CheckPoint Checkpoint Certifications 156-915.80 Questions & Answers

• Question 121:

  What command can you use to have cpinfo display all installed hotfixes?

  A. cpinfo -hf

  B. cpinfo -y all

  C. cpinfo -get hf

  D. cpinfo installed_jumbo

  Correct Answer: B

• Question 122:

  Check Point Management (cpm) is the main management process in that it provides the architecture for a consolidated management console. CPM allows the GUI client and management server to communicate via web service using ______.

  A. TCP port 19009

  B. TCP Port 18190

  C. TCP Port 18191

  D. TCP Port 18209

  Correct Answer: B

• Question 123:

  What is true about the IPS-Blade?

  A. in R80, IPS is managed by the Threat Prevention Policy

  B. in R80, in the IPS Layer, the only three possible actions are Basic, Optimized and Strict

  C. in R80, IPS Exceptions cannot be attached to "all rules"

  D. in R80, the GeoPolicy Exceptions and the Threat Prevention Exceptions are the same

  Correct Answer: A

• Question 124:

  Which statement is correct about the Sticky Decision Function?

  A. It is not supported with either the Performance pack or a hardware based accelerator card

  B. Does not support SPI's when configured for Load Sharing

  C. It is automatically disabled if the Mobile Access Software Blade is enabled on the cluster

  D. It is not required L2TP traffic

  Correct Answer: A

  Reference: https://sc1.checkpoint.com/documents/R76/CP_R76_ClusterXL_AdminGuide/7290.htm

• Question 125:

  Which of the following is NOT an attribute of packet acceleration?

  A. Source address

  B. Protocol

  C. Destination port

  D. Application Awareness

  Correct Answer: D

  Reference: https://sc1.checkpoint.com/documents/R76/CP_R76_Firewall_WebAdmin/92711.htm

• Question 126:

  You have successfully backed up your Check Point configurations without the OS information. What command would you use to restore this backup?

  A. restore_backup

  B. import backup

  C. cp_merge

  D. migrate import

  Correct Answer: D

• Question 127:

  You need to change the MAC-address on eth2 interface of the gateway. What command and what mode will you use to achieve this goal?

  A. set interface eth2 mac-addr 11:11:11:11:11:11; CLISH

  B. ifconfig eth1 hw 11:11:11:11:11:11; expert

  C. set interface eth2 hw-addr 11:11:11:11:11:11; CLISH

  D. ethtool -i eth2 mac 11:11:11:11:11:11; expert

  Correct Answer: A

  Reference: https://sc1.checkpoint.com/documents/R76/CP_R76_Gaia_WebAdmin/75697.htm

• Question 128:

  What command verifies that the API server is responding?

  A. api stat

  B. api status

  C. show api_status

  D. api_get_status

  Correct Answer: B

  Reference: https://community.checkpoint.com/thread/6524-can-anybody-let-me-know-how-can-we-import-policyrules-via-csv-file

• Question 129:

  Session unique identifiers are passed to the web api using which http header option?

  A. X-chkp-sid

  B. Accept-Charset

  C. Proxy-Authorization

  D. Application

  Correct Answer: C

• Question 130:

  What does the command vpn crl_zap do?

  A. Nothing, it is not a valid command

  B. Erases all CRL's from the gateway cache

  C. Erases VPN certificates from cache

  D. Erases CRL's from the management server cache

  Correct Answer: B

  Reference: https://sc1.checkpoint.com/documents/R76/CP_R76_Gaia_WebAdmin/12467.htm#o12618