CheckPoint 156-115.80 Online Practice Questions and Exam Preparation

CheckPoint 156-115.80 Online Questions & Answers

• Question 121:

  You issued the command "set ipv6-state on" in order to enable IPv6 protocol on a Security Gateway. The command was executed successfully. After reboot you notice that IPv6 protocol is not enabled. What do you do to permanently enable IPv6 protocol?

  A. Issue "set ipv6-state on" again; Save configuration and reboot
  B. You need to modify Gateway Properties in SmartConsole and install policy in order to enable IPv6
  C. You need to set "ipv6_state" parameter in $FWDIR/boot/modules/fwkern.conf and reboot
  D. You need to install a valid license to use IPv6 protocol
  A. Issue "set ipv6-state on" again; Save configuration and reboot

• Question 122:

  The maximum number of critical devices or pnotes on a cluster member is what?

  A. 8
  B. 24
  C. 32
  D. 16
  D. 16

  ---

  Reference: https://sc1.checkpoint.com/documents/R76/CP_R76_ClusterXL_AdminGuide/7298.htm

• Question 123:

  Where will the usermode core files located?

  A. /var/log/dump/usermode
  B. /var/suroot
  C. $FWDIR/var/log/dump/usermode
  D. $CPDIR/var/log/dump/usermode
  A. /var/log/dump/usermode

  ---

  Reference: https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=andsolutionid=sk92764

• Question 124:

  Which daemon process performs asymmetric key operations for HTTPS Inspection?

  A. httpsd
  B. httpkd
  C. wstlsd
  D. pkxld
  D. pkxld

  ---

  Reference: https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=andsolutionid=sk97638

• Question 125:

  Which of the following file is commonly associated with troubleshooting crashes on a system such as the Security Gateway?

  A. core dump
  B. CPMIL dump
  C. fw monitor
  D. tcpdump
  A. core dump

• Question 126:

  The Security Gateway is installed on GAiA R80. The default port for the Web User Interface is _____________.

  A. TCP 18211
  B. TCP 257
  C. TCP 4433
  D. TCP 443
  D. TCP 443

• Question 127:

  Which SecureXL table holds IPs that should not be accelerated?

  A. f2f_addresses
  B. cphwd_psglue_conn_db
  C. tcp_f2f_ports
  D. udp_f2f_conns
  A. f2f_addresses

• Question 128:

  Which command shows the proxy arp configuration on the firewall?

  A. show arp
  B. fw ctl arp
  C. show proxy arp
  D. arp –s
  B. fw ctl arp

  ---

  Reference: https://sc1.checkpoint.com/documents/R80.40/WebAdminGuides/EN/CP_R80.40_CLI_ReferenceGuide/Content/Topics-CLIG/FWG/fw-ctl-arp.htm

• Question 129:

  Which kernel table stores information about NAT connections?

  A. connections
  B. tab_nat_conn
  C. xlate
  D. fwx_alloc
  D. fwx_alloc

  ---

  Reference: https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=andsolutionid=sk32224

• Question 130:

  Joey's implementing a new R80.10 firewall cluster into the network. During the implementation he notices that the cluster object is in error state in SmartConsole. He tries to figure out the cause of the problem and runs a ClusterXL kernel

  debug with command: ‘fw ctl debug –m cluster + stat pnote conf ccp’

  ClusterXL kernel debug shows him following info: fwha_set_new_local_state: Old version HA machines exist around so prevent state change to READY.

  How can he solve the problem?

  A. cphaconf cluster_id set
  B. cphaprob mmagic
  C. Connect with GuiDBedit Tool to Security Management Server. Go to Table – Network Objects – network_objects. Select the relevant R80.10 Cluster object. Go to Search menu – Find – paste mac_magic. Right-click on the mac_magic the object – select Edit… and change the value to 254. Save changes and install policy.
  D. Connect with GuiDBedit Tool to Security Management Server. Go to Table – Network Objects – network_objects. Select the relevant R80.10 Cluster object. Go to Search menu – Find – paste cluster_magic. Right-click on the cluster_magic the object – select Edit… and change the value between 1 and 253. Save changes and install policy.
  D. Connect with GuiDBedit Tool to Security Management Server. Go to Table – Network Objects – network_objects. Select the relevant R80.10 Cluster object. Go to Search menu – Find – paste cluster_magic. Right-click on the cluster_magic the object – select Edit… and change the value between 1 and 253. Save changes and install policy.

  ---

  Reference: https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=andsolutionid=sk25977