CheckPoint 156-315.80 Online Practice Questions and Exam Preparation

CheckPoint 156-315.80 Online Questions & Answers

• Question 121:

  What ports are used for SmartConsole to connect to the Security Management Server?

  A. CPMI (18190)
  B. CPM (19009), CPMI (18190) and https (443)
  C. CPM (19009), CPMI (18190) and CPD (18191)
  D. ICA_Pull (18210), CPMI (18190) and https (443)
  A. CPMI (18190)

• Question 122:

  What level of CPU load on a Secure Network Distributor would indicate that another may be necessary?

  A. Idle
  B. USR
  C. SYS
  D. Wait
  A. Idle

• Question 123:

  Which encryption algorithm is the least secured?

  A. AES-128
  B. AES-256
  C. DES
  D. 3DES
  C. DES

• Question 124:

  What feature allows Remote-access VPN users to access resources across a site-to-site VPN tunnel?

  A. Specific VPN Communities
  B. Remote Access VPN Switch
  C. Mobile Access VPN Domain
  D. Network Access VPN Domain
  B. Remote Access VPN Switch

  ---

  Reference: https://dl3.checkpoint.com/paid/39/39536bdcd1bf92caa4122e7111fa83c9/CP_R80.20_RemoteAccessVPN_AdminGuide.pdf?HashKey=1624989067_b64e8891dc584eed21f8244dd4e94415andxtn=.pdf

• Question 125:

  Which of the following process pulls application monitoring status?

  A. fwd
  B. fwm
  C. cpwd
  D. cpd
  D. cpd

• Question 126:

  What statement best describes the Proxy ARP feature for Manual NAT in R80.10?

  A. Automatic proxy ARP configuration can be enabled
  B. Translate Destination on Client Side should be configured
  C. fw ctl proxy should be configured
  D. local.arp file must always be configured
  D. local.arp file must always be configured

• Question 127:

  Full synchronization between cluster members is handled by Firewall Kernel. Which port is used for this?

  A. UDP port 265
  B. TCP port 265
  C. UDP port 256
  D. TCP port 256
  D. TCP port 256

  ---

  Synchronization works in two modes:

  Full Sync transfers all Security Gateway kernel table information from one cluster member to another. It is handled by the fwd daemon using an encrypted TCP connection on port 256. Delta Sync transfers changes in the kernel tables

  between cluster members. Delta sync is handled by the Security Gateway kernel using UDP connections on port 8116.

  Reference: https://sc1.checkpoint.com/documents/R80.10/WebAdminGuides/EN/CP_R80.10_ClusterXL_AdminGuide/html_frameset.htm?topic=documents/R80.10/WebAdminGuides/EN/CP_R80.10_ClusterXL_AdminGuide/7288

• Question 128:

  On R80.10 the IPS Blade is managed by:

  A. Threat Protection policy
  B. Anti-Bot Blade
  C. Threat Prevention policy
  D. Layers on Firewall policy
  C. Threat Prevention policy

  ---

  Reference: https://www.checkpoint.com/downloads/product-related/r80.10-mgmt-architecture-overview.pdf

• Question 129:

  Which view is NOT a valid CPVIEW view?

  A. IDA
  B. RAD
  C. PDP
  D. VPN
  C. PDP

• Question 130:

  Which statement is true regarding redundancy?

  A. System Administrators know when their cluster has failed over and can also see why it failed over by using the cphaprob -f if command.
  B. ClusterXL offers three different Load Sharing solutions: Unicast, Broadcast, and Multicast.
  C. Machines in a ClusterXL High Availability configuration must be synchronized.
  D. Both ClusterXL and VRRP are fully supported by Gaia and available to all Check Point appliances, open servers, and virtualized environments.
  D. Both ClusterXL and VRRP are fully supported by Gaia and available to all Check Point appliances, open servers, and virtualized environments.