CheckPoint Checkpoint Certifications 156-315.80 Questions & Answers

• Question 361:

  You find one of your cluster gateways showing "Down" when you run the "cphaprob stat" command. You then run the "clusterXL_admin up" on the down member but unfortunately the member continues to show down. What command do you run to determine the cause?

  A. cphaprob -f register

  B. cphaprob -d -s report

  C. cpstat -f all

  D. cphaprob -a list

  Correct Answer: D

• Question 362:

  In SmartEvent, what are the different types of automatic reactions that the administrator can configure?

  A. Mail, Block Source, Block Event Activity, External Script, SNMP Trap

  B. Mail, Block Source, Block Destination, Block Services, SNMP Trap

  C. Mail, Block Source, Block Destination, External Script, SNMP Trap

  D. Mail, Block Source, Block Event Activity, Packet Capture, SNMP Trap

  Correct Answer: A

  Reference: https://sc1.checkpoint.com/documents/R76/CP_R76_SmartEvent_AdminGuide/17401.htm

• Question 363:

  What is the purpose of Priority Delta in VRRP?

  A. When a box up, Effective Priority = Priority + Priority Delta

  B. When an Interface is up, Effective Priority = Priority + Priority Delta

  C. When an Interface fail, Effective Priority = Priority - Priority Delta

  D. When a box fail, Effective Priority = Priority - Priority Delta

  Correct Answer: C

  Each instance of VRRP running on a supported interface may monitor the link state of other interfaces.

  The monitored interfaces do not have to be running VRRP. If a monitored interface loses its link state, then

  VRRP will decrement its priority over a VRID by the specified delta value and then will send out a new

  VRRP HELLO packet. If the new effective priority is less than the priority a backup platform has, then the

  backup platform will beging to send out its own HELLO packet.

  Once the master sees this packet with a priority greater than its own, then it releases the VIP.

  Reference: https://supportcenter.checkpoint.com/supportcenter/portal?

  eventSubmit_doGoviewsolutiondetails=andsolutionid=sk38524

• Question 364:

  Which statements below are CORRECT regarding Threat Prevention profiles in SmartDashboard?

  A. You can assign only one profile per gateway and a profile can be assigned to one rule Only.

  B. You can assign multiple profiles per gateway and a profile can be assigned to one rule only.

  C. You can assign multiple profiles per gateway and a profile can be assigned to one or more rules.

  D. You can assign only one profile per gateway and a profile can be assigned to one or more rules.

  Correct Answer: C

• Question 365:

  Using ClusterXL, what statement is true about the Sticky Decision Function?

  A. Can only be changed for Load Sharing implementations

  B. All connections are processed and synchronized by the pivot

  C. Is configured using cpconfig

  D. Is only relevant when using SecureXL

  Correct Answer: A

• Question 366:

  What is the name of the secure application for Mail/Calendar for mobile devices?

  A. Capsule Workspace

  B. Capsule Mail

  C. Capsule VPN

  D. Secure Workspace

  Correct Answer: A

  Reference: https://www.checkpoint.com/products/mobile-secure-workspace/

• Question 367:

  Which command gives us a perspective of the number of kernel tables?

  A. fw tab -t

  B. fw tab -s

  C. fw tab -n

  D. fw tab -k

  Correct Answer: B

• Question 368:

  When simulating a problem on ClusterXL cluster with cphaprob -d STOP -s problem -t 0 register, to initiate a failover on an active cluster member, what command allows you remove the problematic state?

  A. cphaprob -d STOP unregister

  B. cphaprob STOP unregister

  C. cphaprob unregister STOP

  D. cphaprob -d unregister STOP

  Correct Answer: A

  esting a failover in a controlled manner using following command;

  # cphaprob -d STOP -s problem -t 0 register

  This will register a problem state on the cluster member this was entered on; If you then run;

  # cphaprob list

  this will show an entry named STOP.

  to remove this problematic register run following;

  # cphaprob -d STOP unregister

  Reference: https://fwknowledge.wordpress.com/2013/04/04/manual-failover-of-the-fw-cluster/

• Question 369:

  How would you deploy TE250X Check Point appliance just for email traffic and in-line mode without a Check Point Security Gateway?

  A. Install appliance TE250X on SpanPort on LAN switch in MTA mode.

  B. Install appliance TE250X in standalone mode and setup MTA.

  C. You can utilize only Check Point Cloud Services for this scenario.

  D. It is not possible, always Check Point SGW is needed to forward emails to SandBlast appliance.

  Correct Answer: C

• Question 370:

  What is the main difference between Threat Extraction and Threat Emulation?

  A. Threat Emulation never delivers a file and takes more than 3 minutes to complete.

  B. Threat Extraction always delivers a file and takes less than a second to complete.

  C. Threat Emulation never delivers a file that takes less than a second to complete.

  D. Threat Extraction never delivers a file and takes more than 3 minutes to complete.

  Correct Answer: B