Free Practice Questions for CheckPoint 156-315.81 Exam

What is the main difference between Threat Extraction and Threat Emulation?

• Threat Emulation never delivers a file and takes more than 3 minutes to complete.
• Threat Extraction always delivers a file and takes less than a second to complete.
• Threat Emulation never delivers a file that takes less than a second to complete.
• Threat Extraction never delivers a file and takes more than 3 minutes to complete.

After making modifications to the $CVPNDIR/conf/cvpnd.C file, how would you restart the daemon?

• cvpnd_restart
• cvpnd_restart
• cvpnd restart
• cvpnrestart

Which is the command to identify the NIC dnver before considering about the employment of the Multi-Queue feature?

• show interface eth0 mq
• ethtool A eth0
• ifconfig -i eth0 verbose
• ip show Int eth0

What is the recommended way to have a redundant Sync connection between the cluster nodes?

• In the SmartConsole / Gateways & Servers -> select Cluster Properties / Network Management and define two Sync interfaces per node. Connect both Sync interfaces without using a switch.
• Use a group of bonded interfaces. In the SmartConsole / Gateways & Servers -> select Cluster Properties / Network Management and define a Virtual IP for the Sync interface.
• In the SmartConsole / Gateways & Servers -> select Cluster Properties / Network Management and define two Sync interfaces per node. Use two different Switches to connect both Sync interfaces.
• Use a group of bonded interfaces connected to different switches. Define a dedicated sync interface, only one interface per node using the SmartConsole / Gateways & Servers -> select Cluster Properties / Network Management.

Which option, when applied to a rule, allows traffic to VPN gateways in specific VPN communities?

• All Connections (Clear or Encrypted)
• Accept all encrypted traffic
• Specific VPN Communities
• All Site-to-Site VPN Communities

What command is used to manually failover a cluster during a zero downtime upgrade?

• set cluster member down
• cpstop
• clusterXL_admin down
• set clusterXL down

What are the three components for Check Point Capsule?

• Capsule Docs, Capsule Cloud, Capsule Connect
• Capsule Workspace, Capsule Cloud, Capsule Connect
• Capsule Workspace, Capsule Docs, Capsule Connect
• Capsule Workspace, Capsule Docs, Capsule Cloud

When Identity Awareness is enabled, which identity source(s) is(are) used for Application Control?

• RADIUS
• Remote Access and RADIUS
• AD Query
• AD Query and Browser-based Authentication

What solution is Multi-queue intended to provide?

• Improve the efficiency of traffic handling by SecureXL SNDs
• Reduce the confusion for traffic capturing in FW Monitor
• Improve the efficiency of CoreXL Kernel Instances
• Reduce the performance of network interfaces

In what way are SSL VPN and IPSec VPN different?

• SSL VPN is using HTTPS in addition to IKE, whereas IPSec VPN is clientless
• SSL VPN adds an extra VPN header to the packet, IPSec VPN does not
• IPSec VPN does not support two factor authentication, SSL VPN does support this
• IPSec VPN uses an additional virtual adapter; SSL VPN uses the client network adapter only.