Download Checkpoint.156-915.80.PracticeTest.2019-04-01.105q.tqb
| Vendor: | Checkpoint |
| Exam Code: | 156-915.80 |
| Exam Name: | CCSE Update R80 |
| Date: | Apr 01, 2019 |
| File Size: | 394 KB |
Demo Questions
Question 1
What is the port used for SmartConsole to connect to the Security Management Server:
- CPMI port 18191/TCP
- CPM port / TCP port 19009
- SIC port 18191/TCP
- https port 4434/TCP
Correct answer: A
Question 2
Which is the correct order of a log flow processed by SmartEvents components:
- Firewall > Correlation Unit > Log Server > SmartEvent Server Database > SmartEvent Client
- Firewall > SmartEvent Server Database > Correlation unit > Log Server > SmartEvent Client
- Firewall > Log Server > SmartEvent Server Database > Correlation Unit > SmartEvent Client
- Firewall > Log Server > Correlation Unit > SmartEvent Server Database > SmartEvent Client
Correct answer: D
Explanation:
Question 3
In SmartEvent, what are the different types of automatic reactions that the administrator can configure?
- Mail, Block Source, Block Event Activity, External Script, SNMP Trap
- Mail, Block Source, Block Destination, Block Services, SNMP Trap
- Mail, Block Source, Block Destination, External Script, SNMP Trap
- Mail, Block Source, Block Event Activity, Packet Capture, SNMP Trap
Correct answer: A
Explanation:
These are the types of Automatic Reactions:Mail - tell an administrator by email that the event occurred. See Create a Mail Reaction. Block Source - instruct the Security Gateway to block the source IP address from which this event was detected for a configurable period of time . Select a period of time from one minute to more than three weeks. See Create a Block Source Reaction Block Event activity - instruct the Security Gateway to block a distributed attack that emanates from multiple sources, or attacks multiple destinations for a configurable period of time. Select a period of time from one minute to more than three weeks). See Create a Block Event Activity Reaction. External Script - run a script that you provide. See Creating an External Script Automatic Reaction to write a script that can exploit SmartEvent data. SNMP Trap - generate an SNMP Trap. See Create an SNMP Trap Reaction. Reference: https://sc1.checkpoint.com/documents/R80/CP_R80_LoggingAndMonitoring/html_frameset.htm?topic=documents/R80/CP_R80_LoggingAndMonitoring/131915 These are the types of Automatic Reactions:
- Mail - tell an administrator by email that the event occurred. See Create a Mail Reaction.
- Block Source - instruct the Security Gateway to block the source IP address from which this event was detected for a configurable period of time . Select aperiod of time from one minute to more than three weeks. See Create a Block Source Reaction
- Block Event activity - instruct the Security Gateway to block a distributed attack that emanates from multiple sources, or attacks multiple destinations for aconfigurable period of time. Select a period of time from one minute to more than three weeks). See Create a Block Event Activity Reaction.
- External Script - run a script that you provide. See Creating an External Script Automatic Reaction to write a script that can exploit SmartEvent data.
- SNMP Trap - generate an SNMP Trap. See Create an SNMP Trap Reaction.
Reference: https://sc1.checkpoint.com/documents/R80/CP_R80_LoggingAndMonitoring/html_frameset.htm?topic=documents/R80/
CP_R80_LoggingAndMonitoring/131915
