CheckPoint 156-915.80 Online Practice Questions and Exam Preparation

CheckPoint 156-915.80 Online Questions & Answers

• Question 111:

  Before upgrading SecurePlatform to GAiA, you should create a backup. To save time, many administrators use the command backup. This creates a backup of the Check Point configuration as well as the system configuration. An administrator has installed the latest HFA on the system for fixing traffic problem after creating a backup file. There is a mistake in the very complex static routing configuration. The Check Point configuration has not been changed. Can the administrator use a restore to fix the errors in static routing?

  A. The restore is not possible because the backup file does not have the same build number (version).
  B. The restore is done by selecting Snapshot Management from the boot menu of GAiA.
  C. The restore can be done easily by the command restore and copying netconf.C from the production environment.
  D. A backup cannot be restored, because the binary files are missing.
  C. The restore can be done easily by the command restore and copying netconf.C from the production environment.

• Question 112:

  Which of these options is an implicit MEP option?

  A. Primary-backup
  B. Source address based
  C. Round robin
  D. Load Sharing
  A. Primary-backup

• Question 113:

  When an encrypted packet is decrypted, where does this happen?

  A. Security policy
  B. Inbound chain
  C. Outbound chain
  D. Decryption is not supported
  A. Security policy

• Question 114:

  Which of the following is NOT defined by an Access Role object?

  A. Source Network
  B. Source Machine
  C. Source User
  D. Source Server
  D. Source Server

• Question 115:

  Jack needs to configure CoreXL on his Red Security Gateway. What are the correct steps to enable CoreXL?

  A. SSH to Red Security Gateway, run cpconfig> select Configure Check Point CoreXL > enable CoreXL > exit cpconfig> reboot the Security Gateway
  B. SSH to Red Security Gateway, run cpconfig> select Configure Check Point CoreXL > exit cpconfig> reboot the Security Gateway
  C. Open the SmartDashboard, Open the Red Check Point Object, select ClusterXL, check the CoreXL box, and push policy
  D. Open the SmartDashboard, Open the Red Check Point Object, select Optimizations, check the CoreXL box, and push policy
  A. SSH to Red Security Gateway, run cpconfig> select Configure Check Point CoreXL > enable CoreXL > exit cpconfig> reboot the Security Gateway

• Question 116:

  What is the syntax for uninstalling a package using newpkg?

  A. -u
  B. -i
  C. -S
  D. newpkg CANNOT be used to uninstall a package
  D. newpkg CANNOT be used to uninstall a package

• Question 117:

  Which one of these features is NOT associated with the Check Point URL Filtering and Application Control Blade?

  A. Detects and blocks malware by correlating multiple detection engines before users are affected.
  B. Configure rules to limit the available network bandwidth for specified users or groups.
  C. Use UserCheck to help users understand that certain websites are against the company's security policy.
  D. Make rules to allow or block applications and Internet sites for individual applications, categories, and risk levels.
  A. Detects and blocks malware by correlating multiple detection engines before users are affected.

• Question 118:

  You are a Security Administrator who has installed Security Gateway R80 on your network. You need to allow a specific IP address range for a partner site to access your intranet Web server. To limit the partner's access for HTTP and FTP

  only, you did the following:

  1) Created manual Static NAT rules for the Web server.

  2) Cleared the following settings in the Global Properties > Network Address Translation screen:

  -Allow bi-directional NAT

  -

  Translate destination on client side Do the above settings limit the partner's access?

  A. Yes. This will ensure that traffic only matches the specific rule configured for this traffic, and that the Gateway translates the traffic after accepting the packet.
  B. No. The first setting is not applicable. The second setting will reduce performance.
  C. Yes. Both of these settings are only applicable to automatic NAT rules.
  D. No. The first setting is only applicable to automatic NAT rules. The second setting will force translation by the kernel on the interface nearest to the client.
  D. No. The first setting is only applicable to automatic NAT rules. The second setting will force translation by the kernel on the interface nearest to the client.

• Question 119:

  Fill in the blank. To verify that a VPN Tunnel is properly established, use the command _________

  vpn tunnelutil

• Question 120:

  Match the VPN-related terms with their definitions. Each correct term is only used once. Exhibit:

  

  A. A-3, B-4, C-1, D-5
  B. A-4, B-3, C-5, D-2
  C. A-2, B-5, C-4, D-1
  D. A-3, B-2, C-1, D-4
  B. A-4, B-3, C-5, D-2