Free CheckPoint 156-730 Exam Dumps Questions & Answers

Which phase(s) is(are) NOT part of the Cyber Kill Chain?

• A.  Command and Control
• B.  Action and Objectives
• C.  Remediation
• D.  Exploitation

How can the SandBlast Agent protect against encrypted archives?

• A.  Since to open the encrypted archive the user must know the password, once opened and the writing to the disk has begun. the SandBlast Agent will immediately scan the file.
• B.  Password protected archive file is opened via brute force and dictionary attack. Once file is open the SandBlast Agent can scan it and send it to emulation.
• C.  The SandBlast Agent cannot protect from an encrypted malware.
• D.  Only if the administrator has added a special password file and the password that is used for the archive is part of the password list on the file.

Which statements below are CORRECT regarding Threat Prevention profiles in SmartDashboard?
1. You can assign multiple profiles per gateway.
2. A profile can be assigned to one or more rules.
3. Only one profile per gateway is allowed.
4. A profile can be assigned to only one rule.

• A.  1 and 2 are correct
• B.  1, 2, 3 and 4 are correct
• C.  1 and 4 are correct
• D.  2 and 3 are correct

A Threat Extraction license is always bundled with Threat Emulation.

• A.  False - Threat extraction is part of the basic NGFW license.
• B.  False - they can be purchased separately.
• C.  True - it is part of the NGTP and EBP license.
• D.  True - it is part of the NGTX license.

What are the 3 stages of securing the network with the SandBlast Agent?

• A.  Asses, Detect, Prevent
• B.  Prevent, Identify and Contain, Effective response and remediation
• C.  Detect, Prevent, remediate
• D.  Prevent, Contain, Block