CheckPoint 156-315.80 Online Practice Questions and Exam Preparation

CheckPoint 156-315.80 Online Questions & Answers

• Question 251:

  How long may verification of one file take for Sandblast Threat Emulation?

  A. up to 1 minutes
  B. within seconds cleaned file will be provided
  C. up to 5 minutes
  D. up to 3 minutes
  B. within seconds cleaned file will be provided

• Question 252:

  An administrator is creating an IPsec site-to-site VPN between his corporate office and branch office. Both offices are protected by Check Point Security Gateway managed by the same Security Management Server. While configuring the VPN community to specify the pre-shared secret the administrator found that the check box to enable pre-shared secret and cannot be enabled.

  Why does it not allow him to specify the pre-shared secret?

  A. IPsec VPN blade should be enabled on both Security Gateway.
  B. Pre-shared can only be used while creating a VPN between a third party vendor and Check Point Security Gateway.
  C. Certificate based Authentication is the only authentication method available between two Security Gateway managed by the same SMS.
  D. The Security Gateways are pre-R75.40.
  C. Certificate based Authentication is the only authentication method available between two Security Gateway managed by the same SMS.

• Question 253:

  What are the minimum open server hardware requirements for a Security Management Server/Standalone Security Gateway?

  A. 2 CPU cores, 4GB of RAM and 15GB of disk space
  B. 8 CPU cores, 16GB of RAM and 500 GB of disk space
  C. 4 CPU cores, 8GB of RAM and 500GB of disk space
  D. 8 CPU cores, 32GB of RAM and 1 TB of disk space
  A. 2 CPU cores, 4GB of RAM and 15GB of disk space

  ---

  Reference: https://sc1.checkpoint.com/documents/R80.20_GA/WebAdminGuides/EN/CP_R80.20_RN/html_frameset.htm?topic=documents/R80.20_GA/WebAdminGuides/EN/CP_R80.20_RN/212476

• Question 254:

  There are two R77.30 Security Gateways in the Firewall Cluster. They are named FW_A and FW_B. The cluster is configured to work as HA (High availability) with default cluster configuration. FW_A is configured to have higher priority than FW_B. FW_A was active and processing the traffic in the morning. FW_B was standby. Around 1100 am, its interfaces went down and this caused a failover. FW_B became active. After an hour, FW_A's interface issues were resolved and it became operational.

  When it re-joins the cluster, will it become active automatically?

  A. No, since `maintain' current active cluster member' option on the cluster object properties is enabled by default.
  B. No, since `maintain' current active cluster member' option is enabled by default on the Global Properties.
  C. Yes, since `Switch to higher priority cluster member' option on the cluster object properties is enabled by default.
  D. Yes, since `Switch to higher priority cluster member' option is enabled by default on the Global Properties.
  A. No, since `maintain' current active cluster member' option on the cluster object properties is enabled by default.

  ---

  Reference: http://dl3.checkpoint.com/paid/7e/7ef174cf00762ceaf228384ea20ea64a/CP_R77_ClusterXL_AdminGuide.pdf?HashKey=1479822138_31410b1f8360074be87fd8f1ab682464andxtn=.pdf

• Question 255:

  Which of the following authentication methods ARE NOT used for Mobile Access?

  A. RADIUS server
  B. Username and password (internal, LDAP)
  C. SecurID
  D. TACACS+
  D. TACACS+

  ---

  Reference: https://sc1.checkpoint.com/documents/R77/CP_R77_Mobile_Access_WebAdmin/41587.htm

• Question 256:

  What is the command used to activated Multi-Version Cluster mode?

  A. set cluster member mvc on in Clish
  B. set mvc on on Clish
  C. set cluster MVC on in Expert Mode
  D. set cluster mvc on in Expert Mode
  A. set cluster member mvc on in Clish

  ---

  Reference: https://sc1.checkpoint.com/documents/R81/WebAdminGuides/EN/CP_R81_ClusterXL_AdminGuide/Topics-CXLG/Configuring-Multi-Version-Cluster-Mechanism.htm

• Question 257:

  View the rule below. What does the lock-symbol in the left column mean? (Choose the BEST answer.)

  

  A. The current administrator has read-only permissions to Threat Prevention Policy.
  B. Another user has locked the rule for editing.
  C. Configuration lock is present. Click the lock symbol to gain read-write access.
  D. The current administrator is logged in as read-only because someone else is editing the policy.
  B. Another user has locked the rule for editing.

  ---

  https://sc1.checkpoint.com/documents/R80/CP_R80_SecMGMT/html_frameset.htm?topic=documents/R80/CP_R80_SecMGMT/124265

• Question 258:

  If you needed the Multicast MAC address of a cluster, what command would you run?

  A. cphaprob -a if
  B. cphaconf ccp multicast
  C. cphaconf debug data
  D. cphaprob igmp
  D. cphaprob igmp

• Question 259:

  The back end database for Check Point R80 Management uses:

  A. DBMS
  B. MongoDB
  C. PostgreSQL
  D. MySQL
  C. PostgreSQL

• Question 260:

  Which of the following technologies extracts detailed information from packets and stores that information in state tables?

  A. INSPECT Engine
  B. Stateful Inspection
  C. Packet Filtering
  D. Application Layer Firewall
  A. INSPECT Engine

  ---

  Reference: https://www.checkpoint.com/training/ccsa/chapter1/