156-315.81 Free Practice Test

- (Exam Topic 1)
Check Pont Central Deployment Tool (CDT) communicates with the Security Gateway / Cluster Members over Check Point SIC _______.

1. A. TCP Port 18190
2. B. TCP Port 18209
3. C. TCP Port 19009
4. D. TCP Port 18191

Correct Answer: D

- (Exam Topic 4)
When a packet arrives at the gateway, the gateway checks it against the rules in the hop Policy Layer, sequentially from top to bottom, and enforces the first rule that matches a packet. Which of the following statements about the order of rule enforcement is true?

1. A. If the Action is Accept, the gateway allows the packet to pass through the gateway.
2. B. If the Action is Drop, the gateway continues to check rules in the next Policy Layer down.
3. C. If the Action is Accept, the gateway continues to check rules in the next Policy Layer down.
4. D. If the Action is Drop, the gateway applies the Implicit Clean-up Rule for that Policy Layer.

Correct Answer: C

- (Exam Topic 4)
When Identity Awareness is enabled, which identity source(s) is(are) used for Application Control?

1. A. RADIUS
2. B. Remote Access and RADIUS
3. C. AD Query
4. D. AD Query and Browser-based Authentication

Correct Answer: D
Identity Awareness gets identities from these acquisition sources:

- (Exam Topic 2)
What command can you use to have cpinfo display all installed hotfixes?

1. A. cpinfo -hf
2. B. cpinfo –y all
3. C. cpinfo –get hf
4. D. cpinfo installed_jumbo

Correct Answer: B

- (Exam Topic 3)
In Logging and Monitoring, the tracking options are Log, Detailed Log and Extended Log. Which of the following options can you add to each Log, Detailed Log and Extended Log?

1. A. Accounting
2. B. Suppression
3. C. Accounting/Suppression
4. D. Accounting/Extended

Correct Answer: C