CheckPoint 156-915.80 Online Practice Questions and Exam Preparation

CheckPoint 156-915.80 Online Questions & Answers

• Question 181:

  Fill in the blank: The R80 feature ________ permits blocking specific IP addresses for a specified time period.

  A. Block Port Overflow
  B. Local Interface Spoofing
  C. Suspicious Activity Monitoring
  D. Adaptive Threat Prevention
  C. Suspicious Activity Monitoring

• Question 182:

  What is the purpose of a SmartEvent Correlation Unit?

  A. The SmartEvent Correlation Unit is designed to check the connection reliability from SmartConsole to the SmartEvent Server
  B. The SmartEvent Correlation Unit's task it to assign severity levels to the identified events.
  C. The Correlation unit role is to evaluate logs from the log server component to identify patterns/threats and convert them to events.
  D. The SmartEvent Correlation Unit is designed to check the availability of the SmartReporter Server
  C. The Correlation unit role is to evaluate logs from the log server component to identify patterns/threats and convert them to events.

• Question 183:

  You run cphaprob -a if. When you review the output, you find the word DOWN. What does DOWN mean?

  A. The cluster link is down.
  B. The physical interface is administratively set to DOWN.
  C. The physical interface is down.
  D. CCP pakets couldn't be sent to or didn't arrive from neighbor member.
  D. CCP pakets couldn't be sent to or didn't arrive from neighbor member.

• Question 184:

  In order to get info about assignment (FW, SND) of all CPUs in your SGW, what is the most accurate CLI command?

  A. fw ctl sdstat
  B. fw ctl affinity -l -a -r -v
  C. fw ctl multik stat
  D. cpinfo
  B. fw ctl affinity -l -a -r -v

• Question 185:

  How do you configure the Security Policy to provide user access to the Captive Portal through an external (Internet) interface?

  A. Change the gateway settings to allow Captive Portal access via an external interface.
  B. No action is necessary. This access is available by default.
  C. Change the Identity Awareness settings under Global Properties to allow Captive Portal access on all interfaces.
  D. Change the Identity Awareness settings under Global Properties to allow Captive Portal access for an external interface.
  A. Change the gateway settings to allow Captive Portal access via an external interface.

• Question 186:

  Which of the following is true regarding the Proxy ARP feature for Manual NAT in R80.10?

  A. The local.arp file must always be configured
  B. Translate Destination on Client Side should be configured
  C. fw ctl proxy should be configured
  D. Automatic proxy ARP configuration can be enabled
  D. Automatic proxy ARP configuration can be enabled

• Question 187:

  What is the mechanism behind Threat Extraction?

  A. This is a new mechanism which extracts malicious files from a document to use it as a counter-attack against its sender
  B. This is a new mechanism which is able to collect malicious files out of any kind of file types to destroy it prior to sending it to the intended recipient
  C. This is a new mechanism to identify the IP address of the sender of malicious codes and to put it into the SAM database (Suspicious Activity Monitoring).
  D. Any active contents of a document, such as JavaScripts, macros and links will be removed from the document and forwarded to the intended recipient, which makes this solution very fast.
  D. Any active contents of a document, such as JavaScripts, macros and links will be removed from the document and forwarded to the intended recipient, which makes this solution very fast.

• Question 188:

  Which components allow you to reset a VPN tunnel?

  A. vpn tu command or SmartView monitor
  B. delete vpn ike sa or vpn she11 command
  C. vpn tunnelutil or delete vpn ike sa command
  D. SmartView monitor only
  D. SmartView monitor only

• Question 189:

  Which command would provide the most comprehensive diagnostic information to Check Point Technical Support?

  A. fw cpinfo
  B. cpinfo -o date.cpinfo.txt
  C. diag
  D. cpstat - date.cpstat.txt
  B. cpinfo -o date.cpinfo.txt

• Question 190:

  SmartEvent does NOT use which of the following procedures to identify events?

  A. Matching a log against each event definition
  B. Create an event candidate
  C. Matching a log against local exclusions
  D. Matching a log against global exclusions
  C. Matching a log against local exclusions