Exactprep 156-315.81 Questions

After verifying that API Server is not running, you can start the API Server by running the command “api start” in Expert mode. This command will start the API Server process (cpm_api) and enable it to run automatically after reboot. You can also use the command “api enable” to enable the API Server without starting it immediately. The other commands are either incorrect or not related to the API Server. The set api command is used in CLISH mode to configure API settings, such as port, domain, or certificate. The mgmt_cli command is used in Expert mode to execute API commands, such as login, logout, show, set, etc. References: [API Server]

 A Policy Package is a set of rules and settings that define how a Security Gateway enforces security on traffic that passes through it. A Policy Package can be created on either the Management Server or the Security Gateway, but it must be installed on both to take effect. When a new Policy Package is created on the Management Server, it must be installed on an existing Security Gateway that has a different Policy Package installed. The message below warns the administrator that installing a new Policy Package will overwrite the existing one on the Security Gateway.

The message also advises the administrator to back up their existing configuration before proceeding with the installation.

Access roles are objects that define a set of users, machines, or networks that can access a specific network resource. You can create access roles based on any combination of the following criteria:

• Users and user groups: You can use users and user groups from various sources, such as LDAP, RADIUS, local database, etc.
• Computers or computer groups: You can use computers or computer groups that are identified by their IP address, MAC address, or hostname.
• Networks: You can use networks that are defined by their IP address range, subnet mask, or gateway.

You can use access roles in the Source or Destination column of an Access Control rule to allow or deny network access based on the identity of the users, machines, or networks.

The references are:

• Check Point Certified Security Expert R81.20 (CCSE) Core Training, slide 11
• Check Point R81 Quantum Security Gateway Guide, page 139
• Check Point R81 Identity Awareness Administration Guide, page 9

 By default, when the CPUSE Software Updates Policy is set to Automatic, updates are checked every three hours3. This means that the CPUSE agent will automatically download and install updates that match the policy settings every three hours. The other options are not the default values for the CPUSE Software Updates Policy. References: 3: Check Point Software, Getting Started, CPUSE Software Updates Policy.