CheckPoint Checkpoint Certifications 156-315.80 Questions & Answers

• Question 401:

  Within the Check Point Firewall Kernel resides Chain Modules, which are individually responsible for the inspection of a specific blade or feature that has been enabled in the configuration of the gateway. For Wire mode configuration, chain modules marked with _______ will not apply.

  A. ffffffff

  B. 00000001

  C. 00000002

  D. 00000003

  Correct Answer: B

• Question 402:

  SmartConsole R80.x requires the following ports to be open for SmartEvent:

  A. 19009, 19090 and 443

  B. 19009, 19004 and 18190

  C. 18190 and 443

  D. 19009, 18190 and 443

  Correct Answer: D

• Question 403:

  In Advanced Permanent Tunnel Configuration, to set the amount of time the tunnel test runs without a response before the peer host is declared `down', you would set the_________?

  A. life sign polling interval

  B. life sign timeout

  C. life_sign_polling_interval

  D. life_sign_timeout

  Correct Answer: D

  Reference: https://sc1.checkpoint.com/documents/R77/CP_R77_VPN_AdminGuide/html_frameset.htm? topic=documents/R77/CP_R77_VPN_AdminGuide/14018

• Question 404:

  Choose the correct syntax to add a new host named "emailserver1" with IP address 10.50.23.90 using GAiA Management CLI?

  A. mgmt_cli add host name "myHost12 ip" address 10.50.23.90

  B. mgmt_cli add host name ip-address 10.50.23.90

  C. mgmt_cli add host "emailserver1" address 10.50.23.90

  D. mgmt_cli add host name "emailserver1" ip-address 10.50.23.90

  Correct Answer: D

  Reference: https://weekly-geekly.github.io/articles/339924/index.html

• Question 405:

  GAIA greatly increases operational efficiency by offering an advanced and intuitive software update agent, commonly referred to as the:

  A. Check Point Update Service Engine

  B. Check Point Software Update Agent

  C. Check Point Remote Installation Daemon (CPRID)

  D. Check Point Software Update Daemon

  Correct Answer: A

• Question 406:

  Hit Count is a feature to track the number of connections that each rule matches, which one is not benefit of Hit Count.

  A. Better understand the behavior of the Access Control Policy

  B. Improve Firewall performance - You can move a rule that has hot count to a higher position in the Rule Base

  C. Automatically rearrange Access Control Policy based on Hit Count Analysis

  D. Analyze a Rule Base - You can delete rules that have no matching connections

  Correct Answer: C

  Reference: https://sc1.checkpoint.com/documents/R80/CP_R80_SecMGMT/html_frameset.htm? topic=documents/R80/CP_R80_SecMGMT/126197

• Question 407:

  You need to change the MAC-address on eth2 interface of the gateway. What command and what mode will you use to achieve this goal?

  A. set interface eth2 mac-addr 11:11:11:11:11:11; CLISH

  B. ifconfig eth1 hw 11:11:11:11:11:11; expert

  C. set interface eth2 hw-addr 11:11:11:11:11:11; CLISH

  D. ethtool -i eth2 mac 11:11:11:11:11:11; expert

  Correct Answer: A

  Reference: https://sc1.checkpoint.com/documents/R76/CP_R76_Gaia_WebAdmin/75697.htm

• Question 408:

  The Check Point history feature in R80 provides the following:

  A. View install changes and install specific version

  B. View install changes

  C. Policy Installation Date, view install changes and install specific version

  D. Policy Installation Date only

  Correct Answer: C

  Reference:

  https://sc1.checkpoint.com/documents/R80.10/WebAdminGuides/EN/

  CP_R80.10_SecurityManagement_AdminGuide/html_frameset.htm?topic=documents/R80.10/

  WebAdminGuides/EN/ CP_R80.10_SecurityManagement_AdminGuide/159917

• Question 409:

  

  You are the administrator for ABC Corp. You have logged into your R80 Management server. You are making some changes in the Rule Base and notice that rule No.6 has a pencil icon next to it.

  What does this mean?

  A. This rule No. 6 has been marked for deletion in your Management session.

  B. This rule No. 6 has been marked for deletion in another Management session.

  C. This rule No. 6 has been marked for editing in your Management session.

  D. This rule No. 6 has been marked for editing in another Management session.

  Correct Answer: C

• Question 410:

  By default how often updates are checked when the CPUSE Software Updates Policy is set to Automatic?

  A. Six times per day

  B. Seven times per day

  C. Every two hours

  D. Every three hours

  Correct Answer: D

  Reference: https://sc1.checkpoint.com/documents/R77/CP_R77_Gaia_AdminWebAdminGuide/

  html_frameset.htm?topic=documents/R77/CP_R77_Gaia_AdminWebAdminGuide/112109