CheckPoint Checkpoint Certifications 156-215.81.20 Questions & Answers

• Question 401:

  To fully enable Dynamic Dispatcher on a Security Gateway:

  A. run fw ctl multik set_mode 9 in Expert mode and then reboot

  B. Using cpconfig, update the Dynamic Dispatcher value to "full" under the CoreXL menu

  C. Edit /proc/interrupts to include multik set_mode 1 at the bottom of the file, save, and reboot

  D. run fw ctl multik set_mode 1 in Expert mode and then reboot

  Correct Answer: A

  Reference: https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=andsolutionid=sk105261#Configuration%20R80.10

• Question 402:

  What are types of Check Point APIs available currently as part of R80.10 code?

  A. Security Gateway API, Management API, Threat Prevention API and Identity Awareness Web Services API

  B. Management API, Threat Prevention API, Identity Awareness Web Services API and OPSEC SDK API

  C. OSE API, OPSEC SDK API, Threat Prevention API and Policy Editor API

  D. CPMI API, Management API, Threat Prevention API and Identity Awareness Web Services API

  Correct Answer: B

  Reference: http://dl3.checkpoint.com/paid/29/29532b9eec50d0a947719ae631f640d0/CP_R80_CheckPoint_API_ReferenceGuide.pdf?HashKey=1517088487_4c0acda205460a92f44c83d399826a7bandxtn=.pdf

• Question 403:

  What is the purpose of Priority Delta in VRRP?

  A. When a box is up, Effective Priority = Priority + Priority Delta

  B. When an Interface is up, Effective Priority = Priority + Priority Delta

  C. When an Interface fails, Effective Priority = Priority - Priority Delta

  D. When a box fails, Effective Priority = Priority - Priority Delta

  Correct Answer: C

  Reference: https://sc1.checkpoint.com/documents/R76/CP_R76_Gaia_WebAdmin/87911.htm

• Question 404:

  The Firewall kernel is replicated multiple times, therefore:

  A. The Firewall kernel only touches the packet if the connection is accelerated

  B. The Firewall can run different policies per core

  C. The Firewall kernel is replicated only with new connections and deletes itself once the connection times out

  D. The Firewall can run the same policy on all cores

  Correct Answer: D

• Question 405:

  There are 4 ways to use the Management API for creating host object with R80 Management API. Which one is NOT correct?

  A. Using Web Services

  B. Using Mgmt_cli tool

  C. Using CLISH

  D. Using SmartConsole GUI console

  Correct Answer: C

  Reference: http://dl3.checkpoint.com/paid/29/29532b9eec50d0a947719ae631f640d0/CP_R80_CheckPoint_API_ReferenceGuide.pdf?HashKey=1517088487_4c0acda205460a92f44c83d399826a7bandxtn=.pdf

• Question 406:

  Which the following type of authentication on Mobile Access can NOT be used as the first authentication method?

  A. Dynamic ID

  B. RADIUS

  C. Username and Password

  D. Certificate

  Correct Answer: A

  Reference: https://sc1.checkpoint.com/documents/R77/CP_R77_Mobile_Access_WebAdmin/41587.htm

• Question 407:

  Which command can you use to verify the number of active concurrent connections?

  A. fw conn all

  B. fw ctl pst pstat

  C. show all connections

  D. show connections

  Correct Answer: B

  Reference: https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=andsolutionid=sk103496

• Question 408:

  Which remote Access Solution is clientless?

  A. Checkpoint Mobile

  B. Endpoint Security Suite

  C. SecuRemote

  D. Mobile Access Portal

  Correct Answer: D

  Reference: https://sc1.checkpoint.com/documents/R77/CP_R77_Firewall_WebAdmin/92708.htm

• Question 409:

  What component of R80 Management is used for indexing?

  A. DBSync

  B. API Server

  C. fwm

  D. SOLR

  Correct Answer: D

  Reference: https://www.checkpoint.com/downloads/product-related/r80.10-mgmt-architecture-overview.pdf

• Question 410:

  Which NAT rules are prioritized first?

  A. Post-Automatic/Manual NAT rules

  B. Manual/Pre-Automatic NAT

  C. Automatic Hide NAT

  D. Automatic Static NAT

  Correct Answer: B