156-915.80.10 Dumps 156-915.80.10 Braindumps 156-915.80.10 Real Questions 156-915.80.10 Practice Test 156-915.80.10 Actual Questions Checkpoint 156-915.80.10 Certified Security Expert - R80.10 (CCSE) https://killexams.com/pass4sure/exam-detail/156-915.80.10 Question: 56 John detected high load on sync interface. Which is most recommended solution? A. For short connections like http service C delay sync for 2 seconds B. Add a second interface to handle sync traffic C. For short connections like http service C do not sync D. For short connections like icmp service C delay sync for 2 seconds Answer: A Question: 57 What is the SOLR database for? A. Used for full text search and enables powerful matching capabilities B. Writes data to the database and full text search C. Serves GUI responsible to transfer request to the DLEserver D. Enables powerful matching capabilities and writes data to the database Answer: A Question: 58 What is a feature that enables VPN connections to successfully maintain a private and secure VPN session without employing Stateful Inspection? A. Stateful Mode B. VPN Routing Mode C. Wire Mode D. Stateless Mode Answer: C Explanation: Wire Mode is a VPN-1 NGX feature that enables VPN connections to successfully fail over, bypassing Security Gateway enforcement. This improves performance and reduces downtime. Based on a trusted source and destination, Wire Mode uses internal interfaces and VPN Communities to maintain a private and secure VPN session, without employing Stateful Inspection. Since Stateful Inspection no longer takes place, dynamic-routing protocols that do not survive state verification in non-Wire Mode configurations can now be deployed. The VPN connection is no different from any other connections along a dedicated wire, thus the meaning of "Wire Mode". Reference: https://supportcenter.checkpoint.com/supportcenter/portal? eventSubmit_doGoviewsolutiondetails=&solutionid=sk30974 Question: 59 On R80.10 the IPS Blade is managed by: A. Threat Protection policy B. Anti-Bot Blade C. Threat Prevention policy D. Layers on Firewall policy Answer: A Explanation: Reference: https://www.checkpoint.com/downloads/product-related/r80.10-mgmt-architecture-overview.pdf very top of last page. Question: 60 Which packet info is ignored with Session Rate Acceleration? A. source port ranges B. source ip C. source port D. same info from Packet Acceleration is used Answer: C Explanation: Reference: http://trlj.blogspot.com/2015/10/check-point-acceleration.html Question: 61 What is the purpose of Priority Delta in VRRP? A. When a box is up, Effective Priority = Priority + Priority Delta B. When an Interface is up, Effective Priority = Priority + Priority Delta C. When an Interface fail, Effective Priority = Priority C Priority Delta D. When a box fail, Effective Priority = Priority C Priority Delta Answer: C Explanation: Each instance of VRRP running on a supported interface may monitor the link state of other interfaces. The monitored interfaces do not have to be running VRRP. If a monitored interface loses its link state, then VRRP will decrement its priority over a VRID by the specified delta value and then will send out a new VRRP HELLO packet. If the new effective priority is less than the priority a backup platform has, then the backup platform will beging to send out its own HELLO packet. Once the master sees this packet with a priority greater than its own, then it releases the VIP. Reference: https://supportcenter.checkpoint.com/supportcenter/portal? eventSubmit_doGoviewsolutiondetails=&solutionid=sk38524 Question: 62 What is the purpose of a SmartEvent Correlation Unit? A. The SmartEvent Correlation Unit is designed to check the connection reliability from SmartConsole to the SmartEvent Server B. The SmartEvent Correlation Unitās task it to assign severity levels to the identified events. C. The Correlation unit role is to evaluate logs from the log server component to identify patterns/threats and convert them to events. D. The SmartEvent Correlation Unit is designed to check the availability of the SmartReporter Server Answer: C Question: 63 The CDT utility supports which of the following? A. Major version upgrades to R77.30 B. Only Jumbo HFAās and hotfixes C. Only major version upgrades to R80.10 D. All upgrades Answer: D Explanation: The Central Deployment Tool (CDT) is a utility that runs on an R77 / R77.X / R80 / R80.10 Security Management Server / Multi-Domain Security Management Server (running Gaia OS). It allows the