Is this exam completely free?

ExamCademy offers a free preview for every exam, covering around 20% of the total questions. Full access to all questions is available for free by signing up for an account. Optional supporters unlock AstroTutor (AI tutor) and advanced study modes.

Can I practice IT certification exams from Microsoft, AWS, or CompTIA?

Yes! ExamCademy supports a wide range of IT certification exams including Microsoft Azure, AWS Cloud Practitioner, and CompTIA A+ and Security+.

How accurate are the mock exams?

Our practice questions are community-created and moderator-reviewed to align with realistic exam objectives, style, and difficulty.

156-315-81 by Checkpoint - Page 1 | ExamCademy

Mode Selection

Question 1

Question 2

Question 3

Can multiple administrators connect to a Security Management Server at the same time?

A Yes, all administrators can modify a network object at the same time.
B No, only one can be connected.
C Yes, every administrator has their own username, and works in a session that is independent of other administrators.
D Yes, but only one has the right to write.

Question 4

What are the correct steps upgrading a HA cluster (M1 is active, M2 is passive) using Multi-Version Cluster(MVC)Upgrade?

A
1. Enable the MVC mechanism on both cluster members #cphaprob mvc on2) Upgrade the passive node M2 to R81.103) In SmartConsole, change the version of the cluster object4) Install the Access Control Policy and make sure that the installation will not stop if installation on one cluster member fails5) After examine the cluster states upgrade node M1 to R81.106) On each Cluster Member, disable the MVC mechanism
B
1. Enable the MVC mechanism on both cluster members #cphaprob mvc on2) Upgrade the passive node M2 to R81.103) In SmartConsole, change the version of the cluster object4) Install the Access Control Policy5) After examine the cluster states upgrade node M1 to R81.106) On each Cluster Member, disable the MVC mechanism and Install the Access Control Policy
C
1. In SmartConsole, change the version of the cluster object2) Upgrade the passive node M2 to R81.103) Enable the MVC mechanism on the upgraded R81.10 Cluster Member M2 #cphaconf mvc on4) Install the Access Control Policy and make sure that the installation will not stop if installation on one cluster member fails5) After examine the cluster states upgrade node M1 to R81.106) On each Cluster Member, disable the MVC mechanism and Install the Access Control Policy SmartConsole, change the version of the cluster object
D
1. Upgrade the passive node M2 to R81.102) Enable the MVC mechanism on the upgraded R81.10 Cluster Member M2 #cphaconf mvc on3) In SmartConsole, change the version of the cluster object4) Install the Access Control Policy5) After examine the cluster states upgrade node M1 to R81.106) On each Cluster Member, disable the MVC mechanism and Install the Access Control Policy upgrade the passive node M2 to R81.10

Question 5

To increase security, the administrator has modified the Core protection 'Host Port Scan' from 'Medium' to 'High' Predefined Sensitivity. Which Policy should the administrator install after Publishing the changes?

A The Access Control and Threat Prevention Policies.
B The Access Control Policy.
C The Access Control & HTTPS Inspection Policy.
D The Threat Prevention Policy.

Question 6

Hit Count is a feature to track the number of connections that each rule matches, which one is not a benefit of Hit Count.

A Better understand the behavior of the Access Control Policy
B Improve Firewall performance - You can move a rule that has a high hit count to a higher position in the Rule Base
C Automatically rearrange Access Control Policy based on Hit Count Analysis.
D Analyze a Rule Base - You can delete rules that have no matching connections

Question 7

Which command shows detailed information about VPN tunnels?

A vpn tu
B vpn tu tlist
C cat $FWDIR/conf/vpn.conf
D cpview

Question 8

Which statements below are CORRECT regarding Threat Prevention profiles in SmartConsole?

A You can assign only one profile per gateway and a profile can be assigned to one or more rules.
B You can assign only one profile per gateway and a profile can be assigned to one rule Only.
C You can assign multiple profiles per gateway and a profile can be assigned to one rule only.
D You can assign multiple profiles per gateway and a profile can be assigned to one or more rules.

Question 9

John is using Management HA. Which Security Management Server should he use for making changes?

A active SmartConsole
B Primary Log Server
C secondary Smartcenter
D connect virtual IP of Smartcenter HA

Question 10

The Check Point installation history feature in provides the following:

A View install changes and install specific version
B Policy Installation Date only
C Policy Installation Date, view install changes and install specific version
D View install changes

Question 11

After some changes in the firewall policy you run into some issues. You want to test if the policy from two weeks ago have the same issue. You don't want to lose the changes from the last weeks. What is the best way to do it?

A Use the Gaia WebUI to take a backup of the Gateway. In SmartConsole under Security Policies go to the Installation History view of the Gateway, select the policy version from two weeks ago and press the ‘Install specific version’ button.
B Use the Gaia WebUI to take a snapshot of management. In the In SmartConsole under Manage & Settings go to Sessions -> Revisions and select the revision from two weeks ago. Run the action ‘Revert to this revision...’ Restore the management snapshot.
C In SmartConsole under Manage & Settings go to Sessions -> Revisions and select the revision from two weeks ago. Run the action ‘Revert to this revision...’.
D In SmartConsole under Security Policies go to the Installation History view of the Gateway, select the policy version from two weeks ago and press the ‘Install specific version’ button.

Question 12

What is a possible command to delete all of the SSH connections of a gateway?

A fw sam -l dport 22
B fw ctl conntab -x -dport=22
C fw tab -t connections -x -e 00000016
D fwaccel dos config set dport ssh

Question 13

What command can you use to have cpinfo display all installed hotfixes?

A cpinfo -get hf
B cpinfo -hf
C cpinfo installed_jumbo
D cpinfo -y all

Question 14

How many versions, besides the destination version, are supported in a Multi-Version Cluster Upgrade?

A 4
B 3
C 1
D 2

Question 15

In CoreXL, the Firewall kernel is replicated multiple times. Each replicated copy or instance can perform the following:

A The Firewall can run different policies per core
B The Firewall can run the same policy on all cores
C The Firewall kernel is replicated only with new connections and deletes itself once the connection times out
D The Firewall kernel only touches the packet if the connection is accelerated

Question 16

What feature allows Remote-access VPN users to access resources across a site-to-site VPN tunnel?

A Network Access VPN Domain
B Remote Access VPN Switch
C Community Specific VPN Domain
D Mobile Access VPN Domain

Question 17

SSL Network Extender (SNX) is a thin SSL VPN on-demand client that is installed on the remote user's machine via the web browser. What are the two modes of SNX?

A Application and Client Service
B Network and Layers
C Virtual Adapter and Mobile App
D Network and Application

Question 18

In what way are SSL VPN and IPSec VPN different?

A SSL VPN is using HTTPS in addition to IKE, whereas IPSec VPN is clientless.
B SSL VPN adds an extra VPN header to the packet, IPSec VPN does not.
C IPSec VPN does not support authentication, SSL VPN does support this.
D IPSec VPN uses an additional virtual adapter; SSL VPN uses the client network adapter only.

Question 19

What are the two types of tests when using the Compliance blade?

A Policy-based tests and Global properties
B Global tests and Object-based tests
C Access Control policy analysis and Threat Prevention policy analysis
D Tests conducted based on the IoC XML file and analysis of SOLR documents

Question 20

What is false regarding a Management HA environment?

A Only one Management Server should be active, while any others be in standby mode.
B It is not necessary to establish SIC between the primary and secondary management server, since the latter gets the exact same copy of the management database from the prior.
C SmartConsole can connect to any management server in ReadOnly mode.
D Synchronization will occur automatically with each Publish event if the Standby servers are available.

Question 21

For Automatic Hide NAT rules created by the administrator what is a TRUE statement?

A Source Port Address Translation (PAT) is enabled by default.
B Automatic NAT rules are supported for Network objects only.
C Automatic NAT rules are supported for Host objects only.
D Source Port Address Translation (PAT) is disabled by default.

Question 22

In which scenario will an administrator need to manually define Proxy ARP?

A When they configure an "Automatic Static NAT" which translates to an IP address that does not belong to one of the firewall’s interfaces.
B When they configure an "Automatic Hide NAT" which translates to an IP address that does not belong to one of the firewall’s interfaces.
C When they configure a "Manual Static NAT" which translates to an IP address that does not belong to one of the firewall’s interfaces.
D When they configure a "Manual Hide NAT" which translates to an IP address that belongs to one of the firewall’s interfaces.

Question 23

Which of the following is NOT a component of Check Point Capsule?

A Capsule Cloud
B Capsule Docs
C Capsule Enterprise
D Capsule Workspace

Question 24

What command lists all interfaces using Multi-Queue?

A show multiqueue all
B cpmq set
C mq_mng --show
D show interface all

Question 25

What Factors preclude Secure XL Templating?

A Source Port Ranges/Encrypted Connections
B CoreXL
C Simple Groups
D ClusterXL in load sharing Mode

Page 1 of 13 • Questions 1-25 of 324

1 2 3 4 5

→

Know a question that should be here? Contribute to this exam

Rugged appliances are small appliances with ruggedized hardware and like Quantum Spark appliance they use which operating system?

A Centos Linux
B Gaia embedded.
C Gaia
D Red Hat Enterprise Linux version 5

Check Point Management (cpm) is the main management process in that it provides the architecture for a consolidated management console. It empowers the migration from legacy Client side logic to Server-side logic. The cpm process:

A Performs database tasks such as creating, deleting, and modifying objects and indexing logs
B Allows SmartConsole to communicate over TCP Port 19001
C Performs database tasks such as creating, deleting, and modifying objects and compiling policy.
D Allows SmartConsole to communicate over TCP Port 18190

156-315-81Preview