DumpsCafe is a Premium Supplier of Real Exam Questions and Certification Exam Dumps. DumpsCafe.com is the ultimate choice for IT students to pass their final exams in a quick time.

1. Check Point Certified
Security Expert - R80
Version: Demo
[ Total Questions: 10]
Web: www.dumpscafe.com
Email: support@dumpscafe.com
Checkpoint
156-315.80

2. IMPORTANT NOTICE
Feedback
We have developed quality product and state-of-art service to ensure our customers interest. If you have any
suggestions, please feel free to contact us at feedback@dumpscafe.com
Support
If you have any questions about our product, please provide the following items:
exam code
screenshot of the question
login id/email
please contact us at and our technical experts will provide support within 24 hours.
support@dumpscafe.com
Copyright
The product of each order has its own encryption code, so you should use it independently. Any unauthorized
changes will inflict legal punishment. We reserve the right of final explanation for this statement.

3. Checkpoint - 156-315.80
Pass Exam
1 of 4
Verified Solution - 100% Result
A.
B.
C.
D.
A.
B.
C.
D.
A.
B.
C.
D.
Question #:1
Which of the following is NOT a type of Endpoint Identity Agent?
Terminal
Light
Full
Custom
Answer: A
Explanation
References:
Question #:2
When an encrypted packet is decrypted, where does this happen?
Security policy
Inbound chain
Outbound chain
Decryption is not supported
Answer: A
Question #:3
What is the valid range for Virtual Router Identifier (VRID) value in a Virtual Routing Redundancy Protocol
(VRRP) configuration?
1-254
1-255
0-254
0 – 255
Answer: B

4. Checkpoint - 156-315.80
Pass Exam
2 of 4
Verified Solution - 100% Result
A.
B.
C.
D.
A.
B.
C.
D.
A.
B.
C.
D.
Question #:4
O: 281
In terms of Order Rule Enforcement, when a packet arrives at the gateway, the gateway checks it against the
rules in the top Policy Layer, sequentially from top to bottom Which of the following statements is correct?
If the Action of the matching rule is Accept the gateway will drop the packet
If the Action of the matching rule is Drop, the gateway continues to check rules in the next Policy Layer
down
If the Action of the matching rule is Drop the gateway stops matching against later rules in the Policy
Rule Base and drops the packet
If the rule does not matched in the Network policy it will continue to other enabled polices
Answer: C
Explanation
https://sc1.checkpoint.com/documents/R80/CP_R80_SecMGMT/html_frameset.htm?topic=documents/R80/CP_R80_S
Question #:5
What statement best describes the Proxy ARP feature for Manual NAT in R80.10?
Automatic proxy ARP configuration can be enabled
Translate Destination on Client Side should be configured
fw ctl proxy should be configured
local.arp file must always be configured
Answer: D
Question #:6
Which one of these features is NOT associated with the Check Point URL Filtering and Application Control
Blade?
Detects and blocks malware by correlating multiple detection engines before users are affected.
Configure rules to limit the available network bandwidth for specified users or groups.
Use UserCheck to help users understand that certain websites are against the company’s security policy.

5. Checkpoint - 156-315.80
Pass Exam
3 of 4
Verified Solution - 100% Result
D.
A.
B.
C.
D.
A.
B.
C.
D.
A.
B.
Make rules to allow or block applications and Internet sites for individual applications, categories, and
risk levels.
Answer: A
Explanation
References:
Question #:7
Please choose the path to monitor the compliance status of the Check Point R80.10 based management.
Gateways & Servers --> Compliance View
Compliance blade not available under R80.10
Logs & Monitor --> New Tab --> Open compliance View
Security & Policies --> New Tab --> Compliance View
Answer: C
Question #:8
You have pushed policy to GW-3 and now cannot pass traffic through the gateway. As a last resort, to restore
traffic flow, what command would you run to remove the latest policy from GW-3?
fw unloadlocal
fw unloadpolicy
fwm unload local
fwm unload policy
Answer: A
Question #:9
What is a feature that enables VPN connections to successfully maintain a private and secure VPN session
without employing Stateful Inspection?
Stateful Mode
VPN Routing Mode

6. Checkpoint - 156-315.80
Pass Exam
4 of 4
Verified Solution - 100% Result
C.
D.
A.
B.
C.
D.
Wire Mode
Stateless Mode
Answer: C
Explanation
Wire Mode is a VPN-1 NGX feature that enables VPN connections to successfully fail over, bypassing
Security Gateway enforcement. This improves performance and reduces downtime. Based on a trusted source
and destination, Wire Mode uses internal interfaces and VPN Communities to maintain a private and secure
VPN session, without employing Stateful Inspection. Since Stateful Inspection no longer takes place,
dynamic-routing protocols that do not survive state verification in non-Wire Mode configurations can now be
deployed. The VPN connection is no different from any other connections along a dedicated wire, thus the
meaning of "Wire Mode".
References:
Question #:10
What is the recommended number of physical network interfaces in a Mobile Access cluster deployment?
4 Interfaces – an interface leading to the organization, a second interface leading to the internet, a third
interface for synchronization, a fourth interface leading to the Security Management Server.
3 Interfaces – an interface leading to the organization, a second interface leading to the Internet, a third
interface for synchronization.
1 Interface – an interface leading to the organization and the Internet, and configure for synchronization.
2 Interfaces – a data interface leading to the organization and the Internet, a second interface for
synchronization.
Answer: B
Explanation
References:

7. About dumpscafe.com
dumpscafe.com was founded in 2007. We provide latest & high quality IT / Business Certification Training Exam
Questions, Study Guides, Practice Tests.
We help you pass any IT / Business Certification Exams with 100% Pass Guaranteed or Full Refund. Especially
Cisco, CompTIA, Citrix, EMC, HP, Oracle, VMware, Juniper, Check Point, LPI, Nortel, EXIN and so on.
View list of all certification exams: All vendors
We prepare state-of-the art practice tests for certification exams. You can reach us at any of the email addresses listed
below.
Sales: sales@dumpscafe.com
Feedback: feedback@dumpscafe.com
Support: support@dumpscafe.com
Any problems about IT certification or our products, You can write us back and we will get back to you within 24
hours.