CheckPoint 156-915.80 Online Practice Questions and Exam Preparation

CheckPoint 156-915.80 Online Questions & Answers

• Question 131:

  Why would you not see a CoreXL configuration option in cpconfig?

  A. The gateway only has one processor
  B. CoreXL is not licenses
  C. CoreXL is disabled via policy
  D. CoreXL is not enabled in the gateway object
  A. The gateway only has one processor

• Question 132:

  Paul has just joined the MegaCorp security administration team. Natalie, the administrator, creates a new administrator account for Paul in SmartDashboard and installs the policy. When Paul tries to login it fails. How can Natalie verify whether Paul's IP address is predefined on the security management server?

  A. Login to Smart Dashboard, access Properties of the SMS, and verify whether Paul's IP address is listed.
  B. Type cpconfig on the Management Server and select the option "GUI client List" to see if Paul's IP address is listed.
  C. Login in to Smart Dashboard, access Global Properties, and select Security Management, to verify whether Paul's IP address is listed.
  D. Access the WEBUI on the Security Gateway, and verify whether Paul's IP address is listed as a GUI client.
  B. Type cpconfig on the Management Server and select the option "GUI client List" to see if Paul's IP address is listed.

• Question 133:

  You are working with multiple Security Gateways enforcing an extensive number of rules. To simplify security administration, which action would you choose?

  A. Eliminate all possible contradictory rules such as the Stealth or Cleanup rules.
  B. Create a separate Security Policy package for each remote Security Gateway.
  C. Create network objects that restrict all applicable rules to only certain networks.
  D. Run separate SmartConsole instances to login and configure each security Gateway directly.
  B. Create a separate Security Policy package for each remote Security Gateway.

• Question 134:

  Check Point Management (cpm) is the main management process in that it provides the architecture for a consolidated management console. CPM allows the GUI client and management server to communicate via web service using ______.

  A. TCP port 19009
  B. TCP Port 18190
  C. TCP Port 18191
  D. TCP Port 18209
  B. TCP Port 18190

• Question 135:

  What tool exports the Management Configuration into a single file?

  A. CPConfig_Export
  B. Backup
  C. Upgrade_Export
  D. migrate export
  D. migrate export

• Question 136:

  You have three Gateways in a mesh community. Each gateway's VPN Domain is their internal network as defined on the Topology tab setting All IP Addresses behind Gateway based on Topology information. You want to test the route-based VPN, so you created VTIs among the Gateways and created static route entries for the VTIs. However, when you test the VPN, you find out the VPN still go through the regular domain IPsec tunnels instead of the routed VTI tunnels. What is the problem and how do you make the VPN use the VTI tunnels?

  A. Domain VPN takes precedence over the route-based VTI. To make the VPN go through VTI, remove the Gateways out of the mesh community and replace with a star community
  B. Domain VPN takes precedence over the route-based VTI. To make the VPN go through VTI, use an empty group object as each Gateway's VPN Domain
  C. Route-based VTI takes precedence over the Domain VPN. To make the VPN go through VTI, use dynamic-routing protocol like OSPF or BGP to route the VTI address to the peer instead of static routes
  D. Route-based VTI takes precedence over the Domain VPN. Troubleshoot the static route entries to insure that they are correctly pointing to the VTI gateway IP.
  B. Domain VPN takes precedence over the route-based VTI. To make the VPN go through VTI, use an empty group object as each Gateway's VPN Domain

• Question 137:

  What happen when IPS profile is set in Detect-Only Mode for troubleshooting?

  A. It will generate Geo-Protection traffic
  B. Automatically uploads debugging logs to Check Point Support Center
  C. It will not block malicious traffic
  D. Bypass licenses requirement for Geo-Protection control
  C. It will not block malicious traffic

• Question 138:

  To bind a NIC to a single processor when using CoreXL on GAiA, you would use the command

  sim affinity

• Question 139:

  How many confidence levels are there for IPS?

  A. four
  B. two
  C. five
  D. three
  C. five

• Question 140:

  A Threat Prevention profile is a set of configurations based on the following. (Choose all that apply.)

  A. Anti-Virus settings, Anti-Bot settings, Threat Emulation settings
  B. Anti-Virus settings, Anti-Bot settings, Threat Emulation settings, Intrusion-prevention settings
  C. Anti-Virus settings, Anti-Bot settings, Threat Emulation settings, Intrusion-prevention settings, HTTPS inspection settings
  D. Anti-Bot settings, Threat Emulation settings, Intrusion-prevention settings, HTTPS inspection settings
  A. Anti-Virus settings, Anti-Bot settings, Threat Emulation settings