CheckPoint Checkpoint Certifications 156-915.80 Questions & Answers

• Question 181:

  Where do you create and modify the Mobile Access policy in R80?

  A. SmartConsole

  B. SmartMonitor

  C. SmartEndpoint

  D. SmartDashboard

  Correct Answer: D

• Question 182:

  Customer's R80 management server needs to be upgraded to R80.10. What is the best upgrade method when the management server is not connected to the Internet?

  A. Export R80 configuration, clean install R80.10 and import the configuration

  B. CPUSE online upgrade

  C. CPUSE offline upgrade

  D. SmartUpdate upgrade

  Correct Answer: C

• Question 183:

  What utility would you use to configure route-based VPNs?

  A. vpn shell

  B. vpn tu

  C. vpn sw_topology

  D. vpn set_slim_server

  Correct Answer: A

  Reference: https://sc1.checkpoint.com/documents/R76/CP_R76_VPN_AdminGuide/13824.htm

• Question 184:

  The Event List within the Events tab contains:

  A. a list of options available for running a query.

  B. the top events, destinations, sources, and users of the query results, either as a chart or in a tallied list.

  C. events generated by a query.

  D. the details of a selected event.

  Correct Answer: C

  These are the components of the Events tab: Reference: https://sc1.checkpoint.com/documents/R80/CP_R80_LoggingAndMonitoring/html_frameset.htm?topic=documents/R80/CP_R80_LoggingAndMonitoring/131915

  

• Question 185:

  What is mandatory for ClusterXL to work properly?

  A. The number of cores must be the same on every participating cluster node

  B. The Magic MAC number must be unique per cluster node.

  C. The Sync Interface must not have an IP address configured

  D. If you have "Non-monitored Private" interfaces, the number of those interfaces must be the same on all cluster members

  Correct Answer: B

• Question 186:

  Which one of the following processes below would not start if there was a licensing issue.

  A. CPD

  B. CPCA

  C. FWM

  D. CPWD

  Correct Answer: A

• Question 187:

  Aaron is a Cyber Security Engineer working for Global Law Firm with large scale deployment of Check Point Enterprise Appliances using GAiA/R80.10. Company's Network Security Developer Team is having issue testing new API with newly deployed R80.10 Security Management Server and blames Check Point Security Management Server as root cause. The ticket has been created and issue is at Aaron's desk for an investigation. What do you recommend as the best suggestion for Aaron to make sure API testing works as expected?

  A. Aaron should check API Server status from expert CLI by "fwm api status" and if it's stopped he should start using command "fwm api start" on Security Management Server.

  B. Aaron should check API Server5 status from expert CLI by "cpapi status" and if it's stopped he should start using command "cpapi start" on Security Management Server.

  C. Aaron should check API Server status from expert CLI by "api status" and if it's stopped he should start using command "api start" on Security Management Server.

  D. Aaron should check API Server status from expert CLI by "cpm api status" and if it's stopped he should start using command "cpm api start" on Security Management Server.

  Correct Answer: C

• Question 188:

  GAiA Software update packages can be imported and installed offline in situation where:

  A. Security Gateway with GAiA does NOT have SFTP access to Internet

  B. Security Gateway with GAiA does NOT have access to Internet.

  C. Security Gateway with GAiA does NOT have SSH access to internet.

  D. The desired CPUSE package is ONLY available in the Check Point CLOUD.

  Correct Answer: B

  Reference: https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=andsolutionid=sk92449#How%20to%20work%20with%20CPUSE%20-%20How%20to%20download%20and%20import%20a% 20CPUSE%20package%20-%20Import%20instructions%20for%20Offline%20procedure%20-%20Gaia%20Portal

• Question 189:

  What CLI command will reset the IPS pattern matcher statistics?

  A. ips reset pmstat

  B. ips pstats reset

  C. ips pmstats refresh

  D. ips pmstats reset

  Correct Answer: D

  ips pmstats reset Description - Resets the data that is collected to calculate the pmstat statistics. Usage - ips pmstats reset Reference: https://sc1.checkpoint.com/documents/R76/CP_R76_CLI_WebAdmin/84627.htm#o84635

• Question 190:

  For best practices, what is the recommended time for automatic unlocking of locked admin accounts?

  A. 20 minutes

  B. 15 minutes

  C. Admin account cannot be unlocked automatically

  D. 30 minutes at least

  Correct Answer: D