Download Checkpoint.156-915.80.Train4Sure.2019-04-08.103q.tqb
| Vendor: | Checkpoint |
| Exam Code: | 156-915.80 |
| Exam Name: | CCSE Update R80 |
| Date: | Apr 08, 2019 |
| File Size: | 359 KB |
Demo Questions
Question 1
Which is the correct order of a log flow processed by SmartEvents components:
- Firewall > Correlation Unit > Log Server > SmartEvent Server Database > SmartEvent Client
- Firewall > SmartEvent Server Database > Correlation unit > Log Server > SmartEvent Client
- Firewall > Log Server > SmartEvent Server Database > Correlation Unit > SmartEvent Client
- Firewall > Log Server > Correlation Unit > SmartEvent Server Database > SmartEvent Client
Correct answer: D
Question 2
In SmartEvent, what are the different types of automatic reactions that the administrator can configure?
- Mail, Block Source, Block Event Activity, External Script, SNMP Trap
- Mail, Block Source, Block Destination, Block Services, SNMP Trap
- Mail, Block Source, Block Destination, External Script, SNMP Trap
- Mail, Block Source, Block Event Activity, Packet Capture, SNMP Trap
Correct answer: A
Explanation:
These are the types of Automatic Reactions:Mail - tell an administrator by email that the event occurred. See Create a Mail Reaction. Block Source - instruct the Security Gateway to block the source IP address from which this event was detected for a configurable period of time . Select a period of time from one minute to more than three weeks. See Create a Block Source Reaction Block Event activity - instruct the Security Gateway to block a distributed attack that emanates from multiple sources, or attacks multiple destinations for a configurable period of time. Select a period of time from one minute to more than three weeks). See Create a Block Event Activity Reaction. External Script - run a script that you provide. See Creating an External Script Automatic Reaction to write a script that can exploit SmartEvent data. SNMP Trap - generate an SNMP Trap. See Create an SNMP Trap Reaction. Reference: https://sc1.checkpoint.com/documents/R80/CP_R80_LoggingAndMonitoring/html_frameset.htm?topic=documents/R80/CP_R80_LoggingAndMonitoring/131915 These are the types of Automatic Reactions:
- Mail - tell an administrator by email that the event occurred. See Create a Mail Reaction.
- Block Source - instruct the Security Gateway to block the source IP address from which this event was detected for a configurable period of time . Select a period of time from one minute to more than three weeks. See Create a Block Source Reaction
- Block Event activity - instruct the Security Gateway to block a distributed attack that emanates from multiple sources, or attacks multiple destinations for a configurable period of time. Select a period of time from one minute to more than three weeks). See Create a Block Event Activity Reaction.
- External Script - run a script that you provide. See Creating an External Script Automatic Reaction to write a script that can exploit SmartEvent data.
- SNMP Trap - generate an SNMP Trap. See Create an SNMP Trap Reaction.
Reference: https://sc1.checkpoint.com/documents/R80/CP_R80_LoggingAndMonitoring/html_frameset.htm?topic=documents/R80/CP_R80_LoggingAndMonitoring/131915
Question 3
Which components allow you to reset a VPN tunnel?
- vpn tu command or SmartView monitor
- delete vpn ike sa or vpn she11 command
- vpn tunnelutil or delete vpn ike sa command
- SmartView monitor only
Correct answer: D
