156-315.80 Exam Questions and Answers

QUESTION: 26

Connections to the Check Point R80 Web API use what protocol?

HTTPS
RPC
VPN
SIC

Answer(s): A

Reveal Solution Next Question

QUESTION: 27

Which command lists all tables in Gaia?

fw tab –t
fw tab –list
fw-tab –s
fw tab -1

Answer(s): C

Reference:

http://dl3.checkpoint.com/paid/c7/c76b823d81bab77e1e40ac086fa81411/CP_R77_versions_CLI_ReferenceGuide.pdf?HashKey=1538418170_96def40f213f24a8b273cc77b408dd3f&xtn=.pdf

Reveal Solution Next Question

QUESTION: 28

What is true about the IPS-Blade?

In R80, IPS is managed by the Threat Prevention Policy
In R80, in the IPS Layer, the only three possible actions are Basic, Optimized and Strict
In R80, IPS Exceptions cannot be attached to “all rules”
In R80, the GeoPolicy Exceptions and the Threat Prevention Exceptions are the same

Answer(s): A

Reveal Solution Next Question

QUESTION: 29

Which one of these features is NOT associated with the Check Point URL Filtering and Application Control Blade?

Detects and blocks malware by correlating multiple detection engines before users are affected.
Configure rules to limit the available network bandwidth for specified users or groups.
Use UserCheck to help users understand that certain websites are against the company’s security policy.
Make rules to allow or block applications and Internet sites for individual applications, categories, and risk levels.

Answer(s): A

Reference:

https://sc1.checkpoint.com/documents/R76/CP_R76_AppControl_WebAdmin/60902.htm

Reveal Solution Next Question

QUESTION: 30

What is a feature that enables VPN connections to successfully maintain a private and secure VPN session without employing Stateful Inspection?

Stateful Mode
VPN Routing Mode
Wire Mode
Stateless Mode

Answer(s): C

Explanation:

Wire Mode is a VPN-1 NGX feature that enables VPN connections to successfully fail over, bypassing Security Gateway enforcement. This improves performance and reduces downtime. Based on a trusted source and destination, Wire Mode uses internal interfaces and VPN Communities to maintain a private and secure VPN session, without employing Stateful Inspection. Since Stateful Inspection no longer takes place, dynamic- routing protocols that do not survive state verification in non-Wire Mode configurations can now be deployed.

The VPN connection is no different from any other connections along a dedicated wire, thus the meaning of "Wire Mode".

Reference:

https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk30974

Reveal Solution Next Question

Checkpoint 156-315.80 Exam (page: 6) Checkpoint Check Point Certified Security Expert - R80 Updated on: 25-Dec-2025

QUESTION: 26

QUESTION: 27

Reference:

QUESTION: 28

QUESTION: 29

Reference:

QUESTION: 30

Explanation:

Reference:

Checkpoint 156-315.80 Exam (page: 6)
Checkpoint Check Point Certified Security Expert - R80
Updated on: 25-Dec-2025