Cisco
CompTIA
ISC
EC-Council
EXIN
Fortinet
ITIL
Juniper
Microsoft
VMware
Avaya
SAP
Google
NVIDIA
Salesforce
Amazon
Palo Alto Networks
ISC2
Splunk
ServiceNow
All Vendors
  2. Home
  3. Exams
  4. Checkpoint
  5. 156-315.81

Checkpoint 156-315.81 Exam Questions
Check Point Certified Security Expert R81 (Page 5 )

Updated On: 16-Feb-2026
Page 5 of 127
PDF with 628 Questions

To help SmartEvent determine whether events originated internally or externally you must define using the Initial Settings under General Settings in the Policy Tab. How many options are available to calculate the traffic direction?

  1. 5 Network; Host; Objects; Services; API
  2. 3 Incoming; Outgoing; Network
  3. 2 Internal; External
  4. 4 Incoming; Outgoing; Internal; Other

Answer(s): D

Explanation:

To help SmartEvent determine whether events originated internally or externally, you must define the traffic direction using the Initial Settings under General Settings in the Policy Tab. There are four options available to calculate the traffic direction: Incoming, Outgoing, Internal, and Other. Incoming means the source is external and the destination is internal. Outgoing means the source is internal and the destination is external. Internal means both the source and the destination are internal. Other means both the source and the destination are external.


Reference:

SmartEvent R81 Administration Guide



There are 4 ways to use the Management API for creating host object with R81 Management API.
Which one is NOT correct?

  1. Using Web Services
  2. Using Mgmt_cli tool
  3. Using CLISH
  4. Using SmartConsole GUI console
  5. Events are collected with SmartWorkflow from Trouble Ticket systems

Answer(s): E

Explanation:

There are four ways to use the Management API for creating host object with R81 Management API:
Using Web Services, Using mgmt_cli tool, Using CLISH, and Using SmartConsole GUI console. Events are collected with SmartWorkflow from Trouble Ticket systems is not a correct option.


Reference:

Check Point Management APIs



CoreXL is supported when one of the following features is enabled:

  1. Route-based VPN
  2. IPS
  3. IPv6
  4. Overlapping NAT

Answer(s): B

Explanation:

CoreXL is supported when one of the following features is enabled: IPS. CoreXL does not support Check Point Suite with these features: Route-based VPN, IPv6, Overlapping NAT, QoS, Content Awareness, Application Control, URL Filtering, Identity Awareness, HTTPS Inspection, DLP, Anti-Bot, Anti-Virus, Threat Emulation.


Reference:

CoreXL



You noticed that CPU cores on the Security Gateway are usually 100% utilized and many packets were dropped. You don't have a budget to perform a hardware upgrade at this time. To optimize drops you decide to use Priority Queues and fully enable Dynamic Dispatcher. How can you enable them?

  1. fw ctl multik dynamic_dispatching on
  2. fw ctl multik dynamic_dispatching set_mode 9
  3. fw ctl multik set_mode 9
  4. fw ctl multik pq enable

Answer(s): C

Explanation:

To optimize drops you decide to use Priority Queues and fully enable Dynamic Dispatcher. You can enable them by using the command fw ctl multik set_mode 9. This command sets the SecureXL mode to 9, which means that Priority Queues are enabled and Dynamic Dispatcher is fully enabled.


Reference:

SecureXL Mechanism



Check Point Management (cpm) is the main management process in that it provides the architecture for a consolidates management console. CPM allows the GUI client and management server to communicate via web services using ___________.

  1. TCP port 19009
  2. TCP Port 18190
  3. TCP Port 18191
  4. TCP Port 18209

Answer(s): A

Explanation:

Check Point Management (cpm) is the main management process that provides the architecture for a consolidated management console. CPM allows the GUI client and management server to communicate via web services using TCP port 19009 by default.


Reference:

CPM process






Post your Comments and Discuss Checkpoint 156-315.81 exam dumps with other Community members:

Join the 156-315.81 Discussion