CheckPoint Checkpoint Certifications 156-915.80 Questions & Answers

• Question 131:

  What are the main stages of a policy installation?

  A. Verification and Compilation, Transfer and Commit

  B. Verification and Compilation, Transfer and Installation

  C. Verification, Commit, Installation

  D. Verification, Compilation and Transfer, Installation

  Correct Answer: B

• Question 132:

  What are the available options for downloading Check Point hotfixes in Gaia WebUI (CPUSE)?

  A. Manually, Scheduled, Automatic

  B. Update Now, Scheduled Update, Offline Update

  C. Update Automatically, Update Now, Disable Update

  D. Manual Update, Disable Update, Automatic Update

  Correct Answer: A

  Reference: https://sc1.checkpoint.com/documents/R80.10/WebAdminGuides/EN/CP_R80.10_Gaia_AdminGuide/html_frameset.htm?topic=documents/R80.10/WebAdminGuides/EN/CP_R80.10_Gaia_AdminGuide/84387

• Question 133:

  What is true about VRRP implementations?

  A. VRRP membership is enabled in cpconfig

  B. VRRP can be used together with ClusterXL, but with degraded performance

  C. You cannot have a standalone deployment

  D. You cannot have different VRIDs in the same physical network

  Correct Answer: C

  Reference: https://sc1.checkpoint.com/documents/R77/CP_R77_Gaia_AdminWebAdminGuide/html_frameset.htm?topic=documents/R77/CP_R77_Gaia_AdminWebAdminGuide/87911

• Question 134:

  When using Monitored circuit VRRP, what is a priority delta?

  A. When an interface fails the priority changes to the priority delta

  B. When an interface fails the delta claims the priority

  C. When an interface fails the priority delta is subtracted from the priority

  D. When an interface fails the priority delta decides if the other interfaces takes over

  Correct Answer: C

  Reference: https://sc1.checkpoint.com/documents/R76/CP_R76_Gaia_WebAdmin/87911.htm

• Question 135:

  Which one of the following is true about Threat Extraction?

  A. Always delivers a file to user

  B. Works on all MS Office, Executables, and PDF files

  C. Can take up to 3 minutes to complete

  D. Delivers file only if no threats found

  Correct Answer: D

• Question 136:

  Daisy need to review how the Security Gateway Cluster, Jonas, behaves when a cluster member comes back on line. Where would she review the behavior of cluster member recovery in the Dashboard?

  A. Open SmartDashboard, select and open the Cluster Object Jonas, Select ClusterXL and review the High Availability recovery options.

  B. Open SmartDashboard, select and open the Cluster Object Jonas, Select Cluster Members and review the High Availability recovery options.

  C. Open SmartDashboard, select and open the Cluster Object Jonas, Select Topology ?Advanced Options and review the High Availability recovery options.

  D. Open SmartDashboard, select and open the Cluster Object Jonas, Select ClusterXL ?Advanced Options and review the High Availability recovery options.

  Correct Answer: C

• Question 137:

  What is considered Hybrid Emulation Mode?

  A. Manual configuration of file types on emulation location

  B. Load sharing of emulation between an on premise appliance and the cloud

  C. Load sharing between OS behavior and CPU Level emulation

  D. High availability between the local SandBlast appliance and the cloud

  Correct Answer: B

• Question 138:

  To accelerate the rate of connection establishment, SecureXL groups all connection that match a particular service and whose sole differentiating element is the source port. The type of grouping enables even the very first packets of a TCP handshake to be accelerated. The first packets of the first connection on the same service will be forwarded to the Firewall kernel which will then create a template of the connection. Which of these IS NOT a SecureXL template?

  A. Accept Template

  B. Deny template

  C. Drop Template

  D. NAT Template

  Correct Answer: B

  [Expert@GW:0]# fwaccel stat Accelerator Status : on Accept Templates : enabled Drop Templates : disabled NAT Templates : enabled NMR Templates : enabled NMT Templates : enabled

• Question 139:

  What are the methods of SandBlast Threat Emulation deployment?

  A. Cloud, Appliance and Private

  B. Cloud, Appliance and Hybrid

  C. Cloud, Smart-1 and Hybrid

  D. Cloud, OpenServer and Vmware

  Correct Answer: A

• Question 140:

  Which command is used to display status information for various components?

  A. show all systems

  B. show system messages

  C. sysmess all

  D. show sysenv all

  Correct Answer: D

  Reference: https://sc1.checkpoint.com/documents/R77/CP_R77_Gaia_AdminWebAdminGuide/html_frameset.htm?topic=documents/R77/CP_R77_Gaia_AdminWebAdminGuide/120709