CheckPoint 156-315.80 Online Practice Questions and Exam Preparation

CheckPoint 156-315.80 Online Questions & Answers

• Question 431:

  In R80 spoofing is defined as a method of:

  A. Disguising an illegal IP address behind an authorized IP address through Port Address Translation.
  B. Hiding your firewall from unauthorized users.
  C. Detecting people using false or wrong authentication logins
  D. Making packets appear as if they come from an authorized IP address.
  D. Making packets appear as if they come from an authorized IP address.

  ---

  IP spoofing replaces the untrusted source IP address with a fake, trusted one, to hijack connections to your network. Attackers use IP spoofing to send malware and bots to your protected network, to execute DoS attacks, or to gain unauthorized access.

  Reference: http://dl3.checkpoint.com/paid/74/74d596decb6071a4ee642fbdaae7238f/CP_R80_SecurityManagement_AdminGuide.pdf?HashKey=1479584563_6f823c8ea1514609148aa4fec5425db2andxtn=.pdf

• Question 432:

  Which command can you use to verify the number of active concurrent connections?

  A. fw conn all
  B. fw ctl pstat
  C. show all connections
  D. show connections
  B. fw ctl pstat

  ---

  Reference: https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=andsolutionid=sk103496

• Question 433:

  Which is NOT an example of a Check Point API?

  A. Gateway API
  B. Management API
  C. OPSEC SDK
  D. Threat Prevention API
  A. Gateway API

• Question 434:

  When an encrypted packet is decrypted, where does this happen?

  A. Security policy
  B. Inbound chain
  C. Outbound chain
  D. Decryption is not supported
  A. Security policy

• Question 435:

  Which file contains the host address to be published, the MAC address that needs to be associated with the IP Address, and the unique IP of the interface that responds to ARP request?

  A. /opt/CPshrd-R80/conf/local.arp
  B. /var/opt/CPshrd-R80/conf/local.arp
  C. $CPDIR/conf/local.arp
  D. $FWDIR/conf/local.arp
  D. $FWDIR/conf/local.arp

• Question 436:

  Which of the following is NOT an alert option?

  A. SNMP
  B. High alert
  C. Mail
  D. User defined alert
  B. High alert

  ---

  Reference: https://sc1.checkpoint.com/documents/R77/CP_R77_SmartViewMonitor_AdminGuide/101104.htm

• Question 437:

  How many users can have read/write access in Gaia at one time?

  A. Infinite
  B. One
  C. Three
  D. Two
  B. One

• Question 438:

  From SecureXL perspective, what are the tree paths of traffic flow:

  A. Initial Path; Medium Path; Accelerated Path
  B. Layer Path; Blade Path; Rule Path
  C. Firewall Path; Accept Path; Drop Path
  D. Firewall Path; Accelerated Path; Medium Path
  D. Firewall Path; Accelerated Path; Medium Path

• Question 439:

  Fill in the blank: An identity server uses a __________ for user authentication.

  A. Shared secret
  B. Certificate
  C. One-time password
  D. Token
  A. Shared secret

• Question 440:

  In ClusterXL Load Sharing Multicast Mode:

  A. only the primary member received packets sent to the cluster IP address
  B. only the secondary member receives packets sent to the cluster IP address
  C. packets sent to the cluster IP address are distributed equally between all members of the cluster
  D. every member of the cluster received all of the packets sent to the cluster IP address
  D. every member of the cluster received all of the packets sent to the cluster IP address

  ---

  Reference: https://sc1.checkpoint.com/documents/R76/CP_R76_ClusterXL_AdminGuide/html_frameset.htm