CheckPoint 156-115.80 Online Practice Questions and Exam Preparation

CheckPoint 156-115.80 Online Questions & Answers

• Question 81:

  You verified that Performance Pack is disabled and need to distribute the affinity interfaces. What command would you run to use static affinity to balance the interfaces between the SND cores?

  A. cpmq set
  B. sim affinity -s
  C. fw ctl affinity -a -l -v
  D. fw ctl affinity -s
  C. fw ctl affinity -a -l -v

• Question 82:

  Which of the following services is NOT an option in the Content Awareness Blade?

  A. http
  B. ssh
  C. https
  D. smtp
  B. ssh

  ---

  Reference: https://sc1.checkpoint.com/documents/R80.40/WebAdminGuides/EN/CP_R80.40_NextGenSecurityGateway_Guide/Content/Topics-FWG/Content-Awareness-Blade.htm

• Question 83:

  After determining that the IPS Blade is causing high resource utilization in the gateway, which would be an appropriate strategy to improve IPS performance?

  A. Enabling CoreXL
  B. Enable Bypass mode
  C. Disabling SecureXL
  D. Enabling SecureXL
  A. Enabling CoreXL

• Question 84:

  You have configured SecureXL NAT templates with the "fw ctl set" command. You check configuration and ensure that NAT templates were enabled. After an accidental reboot, you issue "fwaccel stat" and noticed that NAT Templates are not enabled. You need to permanently enable SecureXL NAT templates. What should you do?

  A. Set NAT Templates with "fwaccel templates NAT" command and save configuration with "save config"
  B. Enable NAT Templates again with "fw ctl set" and save configuration with "save config"
  C. Enable NAT Templates again with "fw ctl set" and edit appropriate parameters in $FWDIR/boot/modules/fwkern.conf
  D. Edit appropriate parameters in $FWDIR/boot/modules/fwkern.conf
  B. Enable NAT Templates again with "fw ctl set" and save configuration with "save config"

• Question 85:

  What is the default setting and minimum value of the Sync tick timer?

  A. 500ms
  B. 1000ms
  C. 100ms
  D. 1500ms
  C. 100ms

  ---

  Reference: https://sc1.checkpoint.com/documents/R76/CP_R76_ClusterXL_AdminGuide/7298.htm

• Question 86:

  Which command(s) can be used to set up 5 core files per process?

  A. set core-dump per_process 5 save config
  B. set core-dump per_process amount = 5 save config
  C. set core-dump per_process 5
  D. add core-dump per_process 5 save config
  A. set core-dump per_process 5 save config

  ---

  Reference: https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=andsolutionid=sk92764

• Question 87:

  Which command would show you the status of the clustered interfaces as well as the virtual interfaces?

  A. cphaprob –i list
  B. cphaprob –i if
  C. cphaprob –a if
  D. cphaprob if stat
  C. cphaprob –a if

  ---

  Reference: https://sc1.checkpoint.com/documents/R76/CP_R76_ClusterXL_AdminGuide/7298.htm

• Question 88:

  An administrator is creating a new site-to-site VPN connection. The agreed settings are AES256 and SHA256. If Elliptic Curve type transforms are required then what can be specifically configured to achieve this level of security?

  A. Protocol 50 with AES
  B. Diffie-Hellman Group 20
  C. Perfect Forward Secrecy
  D. AH should replace ESP
  B. Diffie-Hellman Group 20

  ---

  Reference: https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=andsolutionid=sk27054

• Question 89:

  The pepd and pdpd daemons are used by which Software blade?

  A. Identity Awareness
  B. DLP
  C. URL Filtering
  D. Application Control
  A. Identity Awareness

• Question 90:

  Which daemon is responsible for anti-spam?

  A. cpmd
  B. ctasd
  C. ctmd
  D. cpemd
  B. ctasd

  ---

  Reference: https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=andsolutionid=sk97638