a collaboration platform for all the CheckPoint customers to form a virtual cloud consisting of a combination of all on-premise private cloud environments
3. C. ThreatCloud is a collaboration platform for Check Point customers to benefit from VMWare ESXi infrastructure which supports the Threat Emulation Appliances as virtual machines in the EMC Cloud
4. D. ThreatCloud is a collaboration platform for all the Check Point customers to share information about malicious and benign files that all of the customers can benefit from as it makes emulation of known files unnecessary

Correct Answer: D

You have a Geo-Protection policy blocking Australia and a number of other countries. Your network now requires a Check Point Firewall to be installed in Sydney, Australia.
What must you do to get SIC to work?

1. A. Remove Geo-Protection, as the IP-to-country database is updated externally, and you have no control of this.
2. B. Create a rule at the top in the Sydney firewall to allow control traffic from your network
3. C. Nothing - Check Point control connections function regardless of Geo-Protection policy
4. D. Create a rule at the top in your Check Point firewall to bypass the Geo-Protection

Correct Answer: C

Check Point Management (cpm) is the main management process in that it provides the architecture for a consolidated management console. It empowers the migration from legacy Client-side logic to Server-side logic. The cpm process:

1. A. Allow GUI Client and management server to communicate via TCP Port 19001
2. B. Allow GUI Client and management server to communicate via TCP Port 18191
3. C. Performs database tasks such as creating, deleting, and modifying objects and compiling policy.
4. D. Performs database tasks such as creating, deleting, and modifying objects and compiling as well as policy code generation.

Correct Answer: C