156-315.81 Practice Test

Which Check Point software blade provides visibility of users, groups and machines while also providing access control through identity-based policies?

A. Application Control

B. Firewall

C. Identity Awareness

D. URL Filtering

When a packet arrives at the gateway, the gateway checks it against the rules in the hop Policy Layer, sequentially from top to bottom, and enforces the first rule that matches a packet. Which of the following statements about the order of rule enforcement is true?

A. If the Action is Accept, the gateway allows the packet to pass through the gateway.

B. If the Action is Drop, the gateway continues to check rules in the next Policy Layer down.

C. If the Action is Accept, the gateway continues to check rules in the next Policy Layer down.

D. If the Action is Drop, the gateway applies the Implicit Clean-up Rule for that Policy Layer.

After replacing a faulty Gateway the admin installed the new Hardware and want to push the policy. Installing the policy using the SmartConsole he got an Error for the Threat Prevention Policy. There is no error for the Access Control Policy. What will be the most common cause for the issue?

A. The admin forgot to reestablish the SIC for the new hardware. That is typically the case when configure only the interfaces of the replacement hardware instead restoring a backup.

B. The IPS Protection engine on the replacement hardware is too old. Before pushing the Threat Prevention Policy use SmartConsole -> Security Policies -> Updates -> IPS 'Update Now' to update the engine.

C. The admin forgot to apply the new license. The Access Control license is included by default but the service subscriptions for the Threat Prevention Blades are missing.

D. The Threat Prevention Policy can't be installed on a Gateway without an already installed Access Control Policy. First install only the Access Control Policy.

What is "Accelerated Policy Installation"?

A. Starting R81, the Desktop Security Policy installation process is accelerated thereby reducing the duration of the process significantly

B. Starting R81, the QoS Policy installation process is accelerated thereby reducing the duration of the process significantly

C. Starting R81, the Access Control Policy installation process is accelerated thereby reducing the duration of the process significantly

D. Starting R81, the Threat Prevention Policy installation process is accelerated thereby reducing the duration of the process significantly

Which command is used to obtain the configuration lock in Gaia?

A. Lock database override

B. Unlock database override

C. Unlock database lock

D. Lock database user