CheckPoint 156-115.80 Online Practice Questions and Exam Preparation

CheckPoint 156-115.80 Online Questions & Answers

• Question 1:

  When dealing with monolithic operating systems such as Gaia, where are system calls initiated from to achieve a required system level function?

  A. Slow Path
  B. Medium Path
  C. Kernel Mode
  D. User Mode
  D. User Mode

• Question 2:

  What is a primary advantage of using the fw monitor tool?

  A. It always captures all packets hitting the physical layer
  B. It is menu-driven, making it easy to configure
  C. It has no negative impact on firewall performance
  D. It can capture packets in various positions as they move through the firewall
  D. It can capture packets in various positions as they move through the firewall

  ---

  Reference: https://dl3.checkpoint.com/paid/16/HowTo_Configure_Templates_FWMonitor.pdf?HashKey=1607631676_23e6443e7344d68ad339ffc7101f46faandxtn=.pdf

• Question 3:

  In order to test ClusterXL failovers which command would you use on one of the ClusterXL nodes to initiate a failover?

  A. clusterXL_admin down -p
  B. cluster XL_admin up -p
  C. cphaprob -d TEST -s ok register
  D. cphaprob -d TEST -s problem unregister
  A. clusterXL_admin down -p

  ---

  Reference: https://sc1.checkpoint.com/documents/R76/CP_R76_ClusterXL_AdminGuide/7298.htm#o97358

• Question 4:

  When running a debug with fw monitor, which parameter will create a more verbose output?

  A. -l
  B. -i
  C. -D
  D. -d
  C. -D

  ---

  Reference: https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=andsolutionid=sk30583

• Question 5:

  What is the role of FWM process in Check Point R80.10 Security Management architecture?

  A. It is called by CPM process to perform verification and conversion of the database
  B. FWM is used to transfer CPsets from management to the gateway
  C. FWM prepares and loads commit functions to execute the policy
  D. Policy installation command initiated from SmartConsole is sent to FWM
  D. Policy installation command initiated from SmartConsole is sent to FWM

  ---

  Reference: https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=andsolutionid=sk101226

• Question 6:

  Which of the following is true about Protocol Signatures?

  A. Enabling Protocol Signatures will restrict each protocol to its standard port.
  B. Signatures are pieces of information taken from both C2S packets that eventually identify the protocol
  C. Protocol signatures are supported on R77.30 and newer gateways
  D. Protocol signatures are enabled for all connections via the Global Properties menu
  B. Signatures are pieces of information taken from both C2S packets that eventually identify the protocol

• Question 7:

  What is the name of the table that an administrator would review to investigate a port exhaustion error when using Hide NAT?

  A. dyn_nat_table
  B. connection
  C. nat_dyn_table
  D. fwx_alloc
  D. fwx_alloc

  ---

  Reference: https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=andsolutionid=sk32224

• Question 8:

  URL Filtering is an essential part of Web Security in the Gateway. For the Security Gateway to perform a URL lookup when a client makes a URL request, where is the sync-request forwarded from if a sync-request is required?

  A. RAD Kernel Space
  B. URLF Kernel Client
  C. URLF Online Service
  D. RAD User Space
  B. URLF Kernel Client

  ---

  Reference: https://community.checkpoint.com/thread/9034-url-filtering-using-dns

• Question 9:

  What process(es) should be checked if there is high I/O and you suspect it may be related to the Antivirus Software Blade?

  A. avsp
  B. dlpu and rad processes
  C. cpta
  D. cpm and fwm
  B. dlpu and rad processes

• Question 10:

  You need to investigate issues with policy installation on the Security Gateway side. Which process will you debug and how?

  A. cpd; cpd_admin debug on TDERROR_ALL_ALL=5
  B. cpd; fw ctl debug on –m cpd
  C. fwm; fw debug fwm on TDERROR_ALL_ALL=5
  D. fwd; fw debug fwd on TDERROR_ALL_ALL=5
  A. cpd; cpd_admin debug on TDERROR_ALL_ALL=5

  ---

  Reference: https://downloads.checkpoint.com/fileserver/SOURCE/direct/ID/11844/FILE/How-To-Troubleshoot-Policy-Installation-Issues.pdf