156-315.81 Free Practice Test

- (Exam Topic 3)
What must you do first if “fwm sic_reset” could not be completed?

1. A. Cpstop then find keyword “certificate” in objects_5_0.C and delete the section
2. B. Reinitialize SIC on the security gateway then run “fw unloadlocal”
3. C. Reset SIC from Smart Dashboard
4. D. Change internal CA via cpconfig

Correct Answer: D

- (Exam Topic 2)
Which Check Point software blades could be enforced under Threat Prevention profile using Check Point R81.10 SmartConsole application?

1. A. IPS, Anti-Bot, URL Filtering, Application Control, Threat Emulation.
2. B. Firewall, IPS, Threat Emulation, Application Control.
3. C. IPS, Anti-Bot, Anti-Virus, Threat Emulation, Threat Extraction.
4. D. Firewall, IPS, Anti-Bot, Anti-Virus, Threat Emulation.

Correct Answer: C

- (Exam Topic 1)
Which statement is true regarding redundancy?

1. A. System Administrators know when their cluster has failed over and can also see why it failed over by using the cphaprob –f if command.
2. B. ClusterXL offers three different Load Sharing solutions: Unicast, Broadcast, and Multicast.
3. C. Machines in a ClusterXL High Availability configuration must be synchronized.
4. D. Both ClusterXL and VRRP are fully supported by Gaia and available to all Check Point appliances, open servers, and virtualized environments.

Correct Answer: D

- (Exam Topic 3)
Vanessa is firewall administrator in her company. Her company is using Check Point firewall on a central and several remote locations which are managed centrally by R77.30 Security Management Server. On central location is installed R77.30 Gateway on Open server. Remote locations are using Check Point UTM-1570 series appliances with R75.30 and some of them are using a UTM-1-Edge-X or Edge-W with latest available firmware. She is in process of migrating to R81.
What can cause Vanessa unnecessary problems, if she didn’t check all requirements for migration to R81?

1. A. Missing an installed R77.20 Add-on on Security Management Server
2. B. Unsupported firmware on UTM-1 Edge-W appliance
3. C. Unsupported version on UTM-1 570 series appliance
4. D. Unsupported appliances on remote locations

Correct Answer: A

- (Exam Topic 2)
VPN Link Selection will perform the following when the primary VPN link goes down?

1. A. The Firewall will drop the packets.
2. B. The Firewall can update the Link Selection entries to start using a different link for the same tunnel.
3. C. The Firewall will send out the packet on all interfaces.
4. D. The Firewall will inform the client that the tunnel is down.

Correct Answer: B