Go Back on 156-315.81 Exam
Available in 1, 3, 6 and 12 Months Free Updates Plans
PDF: $15 $60

Test Engine: $20 $80

PDF + Engine: $25 $99

156-315.81 Practice Test


Page 20 out of 85 Pages

Kurt is planning to upgrade his Security Management Server to R81.X. What is the lowest supported version of the Security Management he can upgrade from?


A. R76 Splat


B. R77.X Gaia


C. R75 Splat


D. R75 Gaia





D.
  R75 Gaia

Explanation: The lowest supported version of the Security Management that can be upgraded to R81.X is R75 Gaia. This means that the Security Management Server must be running on the Gaia Operating System and have a version of R75 or higher. R76 Splat, R77.X Gaia, and R75 Splat are not supported for upgrading to R81.X1. References: 1: Check Point Software, Getting Started, Supported Upgrade Paths.

Is it possible to establish a VPN before the user login to the Endpoint Client?


A. yes, you had to set neo_remember_user_password to true in the trac.defaults of the Remote Access Client or you can use the endpoint_vpn_remember_user_password attribute in the trac_client_1 .ttm file located in the SFWDIR/conf directory on the Security Gateway


B. no, the user must login first.


C. yes. you had to set neo_always_connected to true in the trac.defaults of the Remote Access Client or you can use the endpoint_vpn_always_connected attribute in the trac_client_1 .ttm file located in the SFWDIR/conf directory on the Security Gateway


D. yes, you had to enable Machine Authentication in the Gateway object of the Smart Console





D.
  yes, you had to enable Machine Authentication in the Gateway object of the Smart Console

Which feature is NOT provided by all Check Point Mobile Access solutions?


A. Support for IPv6


B. Granular access control


C. Strong user authentication


D. Secure connectivity





A.
  Support for IPv6

Explanation: The feature that is not provided by all Check Point Mobile Access solutions is support for IPv6. Check Point Mobile Access is a comprehensive solution that provides secure remote access to corporate applications and resources using various methods, such as SSL VPN, IPsec VPN, clientless VPN, and mobile VPN. However, not all of these methods support IPv6, which is the latest version of the Internet Protocol that uses 128-bit addresses. According to the Check Point Mobile Access R81 Administration Guide1, only the following Mobile Access methods support IPv6:
SSL Network Extender (SNX) - a thin client that enables remote users to connect securely to the corporate network using SSL/TLS VPN.
Mobile VPN - a full VPN client that enables remote users to connect securely to the corporate network using IPsec VPN.
Capsule Connect - a mobile VPN app for iOS and Android devices that enables remote users to connect securely to the corporate network using IPsec VPN.
The following Mobile Access methods do not support IPv6:
Clientless VPN - a web-based method that enables remote users to access web applications and services using a web browser without installing any software on their devices.
Endpoint Security VPN - a full VPN client that enables remote users to connect securely to the corporate network using IPsec VPN and also provides endpoint security features such as firewall, anti-virus, anti-malware, etc.
Capsule Workspace - a mobile app for iOS and Android devices that enables remote users to access email, calendar, contacts, and corporate applications securely without requiring a VPN connection.

Which one is not a valid Package Option In the Web GUI for CPUSE?


A. Clean Install


B. Export Package


C. Upgrade


D. Database Conversion to R81.20 only





B.
  Export Package

Explanation: CPUSE (Check Point Upgrade Service Engine) is a tool that allows users to download, import, install, and uninstall software packages on Gaia OS. CPUSE has a web-based user interface that can be accessed through Gaia Portal. CPUSE offers four package options in the web GUI for different purposes4:
Clean Install - This option performs a clean installation of a Major Version package, which erases all existing configuration and data on the system.
Export Package - This option exports a package from CPUSE repository to an external location for backup or transfer purposes.
Upgrade - This option performs an upgrade of a Major Version package or a Minor Version package, which preserves the existing configuration and data on the system. Database Conversion - This option converts the database schema of a Major Version package to match the current version.
Therefore, the correct answer is B.

Which statement is WRONG regarding the usage of the Central Deployment in SmartConsole?


A. You can install Hotfixes with the Central Deployment in SmartConsole


B. You can install Jumbo Hotfix accumulators with the Central Deployment in SmartConsole.


C. Only be installed Hotfixes can with the Central Deployment in SmartConsole


D. You can upgrade your cluster without user intervention with the Central Deployment in SmartConsole from R80.40 to R81.20.





C.
  Only be installed Hotfixes can with the Central Deployment in SmartConsole

Explanation: The statement that is wrong regarding the usage of the Central Deployment in SmartConsole is that only be installed Hotfixes can with the Central Deployment in SmartConsole. This is wrong because Central Deployment can also be used to install Jumbo Hotfix accumulators, upgrade clusters, and perform other operations on multiple gateways simultaneously. Central Deployment simplifies and automates the deployment process and reduces human errors and downtime. References: [Check Point Security Expert R81 Administration Guide], page 23.


Page 20 out of 85 Pages
Previous