156-315.81.20 Exam Training Practice Tests (CheckPoint Check Point Certified Security Expert

Question 1

What is false regarding prerequisites for the Central Deployment usage?

A. No need to establish SIC between gateways and the management server, since the CDT tool will take care about SIC automatically. B. Security Gateway must have the latest CPUSE Deployment Agent C. The administrator must have write permission on SmartUpdate D. The Security Gateway must have a policy installed

Correct Answer: A

Question 2

What command is used to manually failover a cluster during a zero-downtime upgrade?

A. set cluster member down B. cpstop C. set clusterXL down D. clusterXL_admin down

Correct Answer: D

Question 3

Fill in the blank: Identity Awareness AD-Query is using the Microsoft _______________ API to learn
users from AD.

A. Services.msc B. Eventvwr C. XML D. WMI

Correct Answer: D

Question 4

What API command below creates a new host object with the name "My Host" and IP address of "192 168 0 10"?

A. create host name "My Host" ip-address "192.168 0.10" B. set host name "My Host" ip-address "192.168.0.10" C. mgmt.cli -m <mgmt ip> add host name "My Host" ip-address "192.168.0 10" D. new host name "My Host" ip-address "192 168.0.10"

Correct Answer: B

Question 5

You need to change the number of firewall Instances used by CoreXL.
How can you achieve this goal?

A. edit fwaffinity.conf; reboot not required B. cpconfig; reboot not required C. edit fwaffinity.conf; reboot required D. cpconfig; reboot required

Correct Answer: D

Question 6

When running a query on your logs, to find records for user Toni with machine IP of 10.0.4.210 but exclude her tablet IP of 10.0.4.76, which of the following query syntax would you use?

A. "Toni" AND 10.0.4.210 NOT 10.0.4.76 B. Ton* AND 10.0.4.210 NOT 10.0.4.75 C. To** AND 10.0.4.210 NOT 10.0.4.76 D. Toni? AND 10.0.4.210 NOT 10.0.4.76

Correct Answer: A

Question 7

DLP and Geo Policy are examples of what type of Policy?

A. Standard Policies B. Unified Policies C. Inspection Policies D. Shared Policies

Correct Answer: D

Question 8

How many versions, besides the destination version, are supported in a Multi-Version Cluster Upgrade?

A. 4 B. 2 C. 1 D. 3

Correct Answer: D

Question 9

Which two of these Check Point Protocols are used by SmartEvent Processes?

A. ELA and CPLOG B. FWD and CPLOG C. FWD and LEA D. ELA and CPD

Correct Answer: A

Question 10

Fill in the blank: Permanent VPN tunnels can be set on all tunnels in the community, on all tunnels for specific gateways, or ______ .

A. On specific tunnels in the community B. On specific tunnels for specific gateways C. On specific satellite gateway to central gateway tunnels D. On all satellite gateway to satellite gateway tunnels

Correct Answer: A

Question 11

Fill in the blank: The "fw monitor" tool can be best used to troubleshoot ____________________.

A. VPN errors B. Network traffic issues C. Authentication issues D. AV issues

Correct Answer: B

CheckPoint Check Point Certified Security Expert - R81.20 - 156-315.81.20 Exam Practice Test