CheckPoint Checkpoint Certifications 156-215.80 Questions & Answers

• Question 221:

  Which of the following is NOT an integral part of VPN communication within a network?

  A. VPN key

  B. VPN community

  C. VPN trust entities

  D. VPN domain

  Correct Answer: A

  1.

  VPN key (to not be confused with pre-shared key that is used for authentication).

  2.

  VPN trust entities, such as a Check Point Internal Certificate Authority (ICA). The ICA is part of the Check Point suite used for creating SIC trusted connection between Security Gateways, authenticating administrators and third party servers. The ICA provides certificates for internal Security Gateways and remote access clients which negotiate the VPN link.

  3.

  VPN Domain - A group of computers and networks connected to a VPN tunnel by one VPN gateway that handles encryption and protects the VPN Domain members.

  4.

  VPN Community - A named collection of VPN domains, each protected by a VPN gateway.

  Reference: http://sc1.checkpoint.com/documents/R77/CP_R77_VPN_AdminGuide/13868.htm

• Question 222:

  From SecureXL perspective, what are the tree paths of traffic flow:

  A. Initial Path; Medium Path; Accelerated Path

  B. Layer Path; Blade Path; Rule Path

  C. Firewall Path; Accept Path; Drop Path

  D. Firewall Path; Accelerated Path; Medium Path

  Correct Answer: D

  Reference: https://sc1.checkpoint.com/documents/R76/CP_R76_Firewall_WebAdmin/92711.htm

• Question 223:

  You are asked to check the status of several user-mode processes on the management server and gateway. Which of the following processes can only be seen on a Management Server?

  A. fwd

  B. fwm

  C. cpd

  D. cpwd

  Correct Answer: B

• Question 224:

  R80.10 management server can manage gateways with which versions installed?

  A. Versions R77 and higher

  B. Versions R76 and higher

  C. Versions R75.20 and higher

  D. Version R75 and higher

  Correct Answer: B

  Reference: https://supportcenter.checkpoint.com/supportcenter/portal? eventSubmit_doGoviewsolutiondetails=andsolutionid=sk113113

• Question 225:

  You want to store the GAiA configuration in a file for later reference. What command should you use?

  A. write mem

  B. show config -f

  C. save config -o

  D. save configuration

  Correct Answer: D

  Reference: https://supportcenter.checkpoint.com/supportcenter/portal? eventSubmit_doGoviewsolutiondetails=andsolutionid=sk102234

• Question 226:

  Traffic from source 192.168.1.1 is going to www.google.com. The Application Control Blade on the gateway is inspecting the traffic. Assuming acceleration is enable which path is handling the traffic?

  A. Slow Path

  B. Medium Path

  C. Fast Path

  D. Accelerated Path

  Correct Answer: A

• Question 227:

  Using R80 Smart Console, what does a "pencil icon" in a rule mean?

  A. I have changed this rule

  B. Someone else has changed this rule

  C. This rule is managed by check point's SOC

  D. This rule can't be changed as it's an implied rule

  Correct Answer: A

• Question 228:

  Which method below is NOT one of the ways to communicate using the Management API's?

  A. Typing API commands using the "mgmt_cli" command

  B. Typing API commands from a dialog box inside the SmartConsole GUI application

  C. Typing API commands using Gaia's secure shell (clash)19+

  D. Sending API commands over an http connection using web-services

  Correct Answer: D

  Reference: https://sc1.checkpoint.com/documents/R80/APIs/#introduction

• Question 229:

  Session unique identifiers are passed to the web api using which http header option?

  A. X-chkp-sid

  B. Accept-Charset

  C. Proxy-Authorization

  D. Application

  Correct Answer: C

• Question 230:

  What is the main difference between Threat Extraction and Threat Emulation?

  A. Threat Emulation never delivers a file and takes more than 3 minutes to complete

  B. Threat Extraction always delivers a file and takes less than a second to complete

  C. Threat Emulation never delivers a file that takes less than a second to complete

  D. Threat Extraction never delivers a file and takes more than 3 minutes to complete

  Correct Answer: B