QUESTION: 101

SmartEvent has several components that function together to track security threats. What is the function of the Correlation Unit as a component of this architecture?

Analyzes each log entry as it arrives at the log server according to the Event Policy. When a threat pattern is identified, an event is forwarded to the SmartEvent Server.
Correlates all the identified threats with the consolidation policy.
Collects syslog data from third party devices and saves them to the database.
Connects with the SmartEvent Client when generating threat reports.

Answer(s): A

Reveal Solution Next Question

QUESTION: 102

SecureXL improves non-encrypted firewall traffic throughput and encrypted VPN traffic throughput.

This statement is true because SecureXL does improve all traffic.
This statement is false because SecureXL does not improve this traffic but CoreXL does.
This statement is true because SecureXL does improve this traffic.
This statement is false because encrypted traffic cannot be inspected.

Answer(s): C

Explanation:

SecureXL improved non-encrypted firewall traffic throughput, and encrypted VPN traffic throughput, by nearly an order-of-magnitude- particularly for small packets flowing in long duration connections.

Reference:

https://downloads.checkpoint.com/fileserver/SOURCE/direct/ID/10001/FILE/SecureXL_and_Nokia_IPSO_White_Paper_20080401.pdf

Reveal Solution Next Question

QUESTION: 103

Which command gives us a perspective of the number of kernel tables?

fw tab -t
fw tab -s
fw tab -n
fw tab -k

Answer(s): B

Reveal Solution Next Question

QUESTION: 104

When simulating a problem on ClusterXL cluster with cphaprob –d STOP -s problem -t 0 register, to initiate a failover on an active cluster member, what command allows you remove the problematic state?

cphaprob –d STOP unregister
cphaprob STOP unregister
cphaprob unregister STOP
cphaprob –d unregister STOP

Answer(s): A

Explanation:

esting a failover in a controlled manner using following command;
# cphaprob -d STOP -s problem -t 0 register
This will register a problem state on the cluster member this was entered on; If you then run;
# cphaprob list
this will show an entry named STOP.
to remove this problematic register run following;
# cphaprob -d STOP unregister

Reference:

https://fwknowledge.wordpress.com/2013/04/04/manual-failover-of-the-fw-cluster/

Reveal Solution Next Question

Free 156-315.80 Exam Braindumps (page: 26)

QUESTION: 101

QUESTION: 102

Explanation:

Reference:

QUESTION: 103

QUESTION: 104

Explanation:

Reference: