CheckPoint Checkpoint Certifications 156-315.80 Questions & Answers

• Question 221:

  What must you do first if "fwm sic_reset" could not be completed?

  A. Cpstop then find keyword "certificate" in objects_5_0.C and delete the section

  B. Reinitialize SIC on the security gateway then run "fw unloadlocal"

  C. Reset SIC from Smart Dashboard

  D. Change internal CA via cpconfig

  Correct Answer: D

• Question 222:

  Check Point security components are divided into the following components:

  A. GUI Client, Security Gateway, WebUI Interface

  B. GUI Client, Security Management, Security Gateway

  C. Security Gateway, WebUI Interface, Consolidated Security Logs

  D. Security Management, Security Gateway, Consolidate Security Logs

  Correct Answer: B

• Question 223:

  You have a Geo-Protection policy blocking Australia and a number of other countries. Your network now requires a Check Point Firewall to be installed in Sydney, Australia.

  What must you do to get SIC to work?

  A. Remove Geo-Protection, as the IP-to-country database is updated externally, and you have no control of this.

  B. Create a rule at the top in the Sydney firewall to allow control traffic from your network

  C. Nothing - Check Point control connections function regardless of Geo-Protection policy

  D. Create a rule at the top in your Check Point firewall to bypass the Geo-Protection

  Correct Answer: C

  Reference: https://sc1.checkpoint.com/documents/R76/CP_R76_Firewall_WebAdmin/92707.htm

• Question 224:

  In the Check Point Firewall Kernel Module, each Kernel is associated with a key, which specifies the type of traffic applicable to the chain module. For Stateful Mode configuration, chain modules marked with __________________ will not apply.

  A. ffff

  B. 1

  C. 3

  D. 2

  Correct Answer: D

  Reference: http://dkcheckpoint.blogspot.com/2016/07/chapter-2-chain-module.html

• Question 225:

  In what way are SSL VPN and IPSec VPN different?

  A. SSL VPN is using HTTPS in addition to IKE, whereas IPSec VPN is clientless

  B. SSL VPN adds an extra VPN header to the packet, IPSec VPN does not

  C. IPSec VPN does not support two factor authentication, SSL VPN does support this

  D. IPSec VPN uses an additional virtual adapter; SSL VPN uses the client network adapter only.

  Correct Answer: D

• Question 226:

  In what way is Secure Network Distributor (SND) a relevant feature of the Security Gateway?

  A. SND is a feature to accelerate multiple SSL VPN connections

  B. SND is an alternative to IPSec Main Mode, using only 3 packets

  C. SND is used to distribute packets among Firewall instances

  D. SND is a feature of fw monitor to capture accelerated packets

  Correct Answer: C

• Question 227:

  You have a Gateway is running with 2 cores. You plan to add a second gateway to build a cluster and used a device with 4 cores.

  How many cores can be used in a Cluster for Firewall-kernel on the new device?

  A. 3

  B. 2

  C. 1

  D. 4

  Correct Answer: D

• Question 228:

  Which NAT rules are prioritized first?

  A. Post-Automatic/Manual NAT rules

  B. Manual/Pre-Automatic NAT

  C. Automatic Hide NAT

  D. Automatic Static NAT

  Correct Answer: B

• Question 229:

  What is the most ideal Synchronization Status for Security Management Server High Availability deployment?

  A. Lagging

  B. Synchronized

  C. Never been synchronized

  D. Collision

  Correct Answer: B

• Question 230:

  Joey wants to upgrade from R75.40 to R80 version of Security management. He will use Advanced Upgrade with Database Migration method to achieve this.

  What is one of the requirements for his success?

  A. Size of the /var/log folder of the source machine must be at least 25% of the size of the /var/log directory on the target machine

  B. Size of the /var/log folder of the target machine must be at least 25% of the size of the /var/log directory on the source machine

  C. Size of the $FWDIR/log folder of the target machine must be at least 30% of the size of the $FWDIR/ log directory on the source machine

  D. Size of the /var/log folder of the target machine must be at least 25GB or more

  Correct Answer: B

  Reference: https://sc1.checkpoint.com/documents/R77/CP_R77_Gaia_Installation_and_Upgrade_Guide/ html_frameset.htm?topic=documents/R77/CP_R77_Gaia_Installation_and_Upgrade_Guide/90083