Free 156-315.80 Exam Braindumps
Check Point Certified Security Expert - R80 Questions 101–105 (page: 22)

Updated On: 10-Feb-2026

SmartEvent has several components that function together to track security threats.
What is the function of the Correlation Unit as a component of this architecture?

  1. Analyzes each log entry as it arrives at the log server according to the Event Policy.
    When a threat pattern is identified, an event is forwarded to the SmartEvent Server.
  2. Correlates all the identified threats with the consolidation policy.
  3. Collects syslog data from third party devices and saves them to the database.
  4. Connects with the SmartEvent Client when generating threat reports.

Answer(s): A



SecureXL improves non-encrypted firewall traffic throughput and encrypted VPN traffic throughput.

  1. This statement is true because SecureXL does improve all traffic.
  2. This statement is false because SecureXL does not improve this traffic but CoreXL does.
  3. This statement is true because SecureXL does improve this traffic.
  4. This statement is false because encrypted traffic cannot be inspected.

Answer(s): C

Explanation:

SecureXL improved non-encrypted firewall traffic throughput, and encrypted VPN traffic throughput, by nearly an order-of-magnitude- particularly for small packets flowing in long duration connections.



Which command gives us a perspective of the number of kernel tables?

  1. fw tab -t
  2. fw tab -s
  3. fw tab -n
  4. fw tab -k

Answer(s): B



When simulating a problem on ClusterXL cluster with cphaprob ­d STOP -s problem -t 0 register, to initiate a failover on an active cluster member, what command allows you remove the problematic state?

  1. cphaprob ­d STOP unregister
  2. cphaprob STOP unregister
  3. cphaprob unregister STOP
  4. cphaprob ­d unregister STOP

Answer(s): A

Explanation:

esting a failover in a controlled manner using following command; # cphaprob -d STOP -s problem -t 0 register
This will register a problem state on the cluster member this was entered on; If you then run; # cphaprob list this will show an entry named STOP.
to remove this problematic register run following;
# cphaprob -d STOP unregister



How would you deploy TE250X Check Point appliance just for email traffic and in-line mode without a Check Point Security Gateway?

  1. Install appliance TE250X on SpanPort on LAN switch in MTA mode.
  2. Install appliance TE250X in standalone mode and setup MTA.
  3. You can utilize only Check Point Cloud Services for this scenario.
  4. It is not possible, always Check Point SGW is needed to forward emails to SandBlast appliance.

Answer(s): C



Viewing page 22 of 94
Viewing questions 106 - 110 out of 479 questions


Post your Comments and Discuss Checkpoint 156-315.80 exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!