CheckPoint Checkpoint Certifications 156-915.80 Questions & Answers

• Question 151:

  Security Checkup Summary can be easily conducted within:

  A. Summary

  B. Views

  C. Reports

  D. Checkups

  Correct Answer: B

• Question 152:

  Which of the SecureXL templates are enabled by default on Security Gateway?

  A. Accept

  B. Drop

  C. NAT

  D. None

  Correct Answer: A

• Question 153:

  As an administrator, you may be required to add the company logo to reports. To do this, you would save the logo as a PNG file with the name `cover-company-logo.png' and then copy that image file to which directory on the SmartEvent server?

  A. $FWDIR/smartevent/conf

  B. $RTDIR/smartevent/conf

  C. $RTDIR/smartview/conf

  D. $FWDIR/smartview/conf

  Correct Answer: C

  Reference: https://sc1.checkpoint.com/documents/R80.10/WebAdminGuides/EN/CP_R80.10_LoggingAndMonitoring_AdminGuide/html_frameset.htm?topic=documents/R80.10/WebAdminGuides/EN/ CP_R80.10_LoggingAndMonitoring_AdminGuide/188029

• Question 154:

  What CLI command compiles and installs a Security Policy on the target's Security Gateways?

  A. fwm compile

  B. fwm load

  C. fwm fetch

  D. fwm install

  Correct Answer: B

  Reference: http://dl3.checkpoint.com/paid/7e/CheckPoint_R65_CLI_AdminGuide.pdf?HashKey=1540653105_b07751355cf424cd738b8409d23ad59candxtn=.pdf

• Question 155:

  If the Active Security Management Server fails or if it becomes necessary to change the Active to Standby, the following steps must be taken to prevent data loss. Providing the Active Security Management Server is responsive, which of these steps should NOT be performed:

  A. Rename the hostname of the Standby member to match exactly the hostname of the Active member.

  B. Change the Standby Security Management Server to Active.

  C. Change the Active Security Management Server to Standby.

  D. Manually synchronize the Active and Standby Security Management Servers.

  Correct Answer: A

• Question 156:

  During inspection of your Threat Prevention logs you find four different computers having one event each with a Critical Severity. Which of those hosts should you try to remediate first?

  A. Host having a Critical event found by Threat Emulation

  B. Host having a Critical event found by IPS

  C. Host having a Critical event found by Antivirus

  D. Host having a Critical event found by Anti-Bot

  Correct Answer: A

• Question 157:

  What is correct statement about Security Gateway and Security Management Server failover in Check Point R80.X in terms of Check Point Redundancy driven solutions?

  A. Security Gateway failover is an automatic procedure but Security Management Server failover is a manual procedure.

  B. Security Gateway failover as well as Security Management Server failover is a manual procedure

  C. Security Gateway failover is a manual procedure but Security Management Server failover is an automatic procedure.

  D. Security Gateway failover as well as Security Management Server failover is an automatic procedure.

  Correct Answer: A

• Question 158:

  Which command will allow you to see the interface status?

  A. cphaprob interface

  B. cphaprob -l interface

  C. cphaprob -a if

  D. cphaprob stat

  Correct Answer: C

  Reference: https://sc1.checkpoint.com/documents/R76/CP_R76_ClusterXL_AdminGuide/7298.htm

• Question 159:

  What is the least ideal Synchronization Status for Security Management Server High Availability deployment?

  A. Lagging

  B. Synchronized

  C. Never been synchronized

  D. Collision

  Correct Answer: A

  The possible synchronization statuses are:

  Never been synchronized - immediately after the Secondary Security Management server has been installed, it has not yet undergone the first manual synchronization that brings it up to date with the Primary Security Management server.

  Synchronized - the peer is properly synchronized and has the same database information and installed Security Policy.

  Lagging - the peer SMS has not been synchronized properly.

  For instance, on account of the fact that the Active SMS has undergone changes since the previous synchronization (objects have been edited, or the Security Policy has been newly installed), the information on the Standby SMS is lagging.

  Advanced - the peer SMS is more up-to-date.

  For instance, in the above figure, if a system administrators logs into Security Management server B before it has been synchronized with the Security Management server A, the status of the Security Management server A is Advanced, since

  it contains more up-to-date information which the former does not have.

  In this case, manual synchronization must be initiated by the system administrator by changing the Active SMS to a Standby SMS. Perform a synch me operation from the more advanced server to the Standby SMS. Change the Standby SMS

  to the Active SMS.

  Collision - the Active SMS and its peer have different installed policies and databases. The administrator must perform manual synchronization and decide which of the SMSs to overwrite.

  Reference: https://sc1.checkpoint.com/documents/R76/CP_R76_SecMan_WebAdmin/html_frameset.htm?topic=documents/R76/CP_R76_SecMan_WebAdmin/13132

• Question 160:

  What is true of the API server on R80.10?

  A. By default the API-server is activated and does not have hardware requirements

  B. By default the API-server is not active and should be activated from the WebUI

  C. By default the API server is active on management and stand-alone servers with 16GB of RAM (or more)

  D. By default, the API server is active on management servers with 4 GB of RAM (or more) and on stand-alone servers with 8 GB of RAM (more)

  Correct Answer: D

  Reference: https://sc1.checkpoint.com/documents/R80/APIs/#introduction%20