CheckPoint 156-315.80 Online Practice Questions and Exam Preparation

CheckPoint 156-315.80 Online Questions & Answers

• Question 71:

  What needs to be configured if the NAT property `Translate destination or client side' is not enabled in Global Properties?

  A. A host route to route to the destination IP.
  B. Use the file local.arp to add the ARP entries for NAT to work.
  C. Nothing, the Gateway takes care of all details necessary.
  D. Enabling `Allow bi-directional NAT' for NAT to work correctly.
  C. Nothing, the Gateway takes care of all details necessary.

• Question 72:

  You need to change the number of firewall Instances used by CoreXL. How can you achieve this goal?

  A. edit fwaffinity.conf; reboot required
  B. cpconfig; reboot required
  C. edit fwaffinity.conf; reboot not required
  D. cpconfig; reboot not required
  B. cpconfig; reboot required

  ---

  Reference: https://sc1.checkpoint.com/documents/R76/CP_R76_PerformanceTuning_WebAdmin/6731.htm#o94530

• Question 73:

  Fill in the blank: The command ___________ provides the most complete restoration of a R80 configuration.

  A. upgrade_import
  B. cpconfig
  C. fwm dbimport -p
  D. cpinfo -recover
  A. upgrade_import

• Question 74:

  The essential means by which state synchronization works to provide failover in the event an active member goes down, ____________ is used specifically for clustered environments to allow gateways to report their own state and learn about the states of other members in the cluster.

  A. ccp
  B. cphaconf
  C. cphad
  D. cphastart
  A. ccp

  ---

  Reference: https://etherealmind.com/checkpoint-nokia-firewall-cluster-xl/?doing_wp_cron=1553442264.8447830677032470703125

• Question 75:

  When a packet arrives at the gateway, the gateway checks it against the rules in the hop Policy Layer, sequentially from top to bottom, and enforces the first rule that matches a packet. Which of the following statements about the order of rule enforcement is true?

  A. If the Action is Accept, the gateway allows the packet to pass through the gateway.
  B. If the Action is Drop, the gateway continues to check rules in the next Policy Layer down.
  C. If the Action is Accept, the gateway continues to check rules in the next Policy Layer down.
  D. If the Action is Drop, the gateway applies the Implicit Clean-up Rule for that Policy Layer.
  C. If the Action is Accept, the gateway continues to check rules in the next Policy Layer down.

• Question 76:

  When Dynamic Dispatcher is enabled, connections are assigned dynamically with the exception of:

  A. Threat Emulation
  B. HTTPS
  C. QOS
  D. VoIP
  D. VoIP

• Question 77:

  What has to be taken into consideration when configuring Management HA?

  A. The Database revisions will not be synchronized between the management servers
  B. SmartConsole must be closed prior to synchronized changes in the objects database
  C. If you wanted to use Full Connectivity Upgrade, you must change the Implied Rules to allow FW1_cpredundant to pass before the Firewall Control Connections.
  D. For Management Server synchronization, only External Virtual Switches are supported. So, if you wanted to employ Virtual Routers instead, you have to reconsider your design.
  A. The Database revisions will not be synchronized between the management servers

• Question 78:

  Which is the least ideal Synchronization Status for Security Management Server High Availability deployment?

  A. Synchronized
  B. Never been synchronized
  C. Lagging
  D. Collision
  D. Collision

  ---

  Reference: https://sc1.checkpoint.com/documents/R80/CP_R80_SecMGMT/html_frameset.htm?topic=documents/R80/CP_R80_SecMGMT/120712

• Question 79:

  Which directory below contains log files?

  A. /opt/CPSmartlog-R80/log
  B. /opt/CPshrd-R80/log
  C. /opt/CPsuite-R80/fw1/log
  D. /opt/CPsuite-R80/log
  C. /opt/CPsuite-R80/fw1/log

• Question 80:

  Which command is used to obtain the configuration lock in Gaia?

  A. Lock database override
  B. Unlock database override
  C. Unlock database lock
  D. Lock database user
  A. Lock database override

  ---

  Obtaining a Configuration Lock

  1.

  lock database override

  2.

  unlock database