156-915.80.10 : Certified Security Expert - R80.10 (CCSE) Exam

156-915.80.10 Dumps
156-915.80.10 Braindumps
156-915.80.10 Real Questions
156-915.80.10 Practice Test
156-915.80.10 Actual Questions


Checkpoint
156-915.80.10
Certified Security Expert - R80.10 (CCSE)
https://killexams.com/pass4sure/exam-detail/156-915.80.10


Question: 56
John detected high load on sync interface.
Which is most recommended solution?
A. For short connections like http service C delay sync for 2 seconds
B. Add a second interface to handle sync traffic
C. For short connections like http service C do not sync
D. For short connections like icmp service C delay sync for 2 seconds
Answer: A
Question: 57
What is the SOLR database for?
A. Used for full text search and enables powerful matching capabilities
B. Writes data to the database and full text search
C. Serves GUI responsible to transfer request to the DLEserver
D. Enables powerful matching capabilities and writes data to the database
Answer: A
Question: 58
What is a feature that enables VPN connections to successfully maintain a private and secure VPN session without
employing Stateful Inspection?
A. Stateful Mode
B. VPN Routing Mode
C. Wire Mode
D. Stateless Mode
Answer: C
Explanation:
Wire Mode is a VPN-1 NGX feature that enables VPN connections to successfully fail over, bypassing Security
Gateway enforcement. This improves performance and reduces downtime. Based on a trusted source and destination,
Wire Mode uses internal interfaces and VPN Communities to maintain a private and secure VPN session, without
employing Stateful Inspection. Since Stateful Inspection no longer takes
place, dynamic-routing protocols that do not survive state verification in non-Wire Mode configurations can now be
deployed. The VPN connection is no different from any other connections along a dedicated wire, thus the meaning of
"Wire Mode".
Reference: https://supportcenter.checkpoint.com/supportcenter/portal?
eventSubmit_doGoviewsolutiondetails=&solutionid=sk30974
Question: 59
On R80.10 the IPS Blade is managed by:
A. Threat Protection policy
B. Anti-Bot Blade
C. Threat Prevention policy
D. Layers on Firewall policy
Answer: A
Explanation:
Reference: https://www.checkpoint.com/downloads/product-related/r80.10-mgmt-architecture-overview.pdf very top
of last page.
Question: 60
Which packet info is ignored with Session Rate Acceleration?
A. source port ranges
B. source ip
C. source port
D. same info from Packet Acceleration is used
Answer: C
Explanation:
Reference: http://trlj.blogspot.com/2015/10/check-point-acceleration.html
Question: 61
What is the purpose of Priority Delta in VRRP?
A. When a box is up, Effective Priority = Priority + Priority Delta
B. When an Interface is up, Effective Priority = Priority + Priority Delta
C. When an Interface fail, Effective Priority = Priority C Priority Delta
D. When a box fail, Effective Priority = Priority C Priority Delta
Answer: C
Explanation:
Each instance of VRRP running on a supported interface may monitor the link state of other interfaces. The monitored
interfaces do not have to be running VRRP. If a monitored interface loses its link state, then VRRP will decrement its
priority over a VRID by the specified delta value and then will send out a new VRRP HELLO packet. If the new
effective priority is less than the priority a backup platform has, then the backup platform will beging to send out its
own HELLO packet. Once the master sees this packet with a priority greater than its own, then it releases the VIP.
Reference: https://supportcenter.checkpoint.com/supportcenter/portal?
eventSubmit_doGoviewsolutiondetails=&solutionid=sk38524
Question: 62
What is the purpose of a SmartEvent Correlation Unit?
A. The SmartEvent Correlation Unit is designed to check the connection reliability from SmartConsole to the
SmartEvent Server
B. The SmartEvent Correlation Unitās task it to assign severity levels to the identified events.
C. The Correlation unit role is to evaluate logs from the log server component to identify patterns/threats and convert
them to events.
D. The SmartEvent Correlation Unit is designed to check the availability of the SmartReporter Server
Answer: C
Question: 63
The CDT utility supports which of the following?
A. Major version upgrades to R77.30
B. Only Jumbo HFAās and hotfixes
C. Only major version upgrades to R80.10
D. All upgrades
Answer: D
Explanation:
The Central Deployment Tool (CDT) is a utility that runs on an R77 / R77.X / R80 / R80.10 Security Management
Server / Multi-Domain Security Management Server (running Gaia OS).
It allows the administrator to automatically install CPUSE Offline packages (Hotfixes, Jumbo Hotfix Accumulators
(Bundles), Upgrade to a Minor Version, Upgrade to a Major Version) on multiple managed Security Gateways and
Cluster Members at the same time.
Reference: https://community.checkpoint.com/thread/5319-my-top-3-check-point-cli-commands
Question: 64
The Firewall kernel is replicated multiple times, therefore:
A. The Firewall kernel only touches the packet if the connection is accelerated
B. The Firewall can run different policies per core
C. The Firewall kernel is replicated only with new connections and deletes itself once the connection times out
D. The Firewall can run the same policy on all cores
Answer: D
Explanation:
On a Security Gateway with CoreXL enabled, the Firewall kernel is replicated multiple times. Each replicated copy, or
instance, runs on one processing core. These instances handle traffic concurrently, and each instance is a complete and
independent inspection kernel. When CoreXL is enabled, all the kernel instances in the Security Gateway process
traffic through the same interfaces and apply the same security policy.
Reference: https://sc1.checkpoint.com/documents/R77/CP_R77_PerformanceTuning_WebAdmin/6731.htm
Question: 65
Sticky Decision Function (SDF) is required to prevent which of the following? Assume you set up an Active-Active
cluster.
A. Symmetric routing
B. Failovers
C. Asymmetric routing
D. Anti-Spoofing
Answer: C
Question: 66
Which is not a blade option when configuring SmartEvent?
A. Correlation Unit
B. SmartEvent Unit
C. SmartEvent Server
D. Log Server
Answer: B
Explanation:
On the Management tab, enable these Software Blades:
- Logging & Status
- SmartEvent Server
- SmartEvent Correlation Unit
Reference: https://sc1.checkpoint.com/documents/R80/CP_R80_LoggingAndMonitoring/ html_frameset.htm?
topic=documents/R80/CP_R80_LoggingAndMonitoring/120829
Question: 67
What command would show the API server status?
A. cpm status
B. api restart
C. api status
D. show api status
Answer: C
Explanation:
Reference: https://www.hurricanelabs.com/blog/check-point-api-merging-management-servers-with-r80-10

