CheckPoint CCSE 156-315.80 Questions & Answers

• Question 1:

  What command is used to manually failover a Multi-Version Cluster during the upgrade?

  A. clusterXL_admin down in Expert Mode

  B. clusterXL_admin down in Clish

  C. set cluster member state down in Clish

  D. set cluster down in Expert Mode

  Correct Answer: B

• Question 2:

  What destination versions are supported for a Multi-Version Cluster Upgrade?

  A. R80.40 and later

  B. R76 and later

  C. R70 and Later

  D. R80.10 and Later

  Correct Answer: D

  Reference:

  https://sc1.checkpoint.com/documents/R81/WebAdminGuides/EN/

  CP_R81_Installation_and_Upgrade_Guide/Topics-IUG/MVC-Upgrade-Supported-Versions.htm

• Question 3:

  What is the benefit of Manual NAT over Automatic NAT?

  A. If you create a new Security Policy, the Manual NAT rules will be transferred to this new policy.

  B. There is no benefit since Automatic NAT has in any case higher priority over Manual NAT

  C. You have the full control about the priority of the NAT rules

  D. On IPSO and GAIA Gateways, it is handled in a stateful manner

  Correct Answer: C

• Question 4:

  Can Check Point and Third-party Gateways establish a certificate-based Site-to-Site VPN tunnel?

  A. Yes, but they need to have a mutually trusted certificate authority

  B. Yes, but they have to have a pre-shared secret key

  C. No, they cannot share certificate authorities

  D. No, Certificate based VPNs are only possible between Check Point devices

  Correct Answer: A

  Reference: https://community.checkpoint.com/t5/Security-Gateways/HowTo-Set-Up-Certificate-Based-VPNs-withCheck-Point-Appliances/td-p/73299

• Question 5:

  What is the command to check the status of the SmartEvent Server?

  A. fw ctl get int cpsemd_stat

  B. cp_conf get_stat cpsead

  C. fw ctl stat cpsead

  D. cpstat cpsead

  Correct Answer: D

  Reference: https://supportcenter.checkpoint.com/supportcenter/portal? eventSubmit_doGoviewsolutiondetails=andsolutionid=sk113265

• Question 6:

  While using the Gaia CLI, what is the correct command to publish changes to the management server?

  A. json publish

  B. mgmt publish

  C. mgmt_cli commit

  D. commit

  Correct Answer: B

• Question 7:

  In Threat Prevention, you can create new or clone profiles but you CANNOT change the out-of-the-box profiles of:

  A. Basic, Optimized, Strict

  B. Basic, Optimized, Severe

  C. General, Escalation, Severe

  D. General, purposed, Strict

  Correct Answer: A

  Reference: https://sc1.checkpoint.com/documents/R80.30/WebAdminGuides/EN/ CP_R80.30_ThreatPrevention_AdminGuide/138383.htm

• Question 8:

  What traffic does the Anti-bot feature block?

  A. Command and Control traffic from hosts that have been identified as infected

  B. Command and Control traffic to servers with reputation for hosting malware

  C. Network traffic that is directed to unknown or malicious servers

  D. Network traffic to hosts that have been identified as infected

  Correct Answer: A

  Reference: https://sc1.checkpoint.com/documents/R76/CP_R76_AntiBotAntiVirus_AdminGuide/index.html

• Question 9:

  Which of the following processes pulls application monitoring status from gateways?

  A. cpm

  B. fwm

  C. cpwd

  D. cpd

  Correct Answer: D

  Reference: https://sc1.checkpoint.com/documents/R76/CP_R76_SmartViewMonitor_AdminGuide/17666.htm

• Question 10:

  What is the command used to activated Multi-Version Cluster mode?

  A. set cluster member mvc on in Clish

  B. set mvc on on Clish

  C. set cluster MVC on in Expert Mode

  D. set cluster mvc on in Expert Mode

  Correct Answer: A

  Reference: https://sc1.checkpoint.com/documents/R81/WebAdminGuides/EN/CP_R81_ClusterXL_AdminGuide/ Topics-CXLG/Configuring-Multi-Version-Cluster-Mechanism.htm