QUESTION: 45 Exam Topic: 1, Exam Pool A

In a Client to Server scenario, which inspection point is the first point immediately following the tables and rule base check of a packet coming from outside of the network?

Big l
Little o
Little i
Big O

Answer(s): A

Explanation:

The inspection point Big l is the first point immediately following the tables and rule base check of a packet coming from outside of the network. It is also the last point before the packet leaves the Security Gateway to the internal network1. The other inspection points are either before or after the rule base check, or in a different direction of traffic flow2.

Reference:

Check Point R81 Security Gateway Architecture and Packet Flow, 156-315.81 Checkpoint Exam Info and Free Practice Test - ExamTopics

Reveal Solution Next Question

QUESTION: 46 Exam Topic: 1, Exam Pool A

What is the mechanism behind Threat Extraction?

This a new mechanism which extracts malicious files from a document to use it as a counter-attack against its sender.
This is a new mechanism which is able to collect malicious files out of any kind of file types to destroy it prior to sending it to the intended recipient.
This is a new mechanism to identify the IP address of the sender of malicious codes and put it into the SAM database (Suspicious Activity Monitoring).
Any active contents of a document, such as JavaScripts, macros and links will be removed from the document and forwarded to the intended recipient, which makes this solution very fast.

Answer(s): D

Explanation:

Threat Extraction is a technology that removes potentially malicious features that are known to be risky from files (macros, embedded objects and more), rather than determining their maliciousness. By cleaning the file before it enters the organization, Threat Extraction preemptively prevents both known and unknown threats, providing better protection against zero-day attacks1. Any active contents of a document, such as JavaScripts, macros and links will be removed from the document and forwarded to the intended recipient, which makes this solution very fast2. The other options are either incorrect or irrelevant to the mechanism behind Threat Extraction.

Reference:

Threat Extraction (CDR) - Check Point Software, Check Point Document Threat Extraction Technology

Reveal Solution Next Question

QUESTION: 47 Exam Topic: 1, Exam Pool A

You want to gather and analyze threats to your mobile device. It has to be a lightweight app.
Which application would you use?

SmartEvent Client Info
SecuRemote
Check Point Protect
Check Point Capsule Cloud

Answer(s): C

Explanation:

Check Point Protect is a lightweight app that can be used to gather and analyze threats to your mobile device. It provides real-time threat intelligence, device posture assessment, and secure browsing protection3. The other applications are either not designed for mobile devices, or do not offer threat analysis features.

Reference:

R81 CCSA & CCSE exams released featuring Promo for... -

Check Point ..., Check Point Protect - Apps on Google Play

Reveal Solution Next Question

QUESTION: 48 Exam Topic: 1, Exam Pool A

Which view is NOT a valid CPVIEW view?

Answer(s): C

Explanation:

PDP is not a valid CPVIEW view. CPVIEW is a command-line tool that shows the status of different system parameters, such as CPU, memory, disk, network, and firewall. The valid views are IDA, RAD, VPN, FW, QoS, and others. PDP is a process that handles identity awareness and authentication.

Reference:

Check Point R81 Gaia Administration Guide, Check Point Identity Awareness Administration Guide R81

Reveal Solution Next Question

Free 156-315.81 Exam Braindumps (page: 12)

QUESTION: 45 Exam Topic: 1, Exam Pool A

Explanation:

Reference:

QUESTION: 46 Exam Topic: 1, Exam Pool A

Explanation:

Reference:

QUESTION: 47 Exam Topic: 1, Exam Pool A

Explanation:

Reference:

QUESTION: 48 Exam Topic: 1, Exam Pool A

Explanation:

Reference: