CheckPoint Checkpoint Certifications 156-215.80 Questions & Answers

• Question 271:

  Which command can you use to verify the number of active concurrent connections?

  A. fw conn all

  B. fw ctl pst pstat

  C. show all connections

  D. show connections

  Correct Answer: B

  Reference: https://supportcenter.checkpoint.com/supportcenter/portal? eventSubmit_doGoviewsolutiondetails=andsolutionid=sk103496

• Question 272:

  Which remote Access Solution is clientless?

  A. Checkpoint Mobile

  B. Endpoint Security Suite

  C. SecuRemote

  D. Mobile Access Portal

  Correct Answer: D

  Reference: https://sc1.checkpoint.com/documents/R77/CP_R77_Firewall_WebAdmin/92708.htm

• Question 273:

  To fully enable Dynamic Dispatcher on a Security Gateway:

  A. run fw ctl multik set_mode 9 in Expert mode and then reboot

  B. Using cpconfig, update the Dynamic Dispatcher value to "full" under the CoreXL menu

  C. Edit /proc/interrupts to include multik set_mode 1 at the bottom of the file, save, and reboot

  D. run fw ctl multik set_mode 1 in Expert mode and then reboot

  Correct Answer: A

  Reference: https://supportcenter.checkpoint.com/supportcenter/portal? eventSubmit_doGoviewsolutiondetails=andsolutionid=sk105261#Configuration%20R80.10

• Question 274:

  What are types of Check Point APIs available currently as part of R80.10 code?

  A. Security Gateway API, Management API, Threat Prevention API and Identity Awareness Web Services API

  B. Management API, Threat Prevention API, Identity Awareness Web Services API and OPSEC SDK API

  C. OSE API, OPSEC SDK API, Threat Prevention API and Policy Editor API

  D. CPMI API, Management API, Threat Prevention API and Identity Awareness Web Services API

  Correct Answer: B

  Reference: http://dl3.checkpoint.com/paid/29/29532b9eec50d0a947719ae631f640d0/ CP_R80_CheckPoint_API_ReferenceGuide.pdf? HashKey=1517088487_4c0acda205460a92f44c83d399826a7bandxtn=.pdf

• Question 275:

  What is the purpose of Priority Delta in VRRP?

  A. When a box is up, Effective Priority = Priority + Priority Delta

  B. When an Interface is up, Effective Priority = Priority + Priority Delta

  C. When an Interface fails, Effective Priority = Priority - Priority Delta

  D. When a box fails, Effective Priority = Priority - Priority Delta

  Correct Answer: C

  Reference: https://sc1.checkpoint.com/documents/R76/CP_R76_Gaia_WebAdmin/87911.htm

• Question 276:

  The Firewall kernel is replicated multiple times, therefore:

  A. The Firewall kernel only touches the packet if the connection is accelerated

  B. The Firewall can run different policies per core

  C. The Firewall kernel is replicated only with new connections and deletes itself once the connection times out D. The Firewall can run the same policy on all cores

  Correct Answer: D

• Question 277:

  There are 4 ways to use the Management API for creating host object with R80 Management API. Which one is NOT correct?

  A. Using Web Services

  B. Using Mgmt_cli tool

  C. Using CLISH

  D. Using SmartConsole GUI console

  Correct Answer: C

  Reference: http://dl3.checkpoint.com/paid/29/29532b9eec50d0a947719ae631f640d0/ CP_R80_CheckPoint_API_ReferenceGuide.pdf? HashKey=1517088487_4c0acda205460a92f44c83d399826a7bandxtn=.pdf

• Question 278:

  Which component functions as the Internal Certificate Authority for R77?

  A. Security Gateway

  B. Management Server

  C. Policy Server

  D. SmartLSM

  Correct Answer: B

• Question 279:

  Check Point APIs allow system engineers and developers to make changes to their organization's security policy with CLI tools and Web Services for all of the following except:

  A. Create new dashboards to manage 3rd party task

  B. Create products that use and enhance 3rd party solutions

  C. Execute automated scripts to perform common tasks

  D. Create products that use and enhance the Check Point Solution

  Correct Answer: A

  Reference: http://dl3.checkpoint.com/paid/29/29532b9eec50d0a947719ae631f640d0/ CP_R80_CheckPoint_API_ReferenceGuide.pdf? HashKey=1517081623_70199443034f806cf2dd0a7ba15f201candxtn=.pdf

• Question 280:

  In what way are SSL VPN and IPSec VPN different?

  A. SSL VPN is using HTTPS in addition to IKE, whereas IPSec VPN is clientless

  B. SSL VPN adds an extra VPN header to the packet, IPSec VPN does not

  C. IPSec VPN does not support two factor authentication, SSL VPN does support this

  D. IPSec VPN uses an additional virtual adapter, SSL VPN uses the client network adapter only

  Correct Answer: D