CCSE 156-315.81 Syllabus Exam Questions Answers

 The process that is used mainly for backward compatibility of gateways in R81.X is fwm. The fwm daemon handles communication with GUI-client, database manipulation, policy compilation and Management HA synchronization for legacy gateways that do not support the cpm daemon. The cpm daemon is the new Check Point Management Server daemon that handles these tasks for R80 and higher gateways. The cpd daemon is the Check Point Management daemon that handles communication between SmartConsole applications and Security Management Servers. The fwd daemon is the Firewall Daemon that handles communication between Security Gateways and Security Management Servers2. References: 2: Check Point Software, Getting Started, Processes.

LDAP (Lightweight Directory Access Protocol) operates over different ports, with each serving a specific purpose. Port 389 is the default port for unsecured LDAP connections or LDAP with StartTLS, which upgrades the connection to use TLS (Transport Layer Security) for encryption. On the other hand, port 636 is used for LDAP over SSL/TLS, often referred to as LDAPS (LDAP Secure), where communication is encrypted from the start of the connection1.

References:

• LDAP Ports Explained: Configuring Standard, StartTLS, and LDAPS Connections
• Red Hat Directory Server documentation on changing LDAP and LDAPS port numbers
• Oracle documentation on Directory Server and Directory Proxy Server LDAP and LDAPS Port Numbers
• ServerFault discussion on LDAP server authentication ports

The verified answer is D. Time.

An Access Role object is a logical representation of a set of users, machines, or networks that can be used in the security policy1. An Access Role object can include the following components1:

• Networks: IP addresses or network objects that define the source or destination of the traffic.
• Machines: Specific hosts or machine groups that are identified by their MAC addresses or certificates.
• Users: Specific users or user groups that are authenticated by one or more identity sources, such as Active Directory, LDAP, or Identity Awareness.

Time is not a component of an Access Role object, and it cannot be configured in it. Time is a separate object type that can be used to define the validity period of a rule or a policy2.

References:

• LDAP group vs Access role objects - Check Point CheckMates3
• THE IMPORTANCE OF ACCESS ROLES - Check Point Software1
• Time Objects - Check Point Software2

The upgrade process for a Management High Availability Cluster is to first upgrade the Standby Management Server, then perform a failover and upgrade the Active Management Server. This way, the cluster can maintain its functionality and synchronization during the upgrade.

The references are:

• Check Point R81 Upgrade Guide, page 17
• Check Point Certified Security Expert R81.20 (CCSE) Core Training, slide 10