CheckPoint Checkpoint Certifications 156-315.80 Questions & Answers

• Question 321:

  Which command shows the current connections distributed by CoreXL FW instances?

  A. fw ctl multik stat

  B. fw ctl affinity -l

  C. fw ctl instances -v

  D. fw ctl iflist

  Correct Answer: A

• Question 322:

  The Correlation Unit performs all but the following actions:

  A. Marks logs that individually are not events, but may be part of a larger pattern to be identified later.

  B. Generates an event based on the Event policy.

  C. Assigns a severity level to the event.

  D. Takes a new log entry that is part of a group of items that together make up an event, and adds it to an ongoing event.

  Correct Answer: C

• Question 323:

  What is the difference between SSL VPN and IPSec VPN?

  A. IPSec VPN does not require installation of a resilient VPN client.

  B. SSL VPN requires installation of a resident VPN client.

  C. SSL VPN and IPSec VPN are the same.

  D. IPSec VPN requires installation of a resident VPN client and SSL VPN requires only an installed Browser.

  Correct Answer: D

• Question 324:

  Which of the following will NOT affect acceleration?

  A. Connections destined to or originated from the Security gateway

  B. A 5-tuple match

  C. Multicast packets

  D. Connections that have a Handler (ICMP, FTP, H.323, etc.)

  Correct Answer: B

• Question 325:

  The following command is used to verify the CPUSE version:

  A. HostName:0>show installer status build

  B. [Expert@HostName:0]#show installer status

  C. [Expert@HostName:0]#show installer status build

  D. HostName:0>show installer build

  Correct Answer: A

  Reference: http://dkcheckpoint.blogspot.com/2017/11/how-to-fix-deployment-agent-issues.html

• Question 326:

  How do you enable virtual mac (VMAC) on-the-fly on a cluster member?

  A. cphaprob set int fwha_vmac_global_param_enabled 1

  B. clusterXL set int fwha_vmac_global_param_enabled 1

  C. fw ctl set int fwha_vmac_global_param_enabled 1

  D. cphaconf set int fwha_vmac_global_param_enabled 1

  Correct Answer: C

  Reference: https://supportcenter.checkpoint.com/supportcenter/portal? eventSubmit_doGoviewsolutiondetails=andsolutionid=sk50840

• Question 327:

  To accelerate the rate of connection establishment, SecureXL groups all connection that match a particular service and whose sole differentiating element is the source port. The type of grouping enables even the very first packets of a TCP handshake to be accelerated. The first packets of the first connection on the same service will be forwarded to the Firewall kernel which will then create a template of the connection. Which of the these is NOT a SecureXL template?

  A. Accept Template

  B. Deny Template

  C. Drop Template

  D. NAT Template

  Correct Answer: B

  Reference: https://community.checkpoint.com/thread/7894-nat-templates-securexl

• Question 328:

  Which of the following is NOT a type of Check Point API available in R80.10?

  A. Identity Awareness Web Services

  B. OPSEC SDK

  C. Mobile Access

  D. Management

  Correct Answer: C

• Question 329:

  When an encrypted packet is decrypted, where does this happen?

  A. Security policy

  B. Inbound chain

  C. Outbound chain

  D. Decryption is not supported

  Correct Answer: A

• Question 330:

  John is using Management HA. Which Smartcenter should be connected to for making changes?

  A. secondary Smartcenter

  B. active Smartenter

  C. connect virtual IP of Smartcenter HA

  D. primary Smartcenter

  Correct Answer: B