CheckPoint Checkpoint Certifications 156-915.80 Questions & Answers

• Question 201:

  In R80 spoofing is defined as a method of:

  A. Disguising an illegal IP address behind an authorized IP address through Port Address Translation.

  B. Hiding your firewall from unauthorized users.

  C. Detecting people using false or wrong authentication logins

  D. Making packets appear as if they come from an authorized IP address.

  Correct Answer: D

  IP spoofing replaces the untrusted source IP address with a fake, trusted one, to hijack connections to your network. Attackers use IP spoofing to send malware and bots to your protected network, to execute DoS attacks, or to gain unauthorized access. Reference: http://dl3.checkpoint.com/paid/74/74d596decb6071a4ee642fbdaae7238f/CP_R80_SecurityManagement_AdminGuide.pdf?HashKey=1479584563_6f823c8ea1514609148aa4fec5425db2andxtn=.pdf

• Question 202:

  Fill in the blank: The tool ___________ generates a R80 Security Gateway configuration report.

  A. infoCP

  B. infoview

  C. cpinfo

  D. fw cpinfo

  Correct Answer: C

• Question 203:

  Fill in the blank: The R80 utility fw monitor is used to troubleshoot __________.

  A. User data base corruption

  B. LDAP conflicts

  C. Traffic issues

  D. Phase two key negotiation

  Correct Answer: C

• Question 204:

  The Security Gateway is installed on GAiA R80. The default port for the Web User Interface is _______.

  A. TCP 18211

  B. TCP 257

  C. TCP 4433

  D. TCP 443

  Correct Answer: D

• Question 205:

  When doing a Stand-Alone Installation, you would install the Security Management Server with which other Check Point architecture component?

  A. None, Security Management Server would be installed by itself

  B. SmartConsole

  C. SecureClient

  D. SmartEvent

  Correct Answer: D

• Question 206:

  Why would you not see a CoreXL configuration option in cpconfig?

  A. The gateway only has one processor

  B. CoreXL is not licenses

  C. CoreXL is disabled via policy

  D. CoreXL is not enabled in the gateway object

  Correct Answer: A

• Question 207:

  In SPLAT the command to set the timeout was idle. In order to achieve this and increase the timeout for Gaia, what command do you use?

  A. set idle

  B. set inactivity–timeout

  C. set timeout

  D. set inactivity

  Correct Answer: B

  Reference: https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=andsolutionid=sk95447

• Question 208:

  What makes Anti-Bot unique compared to other Threat Prevention mechanisms, such as URL Filtering, Anti-Virus, IPS, and Threat Emulation?

  A. Anti-Bot is the only countermeasure against unknown malware

  B. Anti-Bot is the only protection mechanism which starts a counter-attack against known Command and Control Centers

  C. Anti-Bot is the only signature-based method of malware protection

  D. Anti-Bot is a post-infection malware protection to prevent a host from establishing a connection to a Command and Control Center

  Correct Answer: D

  Reference: https://sc1.checkpoint.com/documents/R76/CP_R76_AntiBotAntiVirus_AdminGuide/index.html

• Question 209:

  SmartEvent does NOT use which of the following procedures to identify events?

  A. Matching a log against each event definition

  B. Create an event candidate

  C. Matching a log against local exclusions

  D. Matching a log against global exclusions

  Correct Answer: C

  Events are detected by the SmartEvent Correlation Unit. The Correlation Unit task is to scan logs for criteria that match an Event Definition. SmartEvent uses these procedures to identify events: Matching a Log Against Global Exclusions Matching a Log Against Each Event Definition Creating an Event Candidate When a Candidate Becomes an Event

  Reference: https://sc1.checkpoint.com/documents/R76/CP_R76_SmartEvent_AdminGuide/17401.htm

• Question 210