Latest Jul-2024 CheckPoint 156-315.81.20 Dumps Updated 615 Questions
PDF Download Free of 156-315.81.20 Valid Practice Test Questions
NEW QUESTION # 91
Which of the following statements about SecureXL NAT Templates is true?
- A. DROP Templates are generated to achieve high session rate for NAT. These templates store the NAT attributes of connections matched by rulebase so that similar new connections can take advantage of this information and do NAT without the expensive rulebase lookup. These are disabled by default and work only if NAT Templates are disabled.
- B. ACCEPT Templates are generated to achieve high session rate for NAT. These templates store the NAT attributes of connections matched by rulebase so that similar new connections can take advantage of this information and do NAT without the expensive rulebase lookup. These are disabled by default and work only if NAT Templates are disabled.
- C. NAT Templates are generated to achieve high session rate for NAT. These templates store the NAT attributes of connections matched by rulebase so that similar new connections can take advantage of this information and do NAT without the expensive rulebase lookup. These are enabled by default and work only if Accept Templates are enabled.
- D. NAT Templates are generated to achieve high session rate for NAT. These templates store the NAT attributes of connections matched by rulebase so that similar new connections can take advantage of this information and do NAT without the expensive rulebase lookup. These are disabled by default and work only if Accept Templates are disabled.
Answer: C
NEW QUESTION # 92
Which encryption algorithm is the least secured?
- A. DES
- B. 3DES
- C. AES-256
- D. AES-128
Answer: A
NEW QUESTION # 93
Which member of a high-availability cluster should be upgraded first in a Zero downtime upgrade?
- A. The Standby Member
- B. The Primary Member
- C. The Secondary Member
- D. The Active Member
Answer: A
NEW QUESTION # 94
Fill in the blank: A ________ VPN deployment is used to provide remote users with secure access to internal corporate resources by authenticating the user through an internet browser.
- A. Client-based remote access
- B. Clientless direct access
- C. Direct access
- D. Clientless remote access
Answer: D
NEW QUESTION # 95
What are the correct steps upgrading a HA cluster (M1 is active, M2 is passive) using Multi-Version Cluster (MVC)Upgrade?
- A. 1) Enable the MVC mechanism on both cluster members #cphaprob mvc on 2) Upgrade the passive node M2 to R81.20 3) In SmartConsole, change the version of the cluster object 4) Install the Access Control Policy 5) After examine the cluster states upgrade node M1 to R81.20 6) On each Cluster Member, disable the MVC mechanism and Install the Access Control Policy
- B. 1) In SmartConsole, change the version of the cluster object 2) Upgrade the passive node M2 to R81.20 3) Enable the MVC mechanism on the upgraded R81.20 Cluster Member M2 #cphaconf mvc on 4) Install the Access Control Policy and make sure that the installation will not stop if installation on one cluster member fails 5) After examine the cluster states upgrade node M1 to R81.20 6) On each Cluster Member, disable the MVC mechanism and Install the Access Control Policy SmartConsole, change the version of the cluster object
- C. 1) Enable the MVC mechanism on both cluster members #cphaprob mvc on 2) Upgrade the passive node M2 to R81.20 3) In SmartConsole, change the version of the cluster object 4) Install the Access Control Policy and make sure that the installation will not stop if installation on one cluster member fails 5) After examine the cluster states upgrade node M1 to R81.20 6) On each Cluster Member, disable the MVC mechanism
- D. 1) Upgrade the passive node M2 to R81.20 2) Enable the MVC mechanism on the upgraded R81.20 Cluster Member M2 #cphaconf mvc on 3) In SmartConsole, change the version of the cluster object 4) Install the Access Control Policy 5) After examine the cluster states upgrade node M1 to R81.20 6) On each Cluster Member, disable the MVC mechanism and Install the Access Control Policy upgrade the passive node M2 to R81.20
Answer: B
NEW QUESTION # 96
To find records in the logs that shows log records from the Application & URL Filtering Software Blade where traffic was dropped, what would be the query syntax?
- A. (blade: application control AND action;drop)
- B. blada: application control AND action:drop
- C. blade;"application control AND action:drop
- D. blade."application control AND action;drop
Answer: C
NEW QUESTION # 97
Alice & Bob are concurrently logged In via SSH on the same Check Point Security Gateway as user "admin* however Bob was first logged in and acquired the lock Alice Is not aware that Bob is also togged in to the same Security Management Server as she is but she needs to perform very urgent configuration changes - which of the following GAlAclish command is true for overriding Bobs configuration database lock:
- A. database unlock override
- B. lock database override
- C. unlock database override
- D. unlock override database
Answer: B
NEW QUESTION # 98
Which statement is WRONG regarding the usage of the Central Deployment in SmartConsole?
- A. You can install Jumbo Hotfix accumulators with the Central Deployment in SmartConsole.
- B. You can upgrade your cluster without user intervention with the Central Deployment in SmartConsole from R80.40 to R81.20.
- C. You can install Hotfixes with the Central Deployment in SmartConsole
- D. Only be installed Hotfixes can with the Central Deployment in SmartConsole
Answer: D
NEW QUESTION # 99
When defining QoS global properties, which option below is not valid?
- A. Schedule
- B. Authenticated timeout
- C. Weight
- D. Rate
Answer: D
NEW QUESTION # 100
Alice wants to upgrade the current security management machine from R80.40 to R81.20 and she wants to check the Deployment Agent status over the GAIA CLISH.
Which of the following GAIACLISH command is true?
- A. show agent status
- B. show installer status
- C. show installer packages
- D. show uninstaller status
Answer: B
NEW QUESTION # 101
What is the default size of NAT table fwx_alloc?
- A. 0
- B. 1
- C. 2
- D. 3
Answer: B
NEW QUESTION # 102
Please choose correct command to add an "emailserver1" host with IP address 10.50.23.90 using GAiA management CLI?
- A. add host name emailserver1 ip-address 10.50.23.90
- B. mgmt: add host name emailserver1 ip-address 10.50.23.90
- C. mgmt: add host name ip-address 10.50.23.90
- D. host name myHost12 ip-address 10.50.23.90
Answer: B
NEW QUESTION # 103
What solution is multi-queue intended to provide?
- A. Reduce the confusion for traffic capturing in FW Monitor
- B. Reduce the performance of network interfaces
- C. Improve the efficiency of CoreXL Kernel Instances
- D. Improve the efficiency of traffic handling by SecureXL SNDs
Answer: C
NEW QUESTION # 104
What could NOT be a reason for synchronization issues in a Management HA environment?
- A. The products installed on the servers do not match: one device is a Standalone Server while the other is only a Security Management server
- B. There is a network connectivity failure between the servers
- C. Accidentally, you have configured unique IP addresses per Management Server which invalidates the CA Certificate
- D. Servers are in Collision Mode. Two servers, both in active state cannot be synchronized either automatically or manually.
Answer: A
NEW QUESTION # 105
Due to high CPU workload on the Security Gateway, the security administrator decided to purchase a new CPU to replace the existing single core CPU.
After installation, is the administrator required to perform any additional tasks?
- A. Go to clash-Run cpstop | Run cpstart
- B. Go to clash-Run cpconfig | Configure CoreXL to make use of the additional Cores | Exit cpconfig | Reboot Security Gateway | Install Security Policy
- C. Administrator does not need to perform any task. Check Point will make use of the newly installed CPU and Cores
- D. Go to clash-Run cpconfig | Configure CoreXL to make use of the additional Cores | Exit cpconfig | Reboot Security Gateway
Answer: D
NEW QUESTION # 106
What command is used to manually failover a cluster during a zero-downtime upgrade?
- A. clusterXL_admin down
- B. set cluster member down
- C. cpstop
- D. set clusterXL down
Answer: A
NEW QUESTION # 107
In ClusterXL Load Sharing Multicast Mode:
- A. only the secondary member receives packets sent to the cluster IP address
- B. every member of the cluster received all of the packets sent to the cluster IP address
- C. packets sent to the cluster IP address are distributed equally between all members of the cluster
- D. only the primary member received packets sent to the cluster IP address
Answer: B
NEW QUESTION # 108
After having saved the Clish Configuration with the "save configuration config.txt" command, where can you find the config.txt file?
- A. You cannot locate the file in the file system since Clish does not have any access to the bash file system
- B. You can locate the file via SmartConsole > Command Line.
- C. You will find it in the home directory of your user account (e.g. /home/admin/)
- D. You have to launch the WebUI and go to "Config" -> "Export Config File" and specifiy the destination directory of your local file system.
Answer: C
NEW QUESTION # 109
What state is the Management HA in when both members have different policies/databases?
- A. Never been synchronized
- B. Synchronized
- C. Collision
- D. Lagging
Answer: C
NEW QUESTION # 110
If SecureXL is disabled which path is used to process traffic?
- A. Firewall path
- B. Medium path
- C. Accelerated path
- D. Passive path
Answer: A
NEW QUESTION # 111
......
156-315.81.20 Test Engine files, 156-315.81.20 Dumps PDF: https://www.premiumvcedump.com/CheckPoint/valid-156-315.81.20-premium-vce-exam-dumps.html
Latest CheckPoint 156-315.81.20 PDF and Dumps (2024) Free Exam Questions Answers: https://drive.google.com/open?id=1MmQIlm7gxgWybA0USUSGVIQkQD0MVKcQ