CheckPoint Checkpoint Certifications 156-215.80 Questions & Answers

• Question 191:

  Which of the following ClusterXL modes uses a non-unicast MAC address for the cluster IP address.

  A. High Availability

  B. Load Sharing Multicast

  C. Load Sharing Pivot

  D. Master/Backup

  Correct Answer: B

  :

  ClusterXL uses the Multicast mechanism to associate the virtual cluster IP addresses with all cluster

  members. By binding these IP addresses to a Multicast MAC address, it ensures that all packets sent to

  the cluster, acting as a gateway, will reach all members in the cluster.

  Reference:

  https://sc1.checkpoint.com/documents/R76/CP_R76_ClusterXL_AdminGuide/7292.htm

• Question 192:

  Fill in the blank: With the User Directory Software Blade, you can create R80 user definitions on a(an) ___________ Server.

  A. NT domain

  B. SMTP

  C. LDAP

  D. SecurID

  Correct Answer: C

  Reference: https://sc1.checkpoint.com/documents/R80/CP_R80_SecMGMT/html_frameset.htm? topic=documents/R80/CP_R80_SecMGMT/126197

• Question 193:

  Which of the following is NOT a component of a Distinguished Name?

  A. Organization Unit

  B. Country

  C. Common name

  D. User container

  Correct Answer: D

  Distinguished Name Components CN=common name, OU=organizational unit, O=organization, L=locality, ST=state or province, C=country name Reference: https://sc1.checkpoint.com/documents/R76/CP_R76_SecMan_WebAdmin/html_frameset.htm? topic=documents/R76/CP_R76_SecMan_WebAdmin/71950

• Question 194:

  An administrator is creating an IPsec site-to-site VPN between his corporate office and branch office. Both offices are protected by Check Point Security Gateway managed by the same Security Management Server. While configuring the VPN community to specify the pre-shared secret the administrator found that the check box to enable pre-shared secret is shared and cannot be enabled. Why does it not allow him to specify the pre-shared secret?

  A. IPsec VPN blade should be enabled on both Security Gateway.

  B. Pre-shared can only be used while creating a VPN between a third party vendor and Check Point Security Gateway.

  C. Certificate based Authentication is the only authentication method available between two Security Gateway managed by the same SMS.

  D. The Security Gateways are pre-R75.40.

  Correct Answer: C

• Question 195:

  ABC Corp., and have recently returned from a training course on Check Point's new advanced R80 management platform. You are presenting an in-house R80 Management to the other administrators in ABC Corp.

  

  How will you describe the new "Publish" button in R80 Management Console?

  A. The Publish button takes any changes an administrator has made in their management session, publishes a copy to the Check Point of R80, and then saves it to the R80 database.

  B. The Publish button takes any changes an administrator has made in their management session and publishes a copy to the Check Point Cloud of R80 and but does not save it to the R80

  C. The Publish button makes any changes an administrator has made in their management session visible to all other administrator sessions and saves it to the Database.

  D. The Publish button makes any changes an administrator has made in their management session visible to the new Unified Policy session and saves it to the Database.

  Correct Answer: C

  To make your changes available to other administrators, and to save the database before installing a policy, you must publish the session. When you publish a session, a new database version is created.

  Reference: https://sc1.checkpoint.com/documents/R80/CP_R80_SecMGMT/html_frameset.htm? topic=documents/R80/CP_R80_SecMGMT/126197

• Question 196:

  Which product correlates logs and detects security threats, providing a centralized display of potential attack patterns from all network devices?

  A. SmartView Monitor

  B. SmartEvent

  C. SmartUpdate

  D. SmartDashboard

  Correct Answer: B

  SmartEvent correlates logs from all Check Point enforcement points, including end-points, to identify suspicious activity from the clutter. Rapid data analysis and custom event logs immediately alert administrators to anomalous behavior such as someone attempting to use the same credential in multiple geographies simultaneously.

  Reference: https://www.checkpoint.com/products/smartevent/

• Question 197:

  What will be the effect of running the following command on the Security Management Server?

  

  A. Remove the installed Security Policy.

  B. Remove the local ACL lists.

  C. No effect.

  D. Reset SIC on all gateways.

  Correct Answer: A

  This command uninstall actual security policy (already installed)

  Reference: https://sc1.checkpoint.com/documents/R77/ CP_R77_SecurityGatewayTech_WebAdmin/6751.htm

• Question 198:

  Which VPN routing option uses VPN routing for every connection a satellite gateway handles?

  A. To satellites through center only

  B. To center only

  C. To center and to other satellites through center

  D. To center, or through the center to other satellites, to internet and other VPN targets

  Correct Answer: D

  On the VPN Routing page, enable the VPN routing for satellites section, by selecting one of these options:

  1.

  To center and to other Satellites through center; this allows connectivity between Gateways; for example, if the spoke Gateways are DAIP Gateways, and the hub is a Gateway with a static IP address

  2.

  To center, or through the center to other satellites, to Internet and other VPN targets; this allows connectivity between the Gateways, as well as the ability to inspect all communication passing through the hub to the Internet.

  Reference: https://supportcenter.checkpoint.com/supportcenter/portal? eventSubmit_doGoviewsolutiondetails=andsolutionid=sk31021

• Question 199:

  Where can you trigger a failover of the cluster members?

  1.

  Log in to Security Gateway CLI and run command clusterXL_admin down.

  2.

  In SmartView Monitor right-click the Security Gateway member and select Cluster member down.

  3.

  Log into Security Gateway CLI and run command cphaprob down.

  A. 1, 2, and 3

  B. 2 and 3

  C. 1 and 2

  D. 1 and 3

  Correct Answer: C

  How to Initiate Failover Reference: https://sc1.checkpoint.com/documents/R76/CP_R76_ClusterXL_AdminGuide/7298.htm

  

• Question 200:

  Which utility allows you to configure the DHCP service on GAIA from the command line?

  A. ifconfig

  B. dhcp_cfg

  C. sysconfig

  D. cpconfig

  Correct Answer: C

  Sysconfig Configuration Options

  

  Refrence: https://sc1.checkpoint.com/documents/R76/CP_R76_Splat_AdminGuide/51548.htm

  NOTE:Question must be wrong because no answer is possible for GAIA system, this must be SPLAT

  version.

  DHCP CLI configuration for GAIA reference: https://sc1.checkpoint.com/documents/R76/

  CP_R76_Gaia_WebAdmin/73181.htm#o80096