CheckPoint 156-115.80 Online Practice Questions and Exam Preparation

CheckPoint 156-115.80 Online Questions & Answers

• Question 111:

  In R80 spoofing is defined as a method of:

  A. Disguising an illegal IP address behind an authorized IP address through Port Address Translation
  B. Hiding your firewall from unauthorized users
  C. Detecting people using false or wrong authentication logins
  D. Making packets appear as if they come an authorized IP address
  D. Making packets appear as if they come an authorized IP address

• Question 112:

  John works for ABC Corporation. His manager wants him to analyze the previous day's resource usage on the firewall. John decides to use cpview. John knows that, by default cpview history enabled but he wants to verify whether someone has disabled it. Which command should John use to verify whether cpview history is enabled?

  A. cpview status
  B. cpstat
  C. cpview history stat
  D. cpview info
  C. cpview history stat

  ---

  Reference: https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=andsolutionid=sk101878

• Question 113:

  For organizations with existing IPv4 networks who wish to move to IPv6, which of the following is a Transition Mechanism that can be used?

  A. ipv4 to ipv6 Triple Stack
  B. Hex to Dec translation
  C. 6 in 4 Tunneling
  D. NAT-T to NAT6sec
  C. 6 in 4 Tunneling

• Question 114:

  Consider the IPv6 address: 2101:0DA0:080B:4114:0000:0000:0000:0001. According to IPv6 IP shortening rules, what address can this be shortened to?

  A. 2101:0DA0:080B:4114::8:0
  B. 2101:0DA0:80B:4114::0
  C. 2101:0DA0:080B:4114::8:1
  D. 2101:0DA0:80B:4114::1
  D. 2101:0DA0:80B:4114::1

• Question 115:

  What is the difference between Client-Side and Server-Side NAT?

  A. The translation occurs at the kernel nearest the server for client-side NAT, but for server-side NAT, the translation occurs at the kernel nearest the client
  B. The translation occurs at the kernel nearest the server in both cases. So, there is no difference at all
  C. The translation occurs at the kernel nearest the client for client-side NAT, but for server-side NAT, the translation occurs at the kernel nearest the server
  D. The translation occurs at the kernel nearest the client in both cases. So, there is no difference at all
  C. The translation occurs at the kernel nearest the client for client-side NAT, but for server-side NAT, the translation occurs at the kernel nearest the server

• Question 116:

  Which command is used to write a kernel debug to a file?

  A. fw ctl debug –T –f > debug.txt
  B. fw ctl kdebug –T –l > debug.txt
  C. fw ctl debug –S –t > debug.txt
  D. fw ctl kdebug –T –f > debug.txt
  D. fw ctl kdebug –T –f > debug.txt

  ---

  Reference: https://itsecworks.com/2011/08/09/checkpoint-firewall-debugging-basics/

• Question 117:

  Which of the following commands can be used to see the list of processes monitored by the Watch Dog process?

  A. cpwd_admin list
  B. ps –ef | grep watchd
  C. cpstat fw –f watchdog
  D. fw ctl get str watchdog
  A. cpwd_admin list

  ---

  Reference: https://community.checkpoint.com/thread/8054-cpwdadmin-list-overview-sms

• Question 118:

  When troubleshooting acceleration issues on a Security Gateway, you notice that the fw_worker_x process is consuming about 100% processing power. What can be done to stop this from happening?

  A. Assign more CPU cores to the system
  B. Use fwaccel stop/start release process
  C. Edit the registry file to increase virtual memory
  D. Remove the memory file in /proc/ and recreate it
  A. Assign more CPU cores to the system

• Question 119:

  How can you ensure that a particular service does not use the cluster IP address?

  A. Add the corresponding service port and IP protocol number into the "no_hide_services_ports" section of the table.def file
  B. Add the corresponding service port and IP protocol number into the "hide_services_ports" section of the table.def file
  C. Add the corresponding service port and IP protocol number into the "no_hide_services_ports" section of the user.def file
  D. Add the corresponding service port and IP protocol number into the "hide_services_ports" section of the user.def file
  A. Add the corresponding service port and IP protocol number into the "no_hide_services_ports" section of the table.def file

• Question 120:

  Where do Protocol parsers register themselves for IPS?

  A. Passive Streaming Library
  B. Other handlers register to Protocol parser
  C. Protections database
  D. Context Management Infrastructure
  A. Passive Streaming Library

  ---

  Reference: http://www.nwtechusa.com/pdf/checkpoint_blade_ips.pdf