Skip to main content

156-115.80 Real Exam Questions

Check Point Certified Security Master - R80

159 questions available · Page 1 of 16

Updated Exam DumpsVerified AnswersPass Guarantee

Get Complete Exam Dumps
Question 1 Single choice

Your customer is experiencing problems connecting to the Security Management Server via SmartConsole. You suggest testing the connection to the SMS with GuiBedit from the client machine. This connection was successful. Now you suggest enabling debug to investigate possible issues with connections to SMS via SmartConsole.

Which process does the customer need to debug on the SMS?

  1. A

    cpd

  2. B

    fwd

  3. C

    cpm

  4. D

    fwm

Show answer and explanation

Correct answer: C

Explanation

References:
https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk97638

Question 2 Single choice

What file extension should be used with fw monitor to allow the output file to be imported and read in Wireshark?

  1. A

    .cap

  2. B

    .exe

  3. C

    .tgz

  4. D

    .pcap

Show answer and explanation

Correct answer: A

Question 3 Single choice

Which daemon is used for Geo protection?

  1. A

    in.geod

  2. B

    cphamcset

  3. C

    fwd

  4. D

    cpd

Show answer and explanation

Correct answer: A

Explanation

References:
https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk97638

Question 4 Single choice

Which one of following commands should you run to display HTTPS packet content together with kernel debug?

  1. A

    fw ctl get int https_inspection_show_decrypted_data_in_debug=1
    fw ctl get int ssl_inspection_extra_debug=1

  2. B

    fw set int https_inspection_get_encrypted_data_in_debug 1
    fw set int https_inspection_show_debug 1

  3. C

    fw ctl set int https_inspection_show_decrypted_data_in_debug 1
    fw ctl set int ssl_inspection_extra_debug 1

  4. D

    fw ctl set int http_inspection_display_encrypted_data_in_debug=1
    fw ctl set int http_inspection_extra_debug=1

Show answer and explanation

Correct answer: C

Question 5 Single choice

While using IPS, the network performance is being impacted on a load sharing cluster with asymmetric routes.

What is most likely causing the degradation?

  1. A

    A failure in the sync network protocol

  2. B

    A static NAT has been configured and an IPS protection requires the connection be handled on the same cluster member

  3. C

    CoreXL has been disabled

  4. D

    SecureXL has been disabled

Show answer and explanation

Correct answer: C

Question 6 Single choice

Which process is responsible for the generation of certificates?

  1. A

    cpm

  2. B

    cpca

  3. C

    dbsync

  4. D

    fwm

Show answer and explanation

Correct answer: B

Explanation

References:
https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk97638#Security%20Management%20Software%20Blades%20and%20Features%20-%20SmartLog

Question 7 Single choice

Which type of SecureXL templates is enabled by default on Security Gateways?

  1. A

    Accept

  2. B

    Drop

  3. C

    NAT

  4. D

    VPN

Show answer and explanation

Correct answer: A

Question 8 Single choice

Consider an IKE debug file that has been generated when debugging an issue with site to site VPN.

What is the purpose of a NONCE?

  1. A

    Randomly generated part of key generation

  2. B

    Vendor ID and Remote Gateway ID

  3. C

    Protocol 50 and 51 representations

  4. D

    Fixed hex value of Phase 2 keys with PFS

Show answer and explanation

Correct answer: A

Question 9 Single choice

What is the difference between disabling SecureXL by running "fwaccel off" and disabling it via cpconfig?

  1. A

    Disabling SecureXL in cpconfig survives reboot

  2. B

    cpconfig option is available only on the security manager

  3. C

    There is no difference. These are two different ways of accomplishing the same task

  4. D

    "fwaccel off" will survive the reboot but cpconfig will not

Show answer and explanation

Correct answer: A

Explanation

References:
https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk41397

Question 10 Single choice

Which command is used to write a kernel debug to a file?

  1. A

    fw ctl debug -T -f > debug.txt

  2. B

    fw ctl kdebug -T -l > debug.txt

  3. C

    fw ctl debug -S -t > debug.txt

  4. D

    fw ctl kdebug -T -f > debug.txt

Show answer and explanation

Correct answer: D

Explanation

References:
https://itsecworks.com/2011/08/09/checkpoint-firewall-debugging-basics/