Amazon
Avaya
Checkpoint
Cisco®
CompTIA
CrowdStrike
EC-Council
EXIN
Fortinet
Google
ISC
ISC2
ITIL®
Juniper
Microsoft
Okta
Palo Alto Networks
Salesforce
All Vendors
  1. Home
  2. Checkpoint
  3. 156-315.81

Checkpoint 156-315.81 Exam (page: 15)
Checkpoint Check Point Certified Security Expert R81
Updated on: 25-Dec-2025

Viewing Page 15 of 127
156-315.81 PDF 628 Questions

What are the attributes that SecureXL will check after the connection is allowed by Security Policy?

  1. Source address, Destination address, Source port, Destination port, Protocol
  2. Source MAC address, Destination MAC address, Source port, Destination port, Protocol
  3. Source address, Destination address, Source port, Destination port
  4. Source address, Destination address, Destination port, Protocol

Answer(s): A

Explanation:

The attributes that SecureXL will check after the connection is allowed by Security Policy are Source address, Destination address, Source port, Destination port, Protocol. These are the five tuple parameters that define a connection and are used by SecureXL to accelerate the traffic. The other options are either missing some of the parameters or include irrelevant ones, such as MAC addresses1.


Reference:

Check Point R81 SecureXL Administration Guide



Which statement is NOT TRUE about Delta synchronization?

  1. Using UDP Multicast or Broadcast on port 8161
  2. Using UDP Multicast or Broadcast on port 8116
  3. Quicker than Full sync
  4. Transfers changes in the Kernel tables between cluster members.

Answer(s): A

Explanation:

The statement that is not true about Delta synchronization is Using UDP Multicast or Broadcast on port 8161. Delta synchronization is a mechanism that transfers only the changes in the kernel tables between cluster members, instead of sending the entire tables. It uses UDP Multicast or Broadcast on port 8116, not 81612. The other statements are true about Delta synchronization.


Reference:

Check Point R81 ClusterXL Administration Guide



The Event List within the Event tab contains:

  1. a list of options available for running a query.
  2. the top events, destinations, sources, and users of the query results, either as a chart or in a tallied list.
  3. events generated by a query.
  4. the details of a selected event.

Answer(s): C

Explanation:

The Event List within the Event tab contains events generated by a query. The Event List shows the events that match the query criteria, such as time range, filter, and aggregation. The events can be sorted by different columns, such as severity, time, action, and source3. The other options are either not part of the Event tab or not related to the Event List.


Reference:

Check Point R81 Logging and Monitoring Administration Guide



Which statement is correct about the Sticky Decision Function?

  1. It is not supported with either the Performance pack of a hardware based accelerator card
  2. Does not support SPI's when configured for Load Sharing
  3. It is automatically disabled if the Mobile Access Software Blade is enabled on the cluster
  4. It is not required L2TP traffic

Answer(s): A

Explanation:

The statement that is correct about the Sticky Decision Function is It is not supported with either the Performance pack of a hardware based accelerator card. The Sticky Decision Function (SDF) is a feature that ensures that packets from the same connection are handled by the same cluster member in a Load Sharing configuration. However, SDF is not compatible with SecureXL acceleration, which is enabled by default or by using a Performance pack or a hardware based accelerator card4. The other statements are either incorrect or outdated about SDF.


Reference:

Check Point R81 ClusterXL Administration Guide, Sticky Decision Function - Check Point CheckMates



Which statement is true regarding redundancy?

  1. System Administrators know when their cluster has failed over and can also see why it failed over by using the cphaprob ­f if command.
  2. ClusterXL offers three different Load Sharing solutions: Unicast, Broadcast, and Multicast.
  3. Machines in a ClusterXL High Availability configuration must be synchronized.
  4. Both ClusterXL and VRRP are fully supported by Gaia and available to all Check Point appliances, open servers, and virtualized environments.

Answer(s): D

Explanation:

The statement that is true regarding redundancy is Both ClusterXL and VRRP are fully supported by Gaia and available to all Check Point appliances, open servers, and virtualized environments. ClusterXL and VRRP are two technologies that provide high availability and load sharing for Security

Gateways. They are both supported by Gaia OS and can be deployed on various platforms5. The other statements are either false or incomplete regarding redundancy.


Reference:

Check Point R81 ClusterXL Administration Guide, Check Point R81 Gaia Administration Guide



Viewing Page 15 of 127



Share your comments for Checkpoint 156-315.81 exam with other users:

vel 8/28/2023 9:17:09 AM

good one with explanation
Anonymous


Gurdeep 1/18/2024 4:00:15 PM

This is one of the most useful study guides I have ever used.
CANADA