CheckPoint 156-315.13 Actual Free Exam Questions & Community Discussion

Exam Code/Number: 156-315.13
Exam Name/Title: Check Point Certified Security Expert
Certification Provider: CheckPoint
Corresponding Certification: CCSE

Exam Questions: 639
Updated On: Aug 08, 2026

Question #12

Regarding QoS guarantees and limits, which of the following statements is FALSE?

A. If a guarantee is defined in a sub-rule, then a guarantee must be defined for the rule above it.

B. A rule guarantee must not be less than the sum the guarantees defined in its sub-rules.

C. If both a limit and a guarantee per rule are defined in a QoS rule, then the limit must be smaller than the guarantee.

D. If both a rule limit and a per connection limit are defined for a rule, the per connection limit must not be greater than the rule limit.

Discussion 0

Correct Answer: C Vote an answer

Question #13

When distributing IPSec packets to gateways in a Load Sharing Multicast mode cluster, which valid Load Sharing method will consider VPN information?

A. Load Sharing based on ports, VTI, and IP addresses

B. Load Sharing based on IP addresses, ports, and security parameter indexes

C. Load Sharing based on IP addresses, ports, and serial peripheral interfaces

D. Load Sharing based on SPIs

Discussion 0

Correct Answer: B Vote an answer

Question #14

When deploying a dedicated DLP Gateway behind a perimeter firewall on an interface leading to the internal network (there is only one internal network):

A. User's HTTPS and FTP traffic can be inspected by the R71 DLP Gateway.

B. The DLP Gateway can inspect internal e-mails (e-mails between two users on the internal network) if the organization's internal mail server is located in the internal network and users are configured to send e-mails to this mail server using SMTP.

C. The DLP Gateway can inspect e-mails (e-mails between two users on an internal or external network) if the organization's internal mail server is located on another network (not the internal network; for instance the DMZ or a different internal network) and users are configured to send e-mails to this mail server using SMTP.

D. The DLP Gateway can inspect SMTP traffic if a MS Exchange server is located on the internal network, and it either sends e-mails directly to the Internet using SMTP or sends e-mails to the Internet in SMTP via a mail relay that is located on the perimeter's firewall DMZ network.

Discussion 0

Correct Answer: D Vote an answer

Question #15

Which is NOT a method through which Identity Awareness receives its identities?

A. AD Query

B. Identity Agent

C. GPO

D. Captive Portal

Discussion 0

Correct Answer: C Vote an answer

Question #16

The relay mail server configured under Email Notifications is used by the DLP Gateway to: (Choose the BEST answer.)

A. Send e-mail notifications to users and Data Owners.

B. Define My Organization / DLP Gateway and scan only e-mails that originate from this relay server.

C. Synchronize with other mail servers in the network.

D. If UserCheck is configured, there is no need to configure this relay server if there are no Ask User rules and there is no need to notify any Data Owners.

Discussion 0

Correct Answer: A Vote an answer

Question #17

What physical machine must have access to the UserCenter public IP when checking for new packages with SmartUpdate?

A. SmartUpdate Repository SQL database Server

B. SmartUpdate installed SmartCenter Server PC

C. VPN-1 Security Gateway getting the new upgrade package

D. SmartUpdate GUI PC

Discussion 0

Correct Answer: D Vote an answer

Question #18

Which Check Point QoS feature is used to dynamically allocate relative portions of available bandwidth?

A. Low Latency Queuing

B. Weighted Fair Queuing

C. Differentiated Services

D. Guarantees

Discussion 0

Correct Answer: B Vote an answer

Question #19

Which of the following commands can provide the most complete restore of an R76 configuration?

A. upgrade_import

B. cpconfig

C. cpinfo -recover

D. fwm dbimport -p <export file>

Discussion 0

Correct Answer: A Vote an answer

Question #20

You have just upgraded your Load Sharing gateway cluster (both members) from NGX R65 to R76. cphaprob stat shows:

Which of the following is not a possible cause of this?

A. You have a different number of cores defined for CoreXL between the two members

B. You have not run cpconfig on member 2 yet.

C. Member 1 has CoreXL disabled and member 2 does not

D. Member 1 is at a lower version than member 2

Discussion 0

Correct Answer: B Vote an answer

Question #21

Even after configuring central logging on Connectra, Connectra logs are not displaying in SmartView Tracker. What could be the cause of this problem?

A. You must install the Security Policy, and try again.

B. You must reestablish logging from Connectra to the Management Server, using a dummy log-server object.

C. R70 does not support a host object with the same IP address as a Management Server used as secondary log server or management station.

D. You must install the Management Server database.

Discussion 0

Correct Answer: D Vote an answer

Question #22

Which Name Resolution protocols are supported in SSL VPN?

A. DNS, hosts, WINS

B. DNS, hosts, Imhosts

C. DNS, hosts

D. DNS, hosts, Imhosts, WINS

Discussion 0

Correct Answer: C Vote an answer

Download Free CheckPoint 156-315.13 Demo

Simply submit your e-mail address below to get started with our free demo of your CheckPoint 156-315.13 exam.