Important CheckPoint 156-315.81 Exam Questions

Answer: D

Explanation:

You can establish a VPN before the user login to the Endpoint Client by enabling Machine Authentication in the Gateway object of the Smart Console1.Machine Authentication is a feature that allows you to authenticate with a machine certificate and establish a VPN tunnel before the Windows Logon2.This feature provides the following benefits2:

It enhances the security of the VPN connection by verifying the identity of the machine before allowing access to the network.

It simplifies the user experience by eliminating the need to enter credentials twice (once for the VPN and once for the Windows Logon).

It enables seamless connectivity to the network resources and domain services, such as Group Policy, login scripts, and mapped drives. Machine Authentication is supported on Check Point Endpoint Security Client for Windows with E80.71 and higher versions2.It requires a hotfix on top of R77.30 jumbo 286 on the Security Gateway2.To configure Machine Authentication, you need to do the following steps2:

Generate and distribute machine certificates to the Endpoint machines using a trusted Certificate Authority (CA).

Enable Machine Authentication in the Gateway object of the Smart Console and select the CA that issued the machine certificates.

Install policy on the Security Gateway and reboot it.

Enable Machine Authentication in the Endpoint Security Client and select the machine certificate to use.

Answer: A

Explanation:

Mobile Access encrypts all traffic using HTTPS for web-based applications and 3DES or RC4 algorithm for native applications. For end users to access the native applications, they need to install the SSL Network Extender, which is a lightweight VPN client that creates a secure SSL tunnel to the Mobile Access gateway. The SSL Network Extender supports various types of native applications, such as email clients, file sharing, and remote desktop. Reference:Mobile Access Administration Guide,SSL Network Extender

Answer: C

Explanation:

According to the Check Point website, SmartUpdate is the application that should be used to install a contract file. A contract file contains information about the licenses and services that are purchased from Check Point. SmartUpdate can also be used to install software packages and patches on Security Gateways and Management Servers. The other applications are either not relevant or not capable of installing a contract file. Reference: SmartUpdate

Answer: C

Explanation:

The Event List within the Event tab containsevents generated by a query. The Event List shows the events that match the query criteria, such as time range, filter, and aggregation.The events can be sorted by different columns, such as severity, time, action, and source3. The other options are either not part of the Event tab or not related to the Event List. Reference:Check Point R81 Logging and Monitoring Administration Guide

Answer: C

Explanation:

From SecureXL perspective, the three paths of traffic flow are Firewall Path, Accelerated Path, and Medium Path. Firewall Path is the path that handles packets that are not processed by SecureXL and are sent to the Firewall kernel for inspection. Accelerated Path is the path that handles packets that are processed by SecureXL and bypass the Firewall kernel.Medium Path is the path that handles packets that are partially processed by SecureXL and partially by the Firewall kernel1. Reference:Check Point R81 Performance Tuning Administration Guide