CheckPoint 156-115.80 Online Practice Questions and Exam Preparation

CheckPoint 156-115.80 Online Questions & Answers

• Question 91:

  To display status information, such as number of connections currently being handled and the peak number of concurrent connections the instance has handled since inception for each kernel instance, which command would you use?

  A. fw ctl multip stat
  B. fw ctl affinity –t stat
  C. fw ctl affinity –s stat
  D. fw ctl multik stat
  D. fw ctl multik stat

  ---

  Reference: https://sc1.checkpoint.com/documents/R76/CP_R76_PerformanceTuning_WebAdmin/6731.htm

• Question 92:

  Your company plans to start migration on IPv6 protocol. What steps do you need to perform to fully enable IPv6 protocol on the Security Gateway?

  A. Issue "set ipv6 enable"; Save configuration and reboot
  B. Issue "set ipv6-state on"; Save configuration and reboot
  C. Issue "set ipv6 on"; Save configuration and reboot
  D. Issue "set ipv6-state enable"; Save configuration and reboot
  B. Issue "set ipv6-state on"; Save configuration and reboot

  ---

  Reference: https://sc1.checkpoint.com/documents/R76SP.10/CP_R76SP.10_SecuritySystem_AdminGuide/83600.htm

• Question 93:

  What is the proper syntax to enter the "central database" that contains all objects within the Postgres database?

  A. psql_client cpm postgres
  B. psql_client checkpoint postgres
  C. psql_client central_database postgres
  D. In clish: show postgres main
  A. psql_client cpm postgres

• Question 94:

  What is the default and maximum number of entries in the ARP Cache Table in a Check Point appliance?

  A. 1,024 and 4,096
  B. 4,096 and 16,384
  C. 4,096 and 65,536
  D. 1,024 and 16,384
  D. 1,024 and 16,384

  ---

  Reference: https://sc1.checkpoint.com/documents/R76/CP_R76_Gaia_WebAdmin/73181.htm

• Question 95:

  Which one of the following does not belong to an initial status of a critical device?

  A. restart
  B. problem
  C. init
  D. ok
  A. restart

  ---

  Reference: https://sc1.checkpoint.com/documents/R76/CP_R76_ClusterXL_AdminGuide/7298.htm

• Question 96:

  You suspect that IPS protections may be dropping legitimate traffic by mistake. To reduce the false positives, what GuiDBedit parameter could you enable to work with fw ctl zdebug drop to generate a more elaborate drop message for these

  packets?

  A. enable_inspect_debug_ips_compilation
  B. inspect_ips_debug_inspection
  C. enable_inspect_debug_compilation
  D. enable_inspect_debug_ips
  C. enable_inspect_debug_compilation

• Question 97:

  By default, how long does the UDP connection remain on the state table?

  A. 30 Seconds
  B. 30 minutes
  C. 60 minutes
  D. 40 Seconds
  D. 40 Seconds

  ---

  Reference: https://community.checkpoint.com/t5/General-Topics/R80-x-Performance-Tuning-Tip-Connection-Table/td-p/41581#:~:text=For%20example%2C%20the%20default%20session,(TCP%20to%203600%20seconds).

• Question 98:

  When troubleshooting static NAT, you would follow all the steps below, EXCEPT:

  A. Verify NAT configuration
  B. Debug NAT
  C. Run "fw tab -t fwx_alloc"
  D. Run "fw ctl arp" command
  C. Run "fw tab -t fwx_alloc"

• Question 99:

  Which command will register the host_monitor device and checks end-to-end connectivity to routers and other network devices?

  A. clusterXL_monitor_ips
  B. clusterXL_monitor_admin
  C. clusterXL_monitor_process
  D. clusterXL_admin
  A. clusterXL_monitor_ips

  ---

  Reference: https://sc1.checkpoint.com/documents/R77/CP_R77_ClusterXL_WebAdminGuide/html_frameset.htm?topic=documents/R77/CP_R77_ClusterXL_WebAdminGuide/7298

• Question 100:

  If cluster members are geographically separated and the time to detect a failover needs to be longer, what timer needs to be adjusted?

  A. fwha_timer_cpha_res
  B. fwha_timer_dist_res
  C. fwha_geosync_timer
  D. fwha_timer_sync_res
  A. fwha_timer_cpha_res

  ---

  Reference: https://sc1.checkpoint.com/documents/R76/CP_R76_ClusterXL_AdminGuide/7298.htm