CheckPoint Checkpoint Certifications 156-915.80 Questions & Answers

• Question 101:

  In order to optimize performance of a Security Gateway you plan to use SecureXL technology. Your company uses different types of applications. Identify application traffic that will NOT be accelerated

  A. Corporate relational database TCP traffic

  B. Custom application multicast traffic

  C. Transactions to the external application server using UDP

  D. TCP connections to the corporate Web-server

  Correct Answer: B

• Question 102:

  Which command shows the connection table in human readable format?

  A. fw tab -t connections -s

  B. fw tab -t connections -u

  C. fw tab -t connections -h

  D. fw tab -t connections -f

  Correct Answer: D

  Reference: https://sc1.checkpoint.com/documents/R80.30/WebAdminGuides/EN/CP_R80.30_NextGenSecurityGateway_Guide/html_frameset.htm?topic=documents/R80.30/WebAdminGuides/EN/ CP_R80.30_NextGenSecurityGateway_Guide/208178

• Question 103:

  What is the default size of NAT table fwx_alloc?

  A. 20000

  B. 35000

  C. 25000

  D. 10000

  Correct Answer: C

  Reference: https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=andsolutionid=sk32224

• Question 104:

  What is the least amount of CPU cores required to enable CoreXL?

  A. 2

  B. 1

  C. 4

  D. 6

  Correct Answer: B

  Reference: https://sc1.checkpoint.com/documents/R76/CP_R76_PerformanceTuning_WebAdmin/6731.htm

• Question 105:

  With SecureXL enabled, accelerated packets will pass through the following:

  A. Network Interface Card, OSI Network Layer, OS IP Stack, and the Acceleration Device

  B. Network Interface Card, Check Point Firewall Kernel, and the Acceleration Device

  C. Network Interface Card and the Acceleration Device

  D. Network Interface Card, OSI Network Layer, and the Acceleration Device

  Correct Answer: C

• Question 106:

  The WebUI offers several methods for downloading hotfixes via CPUSE except:

  A. Automatic

  B. Force override

  C. Manually

  D. Scheduled

  Correct Answer: B

  Reference: https://sc1.checkpoint.com/documents/R77/CP_R77_Gaia_AdminWebAdminGuide/html_frameset.htm?topic=documents/R77/CP_R77_Gaia_AdminWebAdminGuide/112109

• Question 107:

  How would you deploy TE250X Check Point appliance just for email traffic and in-line mode without a Check Point Security Gateway?

  A. Install appliance TE250X on SpanPort on LAN switch in MTA mode

  B. Install appliance TE250X in standalone mode and setup MTA

  C. You can utilize only Check Point Cloud Services for this scenario

  D. It is not possible, always Check Point SGW is needed to forward emails to SandBlast appliance

  Correct Answer: C

• Question 108:

  Which file is not in the $FWDIR directory collected by the CPInfo utility from the server?

  A. fwauthd.conf

  B. asm.C

  C. classes.C

  D. cpd.elg

  Correct Answer: D

  Reference: http://sachingarg-checkpoint.blogspot.com/2011/06/viewing-and-analyzing-cpinfo-output.html

• Question 109:

  An administrator would like to troubleshoot why templating is not working for some traffic. How can he determine at which rule templating id disabled?

  A. He can use the fw accel command on the gateway

  B. He can use the fw accel statistics command on the gateway

  C. He can use the fwaccel stat command on the Security Management Server

  D. He can use the fwaccel stat command on the gateway

  Correct Answer: D

• Question 110:

  How can SmartView Web application be accessed?

  A. https:///smartview

  B. https://:4434/smartview/

  C. https:///smartview/

  D. https://:4434/smartview/

  Correct Answer: A

  Reference: https://community.checkpoint.com/t5/Logging-and-Reporting/SmartView-Accessing-Check-Point-Logs-from-Web/td-p/3710