CheckPoint Checkpoint Certifications 156-315.80 Questions & Answers

• Question 151:

  Which one of these features is NOT associated with the Check Point URL Filtering and Application Control Blade?

  A. Detects and blocks malware by correlating multiple detection engines before users are affected.

  B. Configure rules to limit the available network bandwidth for specified users or groups.

  C. Use UserCheck to help users understand that certain websites are against the company's security policy.

  D. Make rules to allow or block applications and Internet sites for individual applications, categories, and risk levels.

  Correct Answer: A

  Reference: https://sc1.checkpoint.com/documents/R76/CP_R76_AppControl_WebAdmin/60902.htm

• Question 152:

  What is a feature that enables VPN connections to successfully maintain a private and secure VPN session without employing Stateful Inspection?

  A. Stateful Mode

  B. VPN Routing Mode

  C. Wire Mode

  D. Stateless Mode

  Correct Answer: C

  Wire Mode is a VPN-1 NGX feature that enables VPN connections to successfully fail over, bypassing Security Gateway enforcement. This improves performance and reduces downtime. Based on a trusted source and destination, Wire Mode uses internal interfaces and VPN Communities to maintain a private and secure VPN session, without employing Stateful Inspection. Since Stateful Inspection no longer takes place, dynamic-routing protocols that do not survive state verification in non-Wire Mode configurations can now be deployed. The VPN connection is no different from any other connections along a dedicated wire, thus the meaning of "Wire Mode".

  Reference: https://supportcenter.checkpoint.com/supportcenter/portal? eventSubmit_doGoviewsolutiondetails=andsolutionid=sk30974

• Question 153:

  Which command will allow you to see the interface status?

  A. cphaprob interface

  B. cphaprob -I interface

  C. cphaprob -a if

  D. cphaprob stat

  Correct Answer: C

  Reference: https://sc1.checkpoint.com/documents/R76/CP_R76_ClusterXL_AdminGuide/7298.htm

• Question 154:

  Which command can you use to enable or disable multi-queue per interface?

  A. cpmq set

  B. Cpmqueue set

  C. Cpmq config

  D. St cpmq enable

  Correct Answer: A

  Reference: https://sc1.checkpoint.com/documents/R76/ CP_R76_PerformanceTuning_WebAdmin/93689.htm

• Question 155:

  To help SmartEvent determine whether events originated internally or externally you must define using the Initial Settings under General Settings in the Policy Tab. How many options are available to calculate the traffic direction?

  A. 5 Network; Host; Objects; Services; API

  B. 3 Incoming; Outgoing; Network

  C. 2 Internal; External

  D. 4 Incoming; Outgoing; Internal; Other

  Correct Answer: D

  Reference: http://dl3.checkpoint.com/paid/21/CP_R76_SmartEventIntro_AdminGuide.pdf? HashKey=1538417023_7cb74dfe0e109c21f130f556d419faafandxtn=.pdf

• Question 156:

  There are 4 ways to use the Management API for creating host object with R80 Management API. Which one is NOT correct?

  A. Using Web Services

  B. Using Mgmt_cli tool

  C. Using CLISH

  D. Using SmartConsole GUI console

  E. Events are collected with SmartWorkflow from Trouble Ticket systems

  Correct Answer: E

  Reference: https://sc1.checkpoint.com/documents/R80/APIs/#introduction%20

• Question 157:

  CoreXL is supported when one of the following features is enabled:

  A. Route-based VPN

  B. IPS

  C. IPv6

  D. Overlapping NAT

  Correct Answer: B

  CoreXL does not support Check Point Suite with these features:

  1.

  Check Point QoS (Quality of Service)

  2.

  Route-based VPN

  3.

  IPv6 on IPSO

  4.

  Overlapping NAT

  Reference: https://sc1.checkpoint.com/documents/R76/ CP_R76_PerformanceTuning_WebAdmin/6731.htm

• Question 158:

  You noticed that CPU cores on the Security Gateway are usually 100% utilized and many packets were dropped. You don't have a budget to perform a hardware upgrade at this time. To optimize drops you decide to use Priority Queues and fully enable Dynamic Dispatcher. How can you enable them?

  A. fw ctl multik dynamic_dispatching on

  B. fw ctl multik dynamic_dispatching set_mode 9

  C. fw ctl multik set_mode 9

  D. fw ctl multik pq enable

  Correct Answer: C

  Reference: https://supportcenter.checkpoint.com/supportcenter/portal? eventSubmit_doGoviewsolutiondetails=andsolutionid=sk105261

• Question 159:

  Check Point Management (cpm) is the main management process in that it provides the architecture for a consolidates management console. CPM allows the GUI client and management server to communicate via web services using ___________.

  A. TCP port 19009

  B. TCP Port 18190

  C. TCP Port 18191

  D. TCP Port 18209

  Correct Answer: A

• Question 160:

  Which command is used to set the CCP protocol to Multicast?

  A. cphaprob set_ccp multicast

  B. cphaconf set_ccp multicast

  C. cphaconf set_ccp no_broadcast

  D. cphaprob set_ccp no_broadcast

  Correct Answer: B

  Reference: https://supportcenter.checkpoint.com/supportcenter/portal? eventSubmit_doGoviewsolutiondetails=andsolutionid=sk20576