In what way is Secure Network Distributor (SND) a relevant feature of the Security Gateway?
Answer(s): C
The Secure Network Distributor (SND) is a feature of the Security Gateway that is used to distribute packets among Firewall instances . It improves the performance and scalability of the Firewall by utilizing multiple CPU cores. The other options are not related to SND.
[Check Point Security Gateway Architecture and Packet Flow], [Free Check Point CCSA Sample Questions and Study Guide]
Sticky Decision Function (SDF) is required to prevent which of the following? Assume you set up an Active-Active cluster.
Answer(s): B
The Sticky Decision Function (SDF) is required to prevent failovers in an Active-Active cluster. The SDF ensures that the same cluster member handles all connections that belong to a certain session. If the SDF is not enabled, different cluster members may handle different connections of the same session, which may cause a failover or a drop12.
ClusterXL Administration Guide R81, Check Point CCSA - R81: Practice Test & Explanation
What are the steps to configure the HTTPS Inspection Policy?
The steps to configure the HTTPS Inspection Policy are as follows34:Go to Manage & Settings > Blades > HTTPS Inspection > Policy. Click on New HTTPS Inspection Rule or select an existing rule and click on Edit Rule. Define the Source, Destination, and Action for the rule. The action can be either Inspect, Bypass, or Ask.Click on OK and then on Install Policy to apply the changes.
HTTPS Inspection R81 Administration Guide, Check Point CCSA - R81: Practice Test & Explanation
What is the difference between SSL VPN and IPSec VPN?
Answer(s): D
The difference between SSL VPN and IPSec VPN is that IPSec VPN requires installation of a resident VPN client and SSL VPN requires only an installed browser5 . IPSec VPN uses a pre-shared key or certificates to authenticate the endpoints and encrypts the data at the network layer. SSL VPN uses SSL/TLS protocols to authenticate the endpoints and encrypts the data at the application layer.
Check Point Remote Access VPN Administration Guide R81, [Free Check Point CCSA Sample Questions and Study Guide]
Which statement is NOT TRUE about Delta synchronization?
Answer(s): A
The statement that is not true about Delta synchronization is that it uses UDP Multicast or Broadcast on port 8161. The correct port number for Delta synchronization is 811612. The other statements are true about Delta synchronization.
Post your Comments and Discuss Checkpoint 156-215.81 exam prep with other Community members: