CheckPoint Checkpoint Certifications 156-915.80 Questions & Answers

• Question 111:

  If an administrator wants to add manual NAT for addresses not owned by the Check Point firewall, what else is necessary to be completed for it to function properly?

  A. Nothing the proxy ARP is automatically handled in the R80 version

  B. Add the proxy ARP configuration in a file called /etc/conf/local.arp

  C. Add the proxy ARP configuration in a file called $FWDIR/conf/local.arp

  D. Add the proxy ARP configurations in a file called $CPDIR/config/local.arp

  Correct Answer: C

• Question 112:

  Which of the following commands shows the status of processes?

  A. cpwd_admin -l

  B. cpwd -l

  C. cpwd admin_list

  D. cpwd_admin list

  Correct Answer: D

  Reference: https://community.checkpoint.com/thread/8054-cpwdadmin-list-overview-sms

• Question 113:

  How many confidence levels are there for IPS?

  A. four

  B. two

  C. five

  D. three

  Correct Answer: C

  Reference: https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=andsolutionid=sk116254

• Question 114:

  You have a Gateway is running with 2 cores. You plan to add a second gateway to build a cluster and used a device with 4 cores. How many cores can be used in a Cluster for Firewall-kernel on the new device?

  A. 3

  B. 2

  C. 1

  D. 4

  Correct Answer: D

• Question 115:

  What is the main difference between Threat Extraction and Threat Emulation?

  A. Threat Emulation never delivers a file and takes more than 3minutes to complete

  B. Threat Extraction always delivers a file and takes less than a second to complete

  C. Threat Emulation never delivers a file that takes less than a second to complete

  D. Threat Extraction never delivers a file and takes more than 3 minutes to complete

  Correct Answer: B

• Question 116:

  The concept of layers was introduced in R80. What is the biggest benefit of layers?

  A. To break one policy into several virtual policies.

  B. Policy Layers and Sub-Policies enable flexible control over the security policy.

  C. To include Threat Prevention as a sub policy for the firewall policy

  D. They improve the performance on OS kernel version 3.0

  Correct Answer: B

• Question 117:

  What Factors preclude Secure XL Templating?

  A. Source Port Ranges/Encrypted Connections

  B. IPS

  C. ClusterXL in load sharing Mode

  D. CoreXL

  Correct Answer: A

• Question 118:

  Automation and Orchestration differ in that:

  A. Automation relates to codifying tasks, whereas orchestration relates to codifying processes.

  B. Automation involves the process of coordinating and exchange of information through web service interactions such as XML and JSON, but orchestration does not involve processes.

  C. Orchestration is concerned with executing a single task, whereas automation takes a series of tasks and puts them all together into a process workflow.

  D. Orchestration relates to codifying tasks, whereas automation relates to codifying processes.

  Correct Answer: A

• Question 119:

  What is the difference between an event and a log?

  A. Events are generated at gateway according to Event Policy

  B. A log entry becomes an event when it matches any rule defined in Event Policy

  C. Events are collected with SmartWorkflow from Trouble Ticket systems

  D. Logs and Events are synonyms

  Correct Answer: B

• Question 120:

  Jack is using SmartEvent and does not see the identities of the users on the events. As an administrator with full access, what does he need to do to fix his issue?

  A. Open SmartDashboard and toggle the Show or Hide Identities Icon, then re-open SmartEvent

  B. Open SmartEvent, Click on Query Properties and select the User column

  C. Open SmartEvent, go to the Policy Tab, select General Settings from the left column > User Identities and check the box Show Identities

  D. Open SmartEvent and toggle the Show or Hide Identities icon

  Correct Answer: C