CheckPoint 156-315.13 Actual Free Exam Questions & Community Discussion

Exam Code/Number: 156-315.13
Exam Name/Title: Check Point Certified Security Expert
Certification Provider: CheckPoint
Corresponding Certification: CCSE

Exam Questions: 639
Updated On: Aug 08, 2026

Question #23

In Company XYZ, the DLP Administrator defined a new Keywords Data Type that contains a list of secret project names; i.e., Ayalon, Yarkon, Yarden. The threshold is set to At least 2 keywords or phrases. Based on this information, which of the following scenarios will be a match to the Rule Base?

A. A word file that contains the following text will match:
Ayalon
ayalon
AYALON

B. A PDF file that contains the following text
Yarkon1 can be the code name for the new product. Yardens list of protected sites

C. An MS Excel file that contains the following text
Mort resources for Yarkon project.. Are you certain this is about Yarden?

D. A password protected MS Excel file that contains the following text
Ayalon
Yarkon
Yarden

Discussion 0

Correct Answer: C Vote an answer

Question #24

You configure a Check Point QoS Rule Base with two rules: an H.323 rule with a weight of 10, and the Default Rule with a weight of 10. The H.323 rule includes a per-connection guarantee of 384 Kbps. and a per-connection limit of 512 Kbps. The per-connection guarantee is for four connections, and no additional connections are allowed in the Action properties. If traffic is passing through the QoS Module matches both rules, which of the following statements is TRUE?

A. Neither rule will be allocated more than 10% of available bandwidth.

B. The H.323 rule will consume no more than 2048 Kbps of available bandwidth.

C. Each H.323 connection will receive at least 512 Kbps of bandwidth.

D. 50% of available bandwidth will be allocated to the Default Rule.

Discussion 0

Correct Answer: B Vote an answer

Question #25

You start the configuration of SmartWorkflow. SmartWorkflow is enabled, but you are not able to select Open New Session because it is greyed out.
What must be done to open a new session? Choose the BEST answer.

A. Sessions in the Manage menu of SmartDashboard must be selected and enabled.

B. A rule which allows the SmartWorkflow traffic must be placed on the top of the Rule Base.

C. The use of sessions must be enabled by the CLI command: SWF_session start.

D. The Work with sessions in Global Properties must be set.

Discussion 0

Correct Answer: D Vote an answer

Question #26

Review the Rule Base displayed.

For which rules will the connection templates be generated in SecureXL?

A. Rule no. 2 only

B. Rule nos. 2 and 5

C. Rule nos. 2 to 5

D. All rules except rule no. 3

Discussion 0

Correct Answer: A Vote an answer

Question #27

You are preparing computers for a new ClusterXL deployment. For your cluster, you plan to use three machines with the following configurations:

Are these machines correctly configured for a ClusterXL deployment?

A. No, Cluster Member 3 does not have the required memory.

B. No, the Security Management Server is not running the same operating system as the cluster members.

C. No, the Security Gateway cannot be installed on the Security Management Server.

D. Yes, these machines are configured correctly for a ClusterXL deployment.

Discussion 0

Correct Answer: C Vote an answer

Question #28

Your online bookstore has customers connecting to a variety of Web servers to place or change orders and check order status. You ran penetration tests through the Security Gateway to determine if the Web servers were protected from a recent series of cross-site scripting attacks. The penetration testing indicated the Web servers were still vulnerable. You have checked every box in the Web Intelligence tab, and installed the Security Policy. What else might you do to reduce the vulnerability?

A. Add Port (TCP 443) as an additional port on the Web Server tab for the host node.

B. Configure the Security Gateway protecting the Web servers as a Web server.

C. The penetration software you are using is malfunctioning and is reporting a false-positive.

D. Check the Products / Web Server box on the host node objects representing your Web servers.

Discussion 0

Correct Answer: D Vote an answer

Question #29

Using the output below, what does the red flag indicate for the MS08-067 Protection?

A. It indicates this is for follow up

B. It indicates this protection is a critical

C. It indicates this protection is for a new 0-day vulnerability

D. It indicates this protection's severity level was modified from the default setting by the administrator

Discussion 0

Correct Answer: A Vote an answer

Question #30

If no flags are defined during a back up on the Security Management Server, where does the system store the *.tgz file?

A. /var/CPbackup/backups

B. /var/opt/backups

C. /var/tmp/backups

D. /var/backups

Discussion 0

Correct Answer: A Vote an answer

Question #31

You are preparing to configure your VoIP Domain Gatekeeper object. Which two other objects should you have created first?

A. An object to represent the call manager, AND an object to represent the host on which the transmission router is installed

B. An object to represent the IP phone network, AND an object to represent the host on which the gatekeeper is installed

C. An object to represent the IP phone network, AND an object to represent the host on which the proxy is installed

D. An object to represent the Q.931 service origination host, AND an object to represent the H.245 termination host

E. An object to represent the PSTN phone network, AND an object to represent the IP phone network

Discussion 0

Correct Answer: B Vote an answer

Question #32

What cluster mode is represented in this case?

A. Load Sharing (multicast mode)

B. Load Sharing Unicast (Pivot) mode

C. HA (New mode)

D. 3rd party cluster

Discussion 0

Correct Answer: A Vote an answer

Question #33

Which of the following is a supported Sticky Decision Function of Sticky Connections for Load Sharing?

A. Support for SecureClient/SecuRemote/SSL Network Extender encrypted connections

B. Multi-connection support for VPN-1 cluster members

C. Support for Performance Pack acceleration

D. Support for all VPN deployments (except those with third-party VPN peers)

Discussion 0

Correct Answer: A Vote an answer

Download Free CheckPoint 156-315.13 Demo

Simply submit your e-mail address below to get started with our free demo of your CheckPoint 156-315.13 exam.