CheckPoint 156-115.80 Online Practice Questions and Exam Preparation

CheckPoint 156-115.80 Online Questions & Answers

• Question 71:

  Tom has been tasked to install Check Point R80 in a distributed deployment. Before Tom installs the systems this way, how many machines will he need if he does NOT include a SmartConsole machine in his calculations?

  A. One machine, but it needs to be installed using SecurePlatform for compatibility purposes
  B. One machine
  C. Two machines
  D. Three machines
  C. Two machines

• Question 72:

  When troubleshooting Hide NAT failure, what step should be taken after the NAT configuration has been verified?

  A. Verify that the gateway answers the ARP requests
  B. Run fw tab –t fwx_alloc to verify that the fwx_alloc table is not filled up
  C. Run fw ctl arp to verify that the static addresses are loaded
  D. Verify the NAT configuration
  C. Run fw ctl arp to verify that the static addresses are loaded

• Question 73:

  What is true about ike.elg file?

  A. It contains the name of the VPN communities on the local security gateway
  B. ike.elg is only present on the security manager
  C. It is a debug file that contains information relevant to IKE phase 1 and phase 2 exchange
  D. It is a binary file and needs a special app to open it.
  C. It is a debug file that contains information relevant to IKE phase 1 and phase 2 exchange

• Question 74:

  Which daemon would you debug if you have issues acquiring identities via identity sharing and identities with other gateways?

  A. pdpd
  B. wstlsd
  C. iad
  D. pepd
  A. pdpd

  ---

  Reference: https://sc1.checkpoint.com/documents/R76/CP_R76_IdentityAwareness_AdminGuide/66477.htm

• Question 75:

  What is enabled by the command "vpn debug mon"?

  A. statistics monitoring for vpn encrypted packets
  B. vpn daemon monitor mode
  C. ike monitor
  D. vpn debug mode
  C. ike monitor

• Question 76:

  Consider an IKE debug file that has been generated when debugging an issue with site to site VPN. What is the purpose of a NONCE?

  A. Randomly generated part of key generation
  B. Vendor ID and Remote Gateway ID
  C. Protocol 50 and 51 representations
  D. Fixed hex value of Phase 2 keys with PFS
  A. Randomly generated part of key generation

• Question 77:

  Which Check Point daemon, if it stops responding or goes down, results in connections from the SmartConsole to the Management Server failing?

  A. SMSD
  B. CPTA
  C. CPM
  D. FWD
  C. CPM

• Question 78:

  What ClusterXL mechanism is used to verify that the interfaces of other cluster members are UP and communicates the status of cluster members?

  A. PING
  B. CCP
  C. PPP
  D. HELLO
  B. CCP

• Question 79:

  Which command should be used to insert fw monitor before secxl_sync module?

  A. fw monitor –pi –secxl_sync –o capture.cap
  B. fw monitor –pl –secxl_sync –o capture.cap
  C. fw monitor –pO –secxl_sync –o capture.cap
  D. fw monitor –e “accept –pi –secxl_sync;” –o capture.cap
  A. fw monitor –pi –secxl_sync –o capture.cap

• Question 80:

  What file extension should be used with fw monitor to allow the output file to be imported and read in Wireshark?

  A. .cap
  B. .exe
  C. .tgz
  D. .pcap
  A. .cap