CheckPoint 156-115.80 Online Practice Questions and Exam Preparation

CheckPoint 156-115.80 Online Questions & Answers

• Question 131:

  Which kernel debug flag should you use to troubleshoot NAT connections?

  A. fw ctl debug + xlate xltrc nat table
  B. fw ctl debug + xltrc xlate nat conn
  C. fw ctl debug + xlate xltrc nat conn drop
  D. fw ctl debug + fwx_alloc nat conn drop
  C. fw ctl debug + xlate xltrc nat conn drop

• Question 132:

  Which Threat Prevention daemon is the core Threat Emulation engine and responsible for emulation files and communications with Threat Cloud?

  A. ctasd
  B. in.msd
  C. ted
  D. scrub
  C. ted

  ---

  Reference: https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=andsolutionid=sk97638

• Question 133:

  You run "cat/proc/smt_status" on your security gateway and the output shows `Soft Disable'. How is your system configured in reference to hyper-threading?

  A. Hyper-threading is disabled in BIOS and cpconfig
  B. Hyper-threading is enabled in BIOS but disabled in cpconfig
  C. Hyper-threading is disabled in BIOS but enabled in cpconfig
  D. Your system does not support Hyper-threading
  B. Hyper-threading is enabled in BIOS but disabled in cpconfig

  ---

  Reference: https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=andsolutionid=sk93000

• Question 134:

  The customer is using Check Point appliances that were configured long ago by third-party administrators. Current policy includes different enabled IPS protections and Bypass Under Load function. Bypass Under Load is configured to disable IPS inspections if CPU and Memory usage is higher than 80%. The Customer reports that IPS protections are not working at all regardless of CPU and Memory usage. What is a possible reason of such behavior?

  A. The kernel parameter ids_assume_stress is set to 0
  B. The kernel parameter ids_assume_stress is set to 1
  C. The kernel parameter ids_tolerance_no_stress is set to 10
  D. The kernel parameter ids_tolerance_stress is set to 10
  D. The kernel parameter ids_tolerance_stress is set to 10

• Question 135:

  Which command query will search the database for instances of the following FW-Corporate object: A. select name from dleobjectderef_data where name = `FW-Corporate';

  B. select data from dleobjectderef_data where name = `FW-Corporate';
  C. select object `FW-Corporate' from dleobjectderef_data;
  D. select name from dleobjectderef_table where name = `FW-Corporate';
  A

• Question 136:

  The CPSizeMe script will run how long by default?

  A. 48 hours
  B. 12 hours
  C. 8 hours
  D. 24 hours
  D. 24 hours

  ---

  Reference: https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=andsolutionid=sk88160#:~:text=Running%20cpsizeme,-To%20see%20theandtext=By%20default%2C%20the%20script%20will%20run %20for%2024%20hours.

• Question 137:

  What does CMI stand for in relation to the Access Control Policy?

  A. Content Matching Infrastructure
  B. Content Management Interface
  C. Context Management Infrastructure
  D. Context Manipulation Interface
  C. Context Management Infrastructure

  ---

  Reference: https://community.checkpoint.com/thread/6199-classifying-traffic-to-match-unified-policy-column-objects

• Question 138:

  Which Check Point utility should be used to assist in analyzing the output of vpn and ike debug?

  A. cpview
  B. cpinfo
  C. ikeview
  D. vpnview
  C. ikeview

  ---

  Reference: https://sc1.checkpoint.com/documents/R76/CP_R76_Gaia_WebAdmin/12467.htm

• Question 139:

  Vanessa wants to configure CoreXL on an Open server. The server has a single four core CPU with 16GB of RAM and the Performance Pack is running. Which command should Vanessa use to change assigned CPUs to interface eth1?

  A. fw ctl affinity –s
  B. fw ctl multik stat
  C. sim affinity –s
  D. sim affinity –s –i eth 1 0
  D. sim affinity –s –i eth 1 0

• Question 140:

  Which of the following features is supported in Check Point's implementation of IPv6?

  A. Security Servers
  B. QoS
  C. ClusterXL High Availability
  D. SAM
  C. ClusterXL High Availability

  ---

  Reference: https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=andsolutionid=sk39374