2024 Current 156-315.81.20 dumps Preparation through Our Practice Test
100% Reliable Microsoft 156-315.81.20 Exam Dumps Test Pdf Exam Material
NEW QUESTION # 331
If an administrator wants to add manual NAT for addresses now owned by the Check Point firewall, what else is necessary to be completed for it to function properly?
- A. Nothing - the proxy ARP is automatically handled in the R81 version
- B. Add the proxy ARP configurations in a file called $FWDIR/conf/local.arp
- C. Add the proxy ARP configurations in a file called /etc/conf/local.arp
- D. Add the proxy ARP configurations in a file called $CPDIR/conf/local.arp
Answer: B
NEW QUESTION # 332
Where you can see and search records of action done by R81 SmartConsole administrators?
- A. In the Logs & Monitor view, select "Open Audit Log View"
- B. In Smartlog, all logs
- C. In SmartAuditLog View
- D. In SmartView Tracker, open active log
Answer: A
NEW QUESTION # 333
With Mobile Access enabled, administrators select the web-based and native applications that can be accessed by remote users and define the actions that users can perform the applications.
Mobile Access encrypts all traffic using:
- A. HTTPS for web-based applications and AES or RSA algorithm for native applications. For end users to access the native application, no additional software is required.
- B. HTTPS for web-based applications and 3DES or RC4 algorithm for native applications. For end users to access the native applications, no additional software is required.
- C. HTTPS for web-based applications and AES or RSA algorithm for native applications. For end users to access the native application, they need to install the SSL Network Extender.
- D. HTTPS for web-based applications and 3DES or RC4 algorithm for native applications. For end users to access the native applications, they need to install the SSL Network Extender.
Answer: D
NEW QUESTION # 334
How do Capsule Connect and Capsule Workspace differ?
- A. Capsule Connect provides Business data isolation.
- B. Capsule Connect provides a Layer3 VPN. Capsule Workspace provides a Desktop with usable applications.
- C. Capsule Connect does not require an installed application at client.
- D. Capsule Workspace can provide access to any application.
Answer: B
NEW QUESTION # 335
Which one is not a valid upgrade method to R81.20?
- A. RPM Upgrade
- B. Upgrade with Migration
- C. CPUSE Upgrade
- D. Advanced Upgrade
Answer: A
NEW QUESTION # 336
The Check Point installation history feature in provides the following:
- A. Policy Installation Date, view install changes and install specific version
- B. Policy Installation Date only
- C. View install changes and install specific version
- D. View install changes
Answer: A
NEW QUESTION # 337
What is true about VRRP implementations?
- A. VRRP membership is enabled in cpconfig
- B. You cannot have a standalone deployment
- C. VRRP can be used together with ClusterXL, but with degraded performance
- D. You cannot have different VRIDs in the same physical network
Answer: B
NEW QUESTION # 338
For best practices, what is the recommended time for automatic unlocking of locked admin accounts?
- A. 15 minutes
- B. 30 minutes at least
- C. Admin account cannot be unlocked automatically
- D. 20 minutes
Answer: B
NEW QUESTION # 339
Which of the following technologies extracts detailed information from packets and stores that information in state tables?
- A. INSPECT Engine
- B. Packet Filtering
- C. Application Layer Firewall
- D. Stateful Inspection
Answer: A
NEW QUESTION # 340
In ClusterXL Load Sharing Multicast Mode:
- A. only the primary member received packets sent to the cluster IP address
- B. only the secondary member receives packets sent to the cluster IP address
- C. every member of the cluster received all of the packets sent to the cluster IP address
- D. packets sent to the cluster IP address are distributed equally between all members of the cluster
Answer: C
NEW QUESTION # 341
Which of these statements describes the Check Point ThreatCloud?
- A. Blocks or limits usage of web applications
- B. Prevents or controls access to web sites based on category
- C. Prevents Cloud vulnerability exploits
- D. A worldwide collaborative security network
Answer: D
NEW QUESTION # 342
In the Check Point Security Management Architecture, which component(s) can store logs?
