CheckPoint Checkpoint Certifications 156-315.80 Questions & Answers

• Question 251:

  Which file gives you a list of all security servers in use, including port number?

  A. $FWDIR/conf/conf.conf

  B. $FWDIR/conf/servers.conf

  C. $FWDIR/conf/fwauthd.conf

  D. $FWDIR/conf/serversd.conf

  Correct Answer: C

• Question 252:

  Which of the following commands shows the status of processes?

  A. cpwd_admin -l

  B. cpwd -l

  C. cpwd admin_list

  D. cpwd_admin list

  Correct Answer: D

  Reference: https://community.checkpoint.com/thread/8054-cpwdadmin-list-overview-sms

• Question 253:

  What is the valid range for VRID value in VRRP configuration?

  A. 1 - 254

  B. 1 - 255

  C. 0 - 254

  D. 0 - 255

  Correct Answer: B

  Virtual Router ID - Enter a unique ID number for this virtual router. The range of valid values is 1 to 255. Reference: https://sc1.checkpoint.com/documents/R76/CP_R76_Gaia_WebAdmin/87911.htm

• Question 254:

  What is true of the API server on R80.10?

  A. By default the API-server is activated and does not have hardware requirements.

  B. By default the API-server is not active and should be activated from the WebUI.

  C. By default the API server is active on management and stand-alone servers with 16GB of RAM (or more).

  D. By default, the API server is active on management servers with 4 GB of RAM (or more) and on standalone servers with 8GB of RAM (or more).

  Correct Answer: D

  Reference: https://sc1.checkpoint.com/documents/R80/APIs/#introduction%20

• Question 255:

  Which statement is most correct regarding about "CoreXL Dynamic Dispatcher"?

  A. The CoreXL FW instances assignment mechanism is based on Source MAC addresses, Destination MAC addresses

  B. The CoreXL FW instances assignment mechanism is based on the utilization of CPU cores

  C. The CoreXL FW instances assignment mechanism is based on IP Protocol type

  D. The CoreXl FW instances assignment mechanism is based on Source IP addresses, Destination IP addresses, and the IP `Protocol' type

  Correct Answer: B

  Reference: https://supportcenter.checkpoint.com/supportcenter/portal? eventSubmit_doGoviewsolutiondetails=andsolutionid=sk105261

• Question 256:

  What CLI command compiles and installs a Security Policy on the target's Security Gateways?

  A. fwm compile

  B. fwm load

  C. fwm fetch

  D. fwm install

  Correct Answer: B

  Reference: https://sc1.checkpoint.com/documents/R77/CP_R77_SecurityManagement_WebAdminGuide/ html_frameset.htm?topic=documents/R77/CP_R77_SecurityManagement_WebAdminGuide/13141

• Question 257:

  Pamela is Cyber Security Engineer working for Global Instance Firm with large scale deployment of Check Point Enterprise Appliances using GAiA/R80.10. Company's Developer Team is having random access issue to newly deployed Application Server in DMZ's Application Server Farm Tier and blames DMZ Security Gateway as root cause. The ticket has been created and issue is at Pamela's desk for an investigation. Pamela decides to use Check Point's Packet Analyzer Tool-fw monitor to iron out the issue during approved Maintenance window.

  What do you recommend as the best suggestion for Pamela to make sure she successfully captures entire traffic in context of Firewall and problematic traffic?

  A. Pamela should check SecureXL status on DMZ Security gateway and if it's turned ON. She should turn OFF SecureXL before using fw monitor to avoid misleading traffic captures.

  B. Pamela should check SecureXL status on DMZ Security Gateway and if it's turned OFF. She should turn ON SecureXL before using fw monitor to avoid misleading traffic captures.

  C. Pamela should use tcpdump over fw monitor tool as tcpdump works at OS-level and captures entire traffic.

  D. Pamela should use snoop over fw monitor tool as snoop works at NIC driver level and captures entire traffic.

  Correct Answer: A

• Question 258:

  Fill in the blank: The "fw monitor" tool can be best used to troubleshoot ____________________.

  A. AV issues

  B. VPN errors

  C. Network issues

  D. Authentication issues

  Correct Answer: C

• Question 259:

  In which formats can Threat Emulation forensics reports be viewed in?

  A. TXT, XML and CSV

  B. PDF and TXT

  C. PDF, HTML, and XML

  D. PDF and HTML

  Correct Answer: C

• Question 260:

  In ClusterXL Load Sharing Multicast Mode:

  A. only the primary member received packets sent to the cluster IP address

  B. only the secondary member receives packets sent to the cluster IP address

  C. packets sent to the cluster IP address are distributed equally between all members of the cluster

  D. every member of the cluster received all of the packets sent to the cluster IP address

  Correct Answer: D

  Reference: https://sc1.checkpoint.com/documents/R76/CP_R76_ClusterXL_AdminGuide/ html_frameset.htm