156-315.80 Free Practice Test

How would you deploy TE250X Check Point appliance just for email traffic and in-line mode without a Check Point Security Gateway?

1. A. Install appliance TE250X on SpanPort on LAN switch in MTA mode.
2. B. Install appliance TE250X in standalone mode and setup MTA.
3. C. You can utilize only Check Point Cloud Services for this scenario.
4. D. It is not possible, always Check Point SGW is needed to forward emails to SandBlast appliance.

Correct Answer: C

What kind of information would you expect to see using the sim affinity command?

1. A. The VMACs used in a Security Gateway cluster
2. B. The involved firewall kernel modules in inbound and outbound packet chain
3. C. Overview over SecureXL templated connections
4. D. Network interfaces and core distribution used for CoreXL

Correct Answer: D

In the Check Point Firewall Kernel Module, each Kernel is associated with a key, which specifies the type of traffic applicable to the chain module. For Wire Mode configuration, chain modules marked with _______ will not apply.

1. A. ffff
2. B. 1
3. C. 2
4. D. 3

Correct Answer: B

What is the correct command to observe the Sync traffic in a VRRP environment?

1. A. fw monitor –e “accept[12:4,b]=224.0.0.18;”
2. B. fw monitor –e “accept port(6118;”
3. C. fw monitor –e “accept proto=mcVRRP;”
4. D. fw monitor –e “accept dst=224.0.0.18;”

Correct Answer: D

What are the attributes that SecureXL will check after the connection is allowed by Security Policy?

1. A. Source address, Destination address, Source port, Destination port, Protocol
2. B. Source MAC address, Destination MAC address, Source port, Destination port, Protocol
3. C. Source address, Destination address, Source port, Destination port
4. D. Source address, Destination address, Destination port, Protocol

Correct Answer: A