- A. SmartConsole
- B. Security Management Server
- C. Security Management Server and Security Gateway
- D. SmartConsole and Security Management Server
Answer: C
NEW QUESTION # 343
Due to high CPU workload on the Security Gateway, the security administrator decided to purchase a new CPU to replace the existing single core CPU.
After installation, is the administrator required to perform any additional tasks?
- A. Go to clash-Run cpconfig | Configure CoreXL to make use of the additional Cores | Exit cpconfig | Reboot Security Gateway | Install Security Policy
- B. Administrator does not need to perform any task. Check Point will make use of the newly installed CPU and Cores
- C. Go to clash-Run cpconfig | Configure CoreXL to make use of the additional Cores | Exit cpconfig | Reboot Security Gateway
- D. Go to clash-Run cpstop | Run cpstart
Answer: C
NEW QUESTION # 344
How often does Threat Emulation download packages by default?
- A. Once per day
- B. Twice per day
- C. Once an hour
- D. Once a week
Answer: A
NEW QUESTION # 345
What API command below creates a new host object with the name "My Host" and IP address of "192 168 0 10"?
- A. create host name "My Host" ip-address "192.168 0.10"
- B. set host name "My Host" ip-address "192.168.0.10"
- C. mgmt.cli -m <mgmt ip> add host name "My Host" ip-address "192.168.0 10"
- D. new host name "My Host" ip-address "192 168.0.10"
Answer: B
NEW QUESTION # 346
What is mandatory for ClusterXL to work properly?
- A. The Magic MAC number must be unique per cluster node
- B. If you have "Non-monitored Private" interfaces, the number of those interfaces must be the same on all cluster members
- C. The Sync interface must not have an IP address configured
- D. The number of cores must be the same on every participating cluster node
Answer: A
NEW QUESTION # 347
Which command is used to display status information for various components?
- A. show system messages
- B. sysmess all
- C. show sysenv all
- D. show all systems
Answer: C
NEW QUESTION # 348
John detected high load on sync interface.
Which is most recommended solution?
- A. Add a second interface to handle sync traffic
- B. For short connections like icmp service - delay sync for 2 seconds
- C. For short connections like http service - do not sync
- D. For short connections like http service - delay sync for 2 seconds
Answer: D
NEW QUESTION # 349
Kofi, the administrator of the ALPHA Corp network wishes to change the default Gaia WebUI Portal port number currently set on the default HTTPS port.
Which CLISH commands are required to be able to change this TCP port?
- A. set web ssl-port <new port number>
- B. set Gaia-portal port <new port number>
- C. set Gaia-portal https-port <new port number>
- D. set web https-port <new port number>
Answer: A
NEW QUESTION # 350
Which Operating Systems are supported for the Endpoint Security VPN?
- A. Windows and x86 Solaris
- B. Windows and SPARC Solaris
- C. Windows and macOS computers
- D. Windows and Red Hat Linux
Answer: C
NEW QUESTION # 351
By default, which port does the WebUI listen on?
- A. 0
- B. 1
- C. 2
- D. 3
Answer: C
NEW QUESTION # 352
SandBlast offers flexibility in implementation based on their individual business needs.
What is an option for deployment of Check Point SandBlast Zero-Day Protection?
- A. Threat Agent Solution
- B. Public Cloud Services
- C. Load Sharing Mode Services
- D. Smart Cloud Services
Answer: D
NEW QUESTION # 353
Due to high CPU workload on the Security Gateway, the security administrator decided to purchase a new multicore CPU to replace the existing single core CPU.
After installation, is the administrator required to perform any additional tasks?
- A. After upgrading the hardware, increase the number of kernel instances using cpconfig
- B. Run cprestart from clish
- C. Administrator does not need to perform any task. Check Point will make use of the newly installed CPU and Cores
- D. Hyperthreading must be enabled in the bios to use CoreXL
Answer: A
NEW QUESTION # 354
......
Free 156-315.81.20 Dumps are Available for Instant Access: https://www.itpassleader.com/CheckPoint/156-315.81.20-dumps-pass-exam.html
Based on Official Syllabus Topics of Actual CheckPoint 156-315.81.20 Exam: https://drive.google.com/open?id=1nMrlwPDKuSJ0_Dj4zznNcm78oKhioFCo