CheckPoint Checkpoint Certifications 156-315.80 Questions & Answers

• Question 171:

  Which TCP-port does CPM process listen to?

  A. 18191

  B. 18190

  C. 8983

  D. 19009

  Correct Answer: D

  Reference: https://www.checkpoint.com/downloads/products/r80.10-security-management-architectureoverview.pdf

• Question 172:

  Which method below is NOT one of the ways to communicate using the Management API's?

  A. Typing API commands using the "mgmt_cli" command

  B. Typing API commands from a dialog box inside the SmartConsole GUI application

  C. Typing API commands using Gaia's secure shell(clish)19+

  D. Sending API commands over an http connection using web-services

  Correct Answer: D

  Reference: https://sc1.checkpoint.com/documents/R80/APIs/#introduction%20

• Question 173:

  What are the different command sources that allow you to communicate with the API server?

  A. SmartView Monitor, API_cli Tool, Gaia CLI, Web Services

  B. SmartConsole GUI Console, mgmt_cli Tool, Gaia CLI, Web Services

  C. SmartConsole GUI Console, API_cli Tool, Gaia CLI, Web Services

  D. API_cli Tool, Gaia CLI, Web Services

  Correct Answer: B

  Reference: https://sc1.checkpoint.com/documents/R80/APIs/#introduction%20

• Question 174:

  After the initial installation on Check Point appliance, you notice that the Management-interface and default gateway are incorrect.

  Which commands could you use to set the IP to 192.168.80.200/24 and default gateway to 192.168.80.1.

  A. set interface Mgmt ipv4-address 192.168.80.200 mask-length 24 set static-route default nexthop gateway address 192.168.80.1 on save config

  B. set interface Mgmt ipv4-address 192.168.80.200 255.255.255.0 add static-route 0.0.0.0. 0.0.0.0 gw 192.168.80.1 on save config

  C. set interface Mgmt ipv4-address 192.168.80.200 255.255.255.0 set static-route 0.0.0.0. 0.0.0.0 gw 192.168.80.1 on save config

  D. set interface Mgmt ipv4-address 192.168.80.200 mask-length 24 add static-route default nexthop gateway address 192.168.80.1 on save config

  Correct Answer: A

• Question 175:

  Tom has connected to the R80 Management Server remotely using SmartConsole and is in the process of making some Rule Base changes, when he suddenly loses connectivity. Connectivity is restored shortly afterward.

  What will happen to the changes already made?

  A. Tom's changes will have been stored on the Management when he reconnects and he will not lose any of his work.

  B. Tom will have to reboot his SmartConsole computer, and access the Management cache store on that computer, which is only accessible after a reboot.

  C. Tom's changes will be lost since he lost connectivity and he will have to start again.

  D. Tom will have to reboot his SmartConsole computer, clear to cache, and restore changes.

  Correct Answer: A

• Question 176:

  What key is used to save the current CPView page in a filename format cpview_"cpview process ID".cap"number of captures"?

  A. S

  B. W

  C. C

  D. Space bar

  Correct Answer: C

  Reference: https://sc1.checkpoint.com/documents/R80.20_GA/WebAdminGuides/EN/ CP_R80.20_SecurityManagement_AdminGuide/html_frameset.htm?topic=documents/R80.20_GA/ WebAdminGuides/EN/ CP_R80.20_SecurityManagement_AdminGuide/204685

• Question 177:

  Identify the API that is not supported by Check Point currently.

  A. R80 Management API

  B. Identity Awareness Web Services API

  C. Open REST API

  D. OPSEC SDK

  Correct Answer: C

• Question 178:

  SandBlast Mobile identifies threats in mobile devices by using on-device, network, and cloud-based algorithms and has four dedicated components that constantly work together to protect mobile devices and their data. Which component is NOT part of the SandBlast Mobile solution?

  A. Management Dashboard

  B. Gateway

  C. Personal User Storage

  D. Behavior Risk Engine

  Correct Answer: C

  Reference: https://community.checkpoint.com/docs/DOC-3072-sandblast-mobile-architecture-overview

• Question 179:

  One of major features in R80 SmartConsole is concurrent administration.

  Which of the following is NOT possible considering that AdminA, AdminB and AdminC are editing the same Security Policy?

  A. A lock icon shows that a rule or an object is locked and will be available.

  B. AdminA and AdminB are editing the same rule at the same time.

  C. A lock icon next to a rule informs that any Administrator is working on this particular rule.

  D. AdminA, AdminB and AdminC are editing three different rules at the same time.

  Correct Answer: C

  Reference: http://downloads.checkpoint.com/dc/download.htm?ID=65846

• Question 180:

  When attempting to start a VPN tunnel, in the logs the error "no proposal chosen" is seen numerous times. No other VPN-related entries are present.

  Which phase of the VPN negotiations has failed?

  A. IKE Phase 1

  B. IPSEC Phase 2

  C. IPSEC Phase 1

  D. IKE Phase 2

  Correct Answer: A