administrator to automatically install CPUSE Offline packages (Hotfixes, Jumbo Hotfix Accumulators (Bundles), Upgrade to a Minor Version, Upgrade to a Major Version) on multiple managed Security Gateways and Cluster Members at the same time. Reference: https://community.checkpoint.com/thread/5319-my-top-3-check-point-cli-commands Question: 64 The Firewall kernel is replicated multiple times, therefore: A. The Firewall kernel only touches the packet if the connection is accelerated B. The Firewall can run different policies per core C. The Firewall kernel is replicated only with new connections and deletes itself once the connection times out D. The Firewall can run the same policy on all cores Answer: D Explanation: On a Security Gateway with CoreXL enabled, the Firewall kernel is replicated multiple times. Each replicated copy, or instance, runs on one processing core. These instances handle traffic concurrently, and each instance is a complete and independent inspection kernel. When CoreXL is enabled, all the kernel instances in the Security Gateway process traffic through the same interfaces and apply the same security policy. Reference: https://sc1.checkpoint.com/documents/R77/CP_R77_PerformanceTuning_WebAdmin/6731.htm Question: 65 Sticky Decision Function (SDF) is required to prevent which of the following? Assume you set up an Active-Active cluster. A. Symmetric routing B. Failovers C. Asymmetric routing D. Anti-Spoofing Answer: C Question: 66 Which is not a blade option when configuring SmartEvent? A. Correlation Unit B. SmartEvent Unit C. SmartEvent Server D. Log Server Answer: B Explanation: On the Management tab, enable these Software Blades: - Logging & Status - SmartEvent Server - SmartEvent Correlation Unit Reference: https://sc1.checkpoint.com/documents/R80/CP_R80_LoggingAndMonitoring/ html_frameset.htm? topic=documents/R80/CP_R80_LoggingAndMonitoring/120829 Question: 67 What command would show the API server status? A. cpm status B. api restart C. api status D. show api status Answer: C Explanation: Reference: https://www.hurricanelabs.com/blog/check-point-api-merging-management-servers-with-r80-10 6$03/( 48(67,216 7KHVH TXHVWLRQV DUH IRU GHPR SXUSRVH RQO\ )XOO YHUVLRQ LV XS WR GDWH DQG FRQWDLQV DFWXDO TXHVWLRQV DQG DQVZHUV .LOOH[DPV FRP LV DQ RQOLQH SODWIRUP WKDW RIIHUV D ZLGH UDQJH RI VHUYLFHV UHODWHG WR FHUWLILFDWLRQ H[DP SUHSDUDWLRQ 7KH SODWIRUP SURYLGHV DFWXDO TXHVWLRQV H[DP GXPSV DQG SUDFWLFH WHVWV WR KHOS LQGLYLGXDOV SUHSDUH IRU YDULRXV FHUWLILFDWLRQ H[DPV ZLWK FRQILGHQFH +HUH DUH VRPH NH\ IHDWXUHV DQG VHUYLFHV RIIHUHG E\ .LOOH[DPV FRP $FWXDO ([DP 4XHVWLRQV .LOOH[DPV FRP SURYLGHV DFWXDO H[DP TXHVWLRQV WKDW DUH H[SHULHQFHG LQ WHVW FHQWHUV 7KHVH TXHVWLRQV DUH XSGDWHG UHJXODUO\ WR HQVXUH WKH\ DUH XS WR GDWH DQG UHOHYDQW WR WKH ODWHVW H[DP V\OODEXV %\ VWXG\LQJ WKHVH DFWXDO TXHVWLRQV FDQGLGDWHV FDQ IDPLOLDUL]H WKHPVHOYHV ZLWK WKH FRQWHQW DQG IRUPDW RI WKH UHDO H[DP ([DP 'XPSV .LOOH[DPV FRP RIIHUV H[DP GXPSV LQ 3') IRUPDW 7KHVH GXPSV FRQWDLQ D FRPSUHKHQVLYH FROOHFWLRQ RI TXHVWLRQV DQG DQVZHUV WKDW FRYHU WKH H[DP WRSLFV %\ XVLQJ WKHVH GXPSV FDQGLGDWHV FDQ HQKDQFH WKHLU NQRZOHGJH DQG LPSURYH WKHLU FKDQFHV RI VXFFHVV LQ WKH FHUWLILFDWLRQ H[DP 3UDFWLFH 7HVWV .LOOH[DPV FRP SURYLGHV SUDFWLFH WHVWV WKURXJK WKHLU GHVNWRS 9&( H[DP VLPXODWRU DQG RQOLQH WHVW HQJLQH 7KHVH SUDFWLFH WHVWV VLPXODWH WKH UHDO H[DP HQYLURQPHQW DQG KHOS FDQGLGDWHV DVVHVV WKHLU UHDGLQHVV IRU WKH DFWXDO H[DP 7KH SUDFWLFH WHVWV FRYHU D ZLGH UDQJH RI TXHVWLRQV DQG HQDEOH FDQGLGDWHV WR LGHQWLI\ WKHLU VWUHQJWKV DQG ZHDNQHVVHV *XDUDQWHHG 6XFFHVV .LOOH[DPV FRP RIIHUV D VXFFHVV JXDUDQWHH ZLWK WKHLU H[DP GXPSV 7KH\ FODLP WKDW E\ XVLQJ WKHLU PDWHULDOV FDQGLGDWHV ZLOO SDVV WKHLU H[DPV RQ WKH ILUVW DWWHPSW RU WKH\ ZLOO UHIXQG WKH SXUFKDVH SULFH 7KLV JXDUDQWHH SURYLGHV DVVXUDQFH DQG FRQILGHQFH WR LQGLYLGXDOV SUHSDULQJ IRU FHUWLILFDWLRQ H[DPV 8SGDWHG &RQWHQW .LOOH[DPV FRP UHJXODUO\ XSGDWHV LWV TXHVWLRQ EDQN DQG H[DP GXPSV WR HQVXUH WKDW WKH\ DUH FXUUHQW DQG UHIOHFW WKH ODWHVW FKDQJHV LQ WKH H[DP V\OODEXV 7KLV KHOSV FDQGLGDWHV VWD\ XS WR GDWH ZLWK WKH H[DP FRQWHQW DQG LQFUHDVHV WKHLU FKDQFHV RI VXFFHVV 7HFKQLFDO 6XSSRUW .LOOH[DPV FRP SURYLGHV IUHH [ WHFKQLFDO VXSSRUW WR DVVLVW FDQGLGDWHV ZLWK DQ\ TXHULHV RU LVVXHV WKH\ PD\ HQFRXQWHU ZKLOH XVLQJ WKHLU VHUYLFHV 7KHLU FHUWLILHG H[SHUWV DUH DYDLODEOH WR SURYLGH JXLGDQFH DQG KHOS FDQGLGDWHV WKURXJKRXW WKHLU H[DP SUHSDUDWLRQ MRXUQH\ 'PS .PSF FYBNT WJTJU IUUQT LJMMFYBNT DPN WFOEPST FYBN MJTU .LOO \RXU H[DP DW )LUVW $WWHPSW *XDUDQWHHG