156-315.81 Free Practice Test

- (Exam Topic 1)
Tom has been tasked to install Check Point R81 in a distributed deployment. Before Tom installs the systems this way, how many machines will he need if he does NOT include a SmartConsole machine in his calculations?

1. A. One machine, but it needs to be installed using SecurePlatform for compatibility purposes.
2. B. One machine
3. C. Two machines
4. D. Three machines

Correct Answer: C
One for Security Management Server and the other one for the Security Gateway.

- (Exam Topic 4)
What is a possible command to delete all of the SSH connections of a gateway?

1. A. fw sam -I dport 22
2. B. fw ctl conntab -x -dpott=22
3. C. fw tab -t connections -x -e 00000016
4. D. fwaccel dos config set dport ssh

Correct Answer: A

- (Exam Topic 2)
What is the purpose of Priority Delta in VRRP?

1. A. When a box up, Effective Priority = Priority + Priority Delta
2. B. When an Interface is up, Effective Priority = Priority + Priority Delta
3. C. When an Interface fail, Effective Priority = Priority – Priority Delta
4. D. When a box fail, Effective Priority = Priority – Priority Delta

Correct Answer: C
Each instance of VRRP running on a supported interface may monitor the link state of other interfaces. The monitored interfaces do not have to be running VRRP.
If a monitored interface loses its link state, then VRRP will decrement its priority over a VRID by the specified delta value and then will send out a new VRRP HELLO packet. If the new effective priority is less than the priority a backup platform has, then the backup platform will beging to send out its own HELLO packet.
Once the master sees this packet with a priority greater than its own, then it releases the VIP. References:

- (Exam Topic 3)
What is the order of NAT priorities?

1. A. Static NAT, IP pool NAT, hide NAT
2. B. IP pool NAT, static NAT, hide NAT
3. C. Static NAT, automatic NAT, hide NAT
4. D. Static NAT, hide NAT, IP pool NAT

Correct Answer: A

- (Exam Topic 2)
SmartEvent does NOT use which of the following procedures to identify events:

1. A. Matching a log against each event definition
2. B. Create an event candidate
3. C. Matching a log against local exclusions
4. D. Matching a log against global exclusions

Correct Answer: C
Events are detected by the SmartEvent Correlation Unit. The Correlation Unit task is to scan logs for criteria that match an Event Definition. SmartEvent uses these procedures to identify events:
• Matching a Log Against Global Exclusions
• Matching a Log Against Each Event Definition
• Creating an Event Candidate
• When a Candidate Becomes an Event References: