Check Point Certified Security Expert R71: 156-315.71 Exam
156-315.71 Questions & Answers
Exam Code: 156-315.71
Exam Name: Check Point Certified Security Expert R71
Q & A: 491 Q&As
QUESTION 1
Which of the following is NOT a feature of ClusterXL?
A. Enhanced throughput in all ClusterXL modes (2 gateway cluster compared with 1 gateway)
B. Transparent failover in case of device failures
C. Zero downtime for mission-critical environments with State Synchronization
D. Transparent upgrades
Answer: C
QUESTION 2
Which of the following manages Standard Reports and allows the administrator to specify
automatic uploads of reports to a central FTP server?
A. Smart Dashboard Log Consolidator
B. Security Management Server
C. Smart Reporter Database
D. Smart Reporter
Answer: D
QUESTION 3
What is a task of the SmartEvent Correlation Unit?
A. Add events to the events database.
B. Look for patterns according to the installed Event Policy.
C. Assign a severity level to an event
D. Display the received events.
Answer: B
QUESTION 4
Based on the following information, which of the statements below is FALSE?
A DLP Rule Base has the following conditions:
Data Type =Password Protected File
Source=My Organization
Destination=Outside My Organization
Protocol=Any
Action=Ask User
Exception: Data Type=Any,
Source=Research and Development (R&D)
Destination=Pratner1.com
Protocol=Any
All other rules are set to Detect. UserCheck is enabled and installed on all client machines.
A. When a user from R&D sends an e-mail with a password protected PDF file as an attachment to
xyz@partner1 .com, he will be prompted by UserCheck.
B. When a user from Finance sends an e-mail with an encrypted ZIP file as an attachment to. He
will be prompted by UserCheck.
C. Another rule is added: Source = R&D, Destination = partner1.com, Protocol = Any, Action = Inform.
When a user from R&D sends an e-mail with an encrypted ZIP file as an attachment to, he will be
prompted by UserCheck.
D. When a user from R&D sends an e-mail with an encrypted ZIP file as an attachment to , he will NOT
be prompted by UserCheck.
Answer: B
QUESTION 5
A VPN Tunnel Interface (VTI) is defined on SecurePlatform Pro as:
vpn shell interface add numbered 10.10.0.1 10.10.0.2 “madrid.cp”.
What do you know about this VTI?
A. The peer Security Gateway’s name is “madrid.cp”.
B. The local Gateway’s object name is “madrid.cp”.
C. The VTI name is “madrid.cp”.
D. 10.10.0.1 is the local Gateway’s internal interface, and 10.10.0.2 is the internal interface Gateway.
Answer: A
QUESTION 6
You use the snapshot feature to store your Connectra SSL VPN configuration. What do you
expect to find?
A. Nothing; snapshot is not supported in Connectra SSL VPN.
B. The management configuration of the current product, on a management or stand-alone machine
C. A complete image of the local file system
D. Specified directories of the local file system.
Answer: C
QUESTION 7
When running DLP Wizard for the first time, which of the following is a mandatory configuration?
A. Mail Server
B. E-mail Domain in My Organization
C. DLP Portal URL
D. Active Directory
Answer: B
QUESTION 8
When using Connectra with Endpoint Security Policies, what option is not available when
configuring DAT enforcement?
A. Maximum DAT file version
B. Maximum DAT file age
C. Minimum DAT file version
D. Oldest DAT file timestamp
Answer: A
QUESTION 9
Which specific R71 GUI would you use to view the length of time a TCP connection was open?
A. SmartReporter
B. SmartView Monitor
C. SmartView Status
D. SmartView Tracker
Answer: D
QUESTION 10
What is not available for Express Reports compared to Standard Reports?
A. Filter
B. Period
C. Content
D. Schedule
Answer: A
QUESTION 11
Based on the following information, which of the statements below is TRUE?
A DLP Rule Base has the following conditions:
Data Type = Large file (> 500KB)
Source = My Organization
Destination = Free Web Mails
Protocol = Any
Action = Ask User
All other rules are set to Detect. UserCheck is enabled and installed on all client machines.
A. When a user uploads a 600 KB file to his Yahoo account via Web Mail (via his browser), he will
be prompted by UserCheck
B. When a user sends an e-mail with a small body and 5 attachments, each of 200 KB to, he will
be prompted by UserCheck.
C. When a user sends an e-mail with an attachment larger than 500 KB to, he will be prompted by
UserCheck.
D. When a user sends an e-mail with an attachment larger than 500KB to, he will be prompted by
UserCheck.
Answer: A
QUESTION 12
If Bob wanted to create a Management High Availability configuration, what is the minimum number of Security Management servers required in order to achieve his goal?
A. Three
B. Two
C. Four
D. One
Answer: D
QUESTION 13
Which of the following statements is FALSE about the DLP Software Blade and Active Directory
(AD) or LDAP?
A. When a user authenticates in the DLP Portal to view all his unhandled incidents, the portal authenticates
the user using only AD/LDAP.
B. Check Point UserCheck client authentication is based on AD.
C. For SMTP traffic, each recipient e-mail address is translated using AD/LDAP to a user name and group
that is checked vs. the destination column of the DLP rule base.
D. For SMTP traffic, the sender e-mail address is translated using AD/LDAP to a user name and group that
is checked vs. the source column of the DLP rule base.
Answer: A
QUESTION 14
You are running R71 and using the new IPS Software Blade. To maintain the highest level of
security, you are doing IPS updates regularly. What kind of problems can be caused by the
automatic updates?
A. None; updates will not add any new security checks causing problematic behaviour on the systems.
B. None, all new updates will be implemented in Detect only mode to avoid unwanted trafficinterruptions.
They have to be activated manually later.
C. None, all the checks will be activated from the beginning, but will only detect attacks and not disturb any
non-malicious traffic in the network.
D. All checks will be activated from the beginning and might cause unwanted traffic outage due to false
positives of the new checks and non-RFC compliant self-written applications.
Answer: B
QUESTION 15
Which of the following deployment scenarios CANNOT be managed by Check Point QoS?
A. Two lines connected to a single router, and the router is connected directly to the Gateway
B. Two lines connected to separate routers, and each router is connected to separate interfaces on
the Gateway
C. One LAN line and one DMZ line connected to separate Gateway interfaces
D. Two lines connected directly to the Gateway through a hub
Answer: A
…go to http://www.lead2pass.com/156-315-71.html to download the lastest full version.