User: Shahid nazir***** Choosing to train our brains is just as important as picking out our daily outfits. We need to find ways to develop our cognitive abilities in the same way we cultivate our surroundings. To achieve our goals in life, we must strive to understand and harness our full potential. Thats precisely what I did by using Killexams.com to achieve a high score in my 156-915.80.10 exam. It proved to be an excellent and effective tool that allowed me to excel and feel more relaxed.

User: Logan***** The coaching kit provided by Killexams.com was very beneficial throughout my exam preparation. I am not a great test-taker and may go blank on exams, especially if it is the 156-915.80.10 exam, where time is your enemy. I had the experience of failing IT tests in the past and preferred to avoid it at all costs, so I bought this package. It helped me pass with a score of 100%. It had everything I needed to know, and because I had spent countless hours analyzing, cramming, and making notes, I had no trouble passing the exam with the highest score possible.

User: Betty***** Passing the 156-915.80.10 exam was not an easy task as there were many difficult topics to cover. However, using Killexams.com as a study guide helped boost my confidence in passing the exam. Despite the twisted questions, the answers provided by Killexams.com were helpful in marking the right answers.

User: Santino***** If you want valid 156-915.80.10 education on how it works and what the tests are, then do not waste your time and choose Killexams.com as the final source of assistance. I sought 156-915.80.10 education, and I opted for this great exam simulator, which provided me with the best questions and answers I have ever seen. The study publications were also very helpful.

User: Jack***** I had never before used such an incredible study material for my preparation, but the material provided by killexams.com proved to be a great asset for my 156-915.80.10 exam. The content is flexible and user-friendly, and I was able to use it to improve my skills significantly. Although I was an average candidate, I passed the exam without any trouble, thanks to the thorough studying I did with killexams.com. I plan to continue using their products for my future tests as well, and I scored an impressive 98% in my 156-915.80.10 exam.

---