Free CheckPoint 156-730 Exam Dumps Questions & Answers

What kind of approach or approaches will Check Point SandBlast apply to prevent MALICIOUS DOCUMENTS?

• A.  Exploit
• B.  Whitelist and Exploit
• C.  Signature
• D.  Blacklist/machine learning

Anti-Bot uses the following detection/prevention features:
1 . Reputation lookup of DNS/IP/URL access
2 . Dynamic analysis for Bots
3. Outbound SPAM
4. Bot behavior signatures

• A.  1 and 3
• B.  1, 2, and 3
• C.  1, 3 and 4
• D.  2 and 3

What are the deployment methods available with the SandBlast Agent? Choose the BEST answer.

• A.  Manually installing on every station.
• B.  Using GPO or SCCM to deploy the deployment agent.
• C.  Using Configure SandBlast Agent to collaborate with Emulation and Ant-Virus solutions update to upgrade and install the SandBlast Agent.
• D.  Using both GPO or SCCM for deployment agent and End Point management to push the Agent.

You analyze your Threat Prevention events in SmartEvent and there is one specific event with a PDF-document you suspect being malicious. What is a typical behavior Threat
Emulation would detect as malicious? When the PDF is opened in VM:

• A.  it opens with Administrator privileges.
• B.  there is an outgoing network connection.
• C.  there are no changes to the registry.
• D.  it tries to open in Acrobat Reader.

You can restrict a user from downloading an original file if it is getting a malicious verdict from Threat Emulation?

• A.  False - Due to security concerns, a user will never be able to download a file found to be malicious.
• B.  True - This is possible through the SmartDashboard Threat extraction settings.
• C.  True - Under Threat emulation settings you can configure this option.
• D.  False - Threat Emulation provides a recommendation verdict. The user can download the file even if it is found to be malicious.