Latest 156-915.80.10 Practice Tests with Actual Questions

Get Complete pool of questions with Premium PDF and Test Engine

Exam Code : 156-915.80.10
Exam Name : Certified Security Expert - R80.10 (CCSE)
Vendor Name :
"Checkpoint"

Download Full Version of 156-915.80.10

---

156-915.80.10 Dumps

156-915.80.10 Braindumps

156-915.80.10 Real Questions

156-915.80.10 Practice Test

156-915.80.10 Actual Questions

killexams.com

Checkpoint

156-915.80.10

Certified Security Expert - R80.10 (CCSE)

https://killexams.com/pass4sure/exam-detail/156-915.80.10

Question: 56

John detected high load on sync interface. Which is most recommended solution?

1. For short connections like http service C delay sync for 2 seconds

2. Add a second interface to handle sync traffic

3. For short connections like http service C do not sync

4. For short connections like icmp service C delay sync for 2 seconds

Answer: A
Question: 57

What is the SOLR database for?

1. Used for full text search and enables powerful matching capabilities

2. Writes data to the database and full text search

3. Serves GUI responsible to transfer request to the DLEserver

4. Enables powerful matching capabilities and writes data to the database

Answer: A
Question: 58

What is a feature that enables VPN connections to successfully maintain a private and secure VPN session without employing Stateful Inspection?

1. Stateful Mode

2. VPN Routing Mode

3. Wire Mode

4. Stateless Mode

Answer: C

Explanation:

Wire Mode is a VPN-1 NGX feature that enables VPN connections to successfully fail over, bypassing Security Gateway enforcement. This improves performance and reduces downtime. Based on a trusted source and destination, Wire Mode uses internal interfaces and VPN Communities to maintain a private and secure VPN session, without employing Stateful Inspection. Since Stateful Inspection no longer takes

place, dynamic-routing protocols that do not survive state verification in non-Wire Mode configurations can now be deployed. The VPN connection is no different from any other connections along a dedicated wire, thus the meaning of "Wire Mode".

Reference: https://supportcenter.checkpoint.com/supportcenter/portal? eventSubmit_doGoviewsolutiondetails=&solutionid=sk30974

Question: 59

On R80.10 the IPS Blade is managed by:

1. Threat Protection policy

2. Anti-Bot Blade

3. Threat Prevention policy

4. Layers on Firewall policy

Answer: A

Explanation:

Reference: https://www.checkpoint.com/downloads/product-related/r80.10-mgmt-architecture-overview.pdf very top of last page.

Question: 60

Which packet info is ignored with Session Rate Acceleration?

1. source port ranges

2. source ip

3. source port

4. same info from Packet Acceleration is used

Reference: http://trlj.blogspot.com/2015/10/check-point-acceleration.html

Question: 61

What is the purpose of Priority Delta in VRRP?

1. When a box is up, Effective Priority = Priority + Priority Delta

2. When an Interface is up, Effective Priority = Priority + Priority Delta

3. When an Interface fail, Effective Priority = Priority C Priority Delta

4. When a box fail, Effective Priority = Priority C Priority Delta

Answer: C

Explanation:

Each instance of VRRP running on a supported interface may monitor the link state of other interfaces. The monitored interfaces do not have to be running VRRP. If a monitored interface loses its link state, then VRRP will decrement its priority over a VRID by the specified delta value and then will send out a new VRRP HELLO packet. If the new effective priority is less than the priority a backup platform has, then the backup platform will beging to send out its own HELLO packet. Once the master sees this packet with a priority greater than its own, then it releases the VIP.

Reference: https://supportcenter.checkpoint.com/supportcenter/portal? eventSubmit_doGoviewsolutiondetails=&solutionid=sk38524

Question: 62

What is the purpose of a SmartEvent Correlation Unit?

1. The SmartEvent Correlation Unit is designed to check the connection reliability from SmartConsole to the SmartEvent Server

2. The SmartEvent Correlation Unitâs task it to assign severity levels to the identified events.

3. The Correlation unit role is to evaluate logs from the log server component to identify patterns/threats and convert them to events.

4. The SmartEvent Correlation Unit is designed to check the availability of the SmartReporter Server

Answer: C
Question: 63

The CDT utility supports which of the following?

1. Major version upgrades to R77.30

2. Only Jumbo HFAâs and hotfixes

3. Only major version upgrades to R80.10

4. All upgrades

The Central Deployment Tool (CDT) is a utility that runs on an R77 / R77.X / R80 / R80.10 Security Management Server / Multi-Domain Security Management Server (running Gaia OS).

It allows the administrator to automatically install CPUSE Offline packages (Hotfixes, Jumbo Hotfix Accumulators (Bundles), Upgrade to a Minor Version, Upgrade to a Major Version) on multiple managed Security Gateways and Cluster Members at the same time.

Reference: https://community.checkpoint.com/thread/5319-my-top-3-check-point-cli-commands

Question: 64

The Firewall kernel is replicated multiple times, therefore:

1. The Firewall kernel only touches the packet if the connection is accelerated

2. The Firewall can run different policies per core

3. The Firewall kernel is replicated only with new connections and deletes itself once the connection times out

4. The Firewall can run the same policy on all cores

Answer: D

Explanation:

On a Security Gateway with CoreXL enabled, the Firewall kernel is replicated multiple times. Each replicated copy, or instance, runs on one processing core. These instances handle traffic concurrently, and each instance is a complete and independent inspection kernel. When CoreXL is enabled, all the kernel instances in the Security Gateway process traffic through the same interfaces and apply the same security policy.

Reference: https://sc1.checkpoint.com/documents/R77/CP_R77_PerformanceTuning_WebAdmin/6731.htm

Question: 65

Sticky Decision Function (SDF) is required to prevent which of the following? Assume you set up an Active-Active cluster.

1. Symmetric routing

2. Failovers

3. Asymmetric routing

4. Anti-Spoofing

Answer: C
Question: 66

Which is not a blade option when configuring SmartEvent?

1. Correlation Unit

2. SmartEvent Unit

3. SmartEvent Server

4. Log Server

Answer: B

Explanation:

On the Management tab, enable these Software Blades:

• Logging & Status

  
  

• SmartEvent Server

  
  

• SmartEvent Correlation Unit

Reference: https://sc1.checkpoint.com/documents/R80/CP_R80_LoggingAndMonitoring/ html_frameset.htm? topic=documents/R80/CP_R80_LoggingAndMonitoring/120829

Question: 67

What command would show the API server status?

1. cpm status

2. api restart

3. api status

4. show api status

Answer: C

Explanation:

Reference: https://www.hurricanelabs.com/blog/check-point-api-merging-management-servers-with-r80-10

User: Louise***** I found Killexams.com while searching for quality certification sources to prepare for my 156-915.80.10 exam. The wealth of resources on the website, including the 156-915.80.10 study practice test, convinced me to subscribe. With their help, I was able to prepare well for the exam and pass it with ease. I am grateful to Killexams.com for their excellent resources.

User: Trinidad***** My experience with killexams.com was very encouraging. Initially, I was hesitant to use their practice tests as I was afraid of failing the 156-915.80.10 exam. But upon recommendation from my friends, who had used the exam simulator for their 156-915.80.10 certification, I decided to purchase the preparation materials. They were reasonably priced, and to my surprise, I scored 100% in my 156-915.80.10 exam. I would like to recognize the killexams.com team for their excellent work.

User: Eli***** If you want to change your destiny and ensure happiness in your future, you must work hard. Working hard alone is not enough; you need guidance to lead you in the right direction. I was fortunate to discover Killexams.com during my exam preparation, and it helped me achieve my desired grades. Thanks to the materials provided by Killexams.com, I was able to succeed in my 156-915.80.10 exam.

User: Faye***** Thanks to killexams.com valid answers, I was able to achieve an 84% score on the 156-915.80.10 exam within the stipulated time. Their excellent exam preparation material provided me with great knowledge and helped me perform well.

User: Mavra***** Two weeks before my 156-915.80.10 exam, my books got burnt in a fire at my place, and my preparation was incomplete. I thought of quitting, but then I found killexams.com. With their free demo, I could understand things easily and eventually passed my 156-915.80.10 exam.

---