156-315.81 Free Practice Test

- (Exam Topic 2)
The Correlation Unit performs all but the following actions:

1. A. Marks logs that individually are not events, but may be part of a larger pattern to be identified later.
2. B. Generates an event based on the Event policy.
3. C. Assigns a severity level to the event.
4. D. Takes a new log entry that is part of a group of items that together make up an event, and adds it to an ongoing event.

Correct Answer: C

- (Exam Topic 4)
What is the recommended configuration when the customer requires SmartLog indexing for 14 days and SmartEvent to keep events for 180 days?

1. A. Use Multi-Domain Management Server.
2. B. Choose different setting for log storage and SmartEvent db
3. C. Install Management and SmartEvent on different machines.
4. D. it is not possible.

Correct Answer: C

- (Exam Topic 3)
What is correct statement about Security Gateway and Security Management Server failover in Check Point R81.X in terms of Check Point Redundancy driven solution?

1. A. Security Gateway failover is an automatic procedure but Security Management Server failover is a manual procedure.
2. B. Security Gateway failover as well as Security Management Server failover is a manual procedure.
3. C. Security Gateway failover is a manual procedure but Security Management Server failover is an automatic procedure.
4. D. Security Gateway failover as well as Security Management Server failover is an automatic procedure.

Correct Answer: A

- (Exam Topic 3)
What will be the effect of running the following command on the Security Management Server?

1. A. Remove the installed Security Policy.
2. B. Remove the local ACL lists.
3. C. No effect.
4. D. Reset SIC on all gateways.

Correct Answer: A

- (Exam Topic 3)
The SmartEvent R81 Web application for real-time event monitoring is called:

1. A. SmartView Monitor
2. B. SmartEventWeb
3. C. There is no Web application for SmartEvent
4. D. SmartView

Correct Answer: B