CheckPoint CCSM 156-115.80 Questions & Answers

• Question 41:

  What command, when combined with IPS traffic, will give you information that can be used to determine if adjustments can be made to improve performance and security?

  A. # fw ctl ips stats

  B. # $FWDIR/bin/get_ips_statistics.sh

  C. # $FWDIR/scripts/get_ips_statistics.sh

  D. > show ips all statistics

  Correct Answer: C

• Question 42:

  Which of the following commands does not initiate full synchronization?

  A. clusterXL_admin down –p

  B. clusterXL_admin up –p

  C. cphaprob –d faildevice –s problem report

  D. cphaprob –d faildevice –t 0 –s ok register

  Correct Answer: C

  Reference: https://sc1.checkpoint.com/documents/R80.10/WebAdminGuides/EN/ CP_R80.10_ClusterXL_AdminGuide/html_frameset.htm?topic=documents/R80.10/WebAdminGuides/EN/ CP_R80.10_ClusterXL_AdminGuide/162353

• Question 43:

  Which of the following services is NOT an option in the Content Awareness Blade?

  A. http

  B. ssh

  C. https

  D. smtp

  Correct Answer: B

  Reference: https://sc1.checkpoint.com/documents/R80.40/WebAdminGuides/EN/ CP_R80.40_NextGenSecurityGateway_Guide/Content/Topics-FWG/Content-Awareness-Blade.htm

• Question 44:

  When troubleshooting static NAT, you would follow all the steps below, EXCEPT:

  A. Verify NAT configuration

  B. Debug NAT

  C. Run "fw tab -t fwx_alloc"

  D. Run "fw ctl arp" command

  Correct Answer: C

• Question 45:

  When troubleshooting Hide NAT failure, what step should be taken after the NAT configuration has been verified?

  A. Verify that the gateway answers the ARP requests

  B. Run fw tab –t fwx_alloc to verify that the fwx_alloc table is not filled up

  C. Run fw ctl arp to verify that the static addresses are loaded

  D. Verify the NAT configuration

  Correct Answer: C

• Question 46:

  When an object is created via SmartConsole or the API server, a command is sent to which process?

  A. To the CPM process

  B. To the CPD process

  C. To the FWD process

  D. To the FWM process

  Correct Answer: A

  Reference: https://community.checkpoint.com/t5/Policy-Management/R80-x-Policy-Installation-Flowchart/ td-p/67458

• Question 47:

  Consider the IPv6 address: 2101:0DA0:080B:4114:0000:0000:0000:0001. According to IPv6 IP shortening rules, what address can this be shortened to?

  A. 2101:0DA0:080B:4114::8:0

  B. 2101:0DA0:80B:4114::0

  C. 2101:0DA0:080B:4114::8:1

  D. 2101:0DA0:80B:4114::1

  Correct Answer: D

• Question 48:

  Which command do you need to execute to insert fw monitor after TCP streaming (out) in the outbound chain using absolute position? Given the chain was 1ffffe0, choose the correct answer.

  A. fw monitor –po -0x1ffffe0

  B. fw monitor –po ox1ffffe0

  C. fw monitor –po 1ffffe0

  D. fw monitor –po -ox1ffffe0

  Correct Answer: A

• Question 49:

  When debugging object configurations in SmartConsole, which new Windows Environment Variable must be added?

  A. EMBEDDED_SDB_LOG

  B. EMBEDDED_CPSC_LOG

  C. EMBEDDED_DBS_log

  D. EMBEDDED_SCDB_LOG

  Correct Answer: A

• Question 50:

  Which of the following is true about Protocol Signatures?

  A. Enabling Protocol Signatures will restrict each protocol to its standard port.

  B. Signatures are pieces of information taken from both C2S packets that eventually identify the protocol

  C. Protocol signatures are supported on R77.30 and newer gateways

  D. Protocol signatures are enabled for all connections via the Global Properties menu

  Correct Answer: B