QUESTION: 41

What happen when IPS profile is set in Detect Only Mode for troubleshooting?

It will generate Geo-Protection traffic
Automatically uploads debugging logs to Check Point Support Center
It will not block malicious traffic
Bypass licenses requirement for Geo-Protection control

Answer(s): C

Explanation:

It is recommended to enable Detect-Only for Troubleshooting on the profile during the initial installation of IPS. This option overrides any protections that are set to Prevent so that they will not block any traffic.
During this time you can analyze the alerts that IPS generates to see how IPS will handle network traffic, while avoiding any impact on the flow of traffic.

Reference:

https://sc1.checkpoint.com/documents/R76/CP_R76_IPS_AdminGuide/12750.htm

Reveal Solution Next Question

QUESTION: 42

What is true about VRRP implementations?

VRRP membership is enabled in cpconfig
VRRP can be used together with ClusterXL, but with degraded performance
You cannot have a standalone deployment
You cannot have different VRIDs in the same physical network

Answer(s): C

Reference:

https://sc1.checkpoint.com/documents/R76/CP_R76_Gaia_WebAdmin/87911.htm

Reveal Solution Next Question

QUESTION: 43

The Security Gateway is installed on GAIA R80. The default port for the Web User Interface is ____________.

TCP 18211
TCP 257
TCP 4433
TCP 443

Answer(s): D

Reveal Solution Next Question

QUESTION: 44

Fill in the blank: The R80 feature _________ permits blocking specific IP addresses for a specified time period.

Block Port Overflow
Local Interface Spoofing
Suspicious Activity Monitoring
Adaptive Threat Prevention

Answer(s): C

Explanation:

Suspicious Activity Rules Solution
Suspicious Activity Rules is a utility integrated into SmartView Monitor that is used to modify access privileges upon detection of any suspicious network activity (for example, several attempts to gain unauthorized access). The detection of suspicious activity is based on the creation of Suspicious Activity rules. Suspicious Activity rules are Firewall rules that enable the system administrator to instantly block suspicious connections that are not restricted by the currently enforced security policy. These rules, once set (usually with an expiration date), can be applied immediately without the need to perform an Install Policy operation.

Reference:

https://sc1.checkpoint.com/documents/R76/CP_R76_SmartViewMonitor_AdminGuide/17670.htm

Reveal Solution Next Question

Free 156-315.80 Exam Braindumps (page: 11)

QUESTION: 41

Explanation:

Reference:

QUESTION: 42

Reference:

QUESTION: 43

QUESTION: 44

Explanation:

Reference: