CheckPoint 156-915.80 Online Practice Questions and Exam Preparation

CheckPoint 156-915.80 Online Questions & Answers

• Question 141:

  SmartEvent has several components that function together to track security threats. What is the function of the Correlation Unit as a component of this architecture?

  A. Analyzes this log entry as it arrives at the log server according to the Event Policy. When a threat pattern is identified, an event is forwarded to the SmartEvent Server.
  B. Correlates all the identified threats with the consolidation policy.
  C. Collects syslog data from third party devices and saves them to the database.
  D. Connects with the SmartEvent Client when generating threat reports.
  A. Analyzes this log entry as it arrives at the log server according to the Event Policy. When a threat pattern is identified, an event is forwarded to the SmartEvent Server.

• Question 142:

  What is the default size of NAT table fwx_alloc?

  A. 20000
  B. 35000
  C. 25000
  D. 10000
  C. 25000

• Question 143:

  Selecting an event displays its configurable properties in the Detail pane and a description of the event in the Description pane. Which is NOT an option to adjust or configure?

  A. Severity
  B. Automatic reactions
  C. Policy
  D. Threshold
  C. Policy

• Question 144:

  Which statement is NOT TRUE about Delta synchronization?

  A. Using UDP Multicast or Broadcast on port 8161
  B. Using UDP Multicast or Broadcast on port 8116
  C. Quicker than Full Sync
  D. Transfers changes in the Kernel labels between cluster members
  A. Using UDP Multicast or Broadcast on port 8161

• Question 145:

  True or False: SecureXL improves non-ecnrypted firewall traffic throughput and encrypted VPN traffic throughput.

  A. True, because SecureXL does improve all traffic
  B. False, because SecureXL does not improve this traffic but CoreXL does
  C. True, because SecureXL does improve this traffic
  D. False, because encrypted traffic cannot be inspected
  C. True, because SecureXL does improve this traffic

• Question 146:

  What's true about Troubleshooting option in the IPS profile properties?

  A. Temporarily change the active protection profile to "Default_Protection"
  B. Temporarily set all protections to track (log) in SmartView Tracker
  C. Temporarily will disable IPS kernel engine
  D. Temporarily set all active protections to Detect
  B. Temporarily set all protections to track (log) in SmartView Tracker

• Question 147:

  What gives administrators more flexibility when configuring Captive Portal instead of LDAP query for Identity Awareness authentication?

  A. Captive Portal is more secure than standard LDAP
  B. Nothing, LDAP query is required when configuring Captive Portal
  C. Captive Portal works with both configured users and guests
  D. Captive Portal is more transparent to the user
  C. Captive Portal works with both configured users and guests

• Question 148:

  When a packet is flowing through the security gateway, which one of the following is a valid inspection path?

  A. Acceleration Path
  B. Small Path
  C. Firewall Path
  D. Medium Path
  D. Medium Path

• Question 149:

  You are running a R80 Security Gateway on GAiA; In case of a hardware failure, you have a server with the exact same hardware and firewall version installed. What back up method could be used to quickly put the secondary firewall into production?

  A. manual backup
  B. upgrade_export
  C. backup
  D. snapshot
  D. snapshot

• Question 150:

  Which command would you use to determine the current Cluster Global ID?

  A. fw ctl show global_cluster_id
  B. fw ctl get int global_cluster_id
  C. Expert -> cphaconf cluster_id get
  D. Cish -> cphaconf cluster_id get
  C. Expert -> cphaconf cluster_id get