CheckPoint Checkpoint Certifications 156-915.80 Questions & Answers

• Question 191:

  What scenario indicates that SecureXL is enabled?

  A. Dynamic objects are available in the Object Explorer

  B. SecureXL can be disabled in cpconfig

  C. fwaccel commands can be used in clish

  D. Only one packet in a stream is seen in a fw monitor packet capture

  Correct Answer: C

• Question 192:

  What is the command to show SecureXL status?

  A. fwaccel status

  B. fwaccel stats -m

  C. fwaccel -s

  D. fwaccel stat

  Correct Answer: D

  To check overall SecureXL status: [Expert@HostName]# fwaccel stat Reference: https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=andsolutionid=sk41397

• Question 193:

  Which web services protocol is used to communicate to the Check Point R80 identity Awareness Web APi?

  A. SOAP

  B. REST

  C. XLANG

  D. XML-RPC

  Correct Answer: B

  The Identity Web API uses the REST protocol over SSL. The requests and responses are HTTP and in JSON format.

  Reference: https://sc1.checkpoint.com/documents/R80.10/WebAdminGuides/EN/CP_R80.10_IdentityAwareness_AdminGuide/html_frameset.htm?topic=documents/R80.10/WebAdminGuides/EN/

  CP_R80.10_IdentityAwareness_AdminGuide/148699

• Question 194:

  Which file gives you a list of all security servers in use, including port number?

  A. $FWDIR/conf/conf.conf

  B. $FWDIR/conf/servers.conf

  C. $FWDIR/conf/fwauthd.conf

  D. $FWDIR/conf/serversd.conf

  Correct Answer: C

• Question 195:

  Which features are only supported with R80.10 Gateways but not R77.x?

  A. Access Control policy unifies the Firewall, Application Control and URL Filtering, Data Awareness, and Mobile Access Software Blade policies.

  B. Limits the upload and download throughput for streaming media in the company to 1 Gbps.

  C. The rule base can be built of layers, each containing a set of the security rules. Layers are inspected in the order in which they are defined, allowing control over the rule base flow and which security functionalities take precedence.

  D. Time object to a rule to make the rule active only during specified times.

  Correct Answer: C

  Reference: http://slideplayer.com/slide/12183998/

• Question 196:

  You are working with multiple Security Gateways enforcing an extensive number of rules. To simplify security administration, which action would you choose?

  A. Eliminate all possible contradictory rules such as the Stealth or Cleanup rules.

  B. Create a separate Security Policy package for each remote Security Gateway.

  C. Create network objects that restrict all applicable rules to only certain networks.

  D. Run separate SmartConsole instances to login and configure each security Gateway directly.

  Correct Answer: B

• Question 197:

  Tom has been tasked to install Check Point R80 in a distributed deployment. Before Tom installs the systems this way, how many machines will be need if he does NOT include a SmartConsole machine in his calculations?

  A. One machine, but it needs to be installed using SecurePlatform for compatibility purposes.

  B. One machine

  C. Two machines

  D. Three machines

  Correct Answer: C

• Question 198:

  Fill in the blank: The command _______________ provides the most complete restoration of a R80 configuration.

  A. upgrade_import

  B. cpconfig

  C. fwm dbimport -p

  D. cpinfo -recover

  Correct Answer: A

• Question 199:

  Which of the following statements is TRUE about R80 management plug-ins?

  A. The plug-in is a package installed on the Security Gateway.

  B. Installing a management plug-in requires a Snapshot, just like any upgrade process.

  C. A management plug-in interacts with a Security Management Server to provide new features and support for new products.

  D. Using a plug-in offers full central management only if special licensing is applied to specific features of the plug-in.

  Correct Answer: C

• Question 200:

  Fill in the blank: The R80 feature ________ permits blocking specific IP addresses for a specified time period.

  A. Block Port Overflow

  B. Local Interface Spoofing

  C. Suspicious Activity Monitoring

  D. Adaptive Threat Prevention

  Correct Answer: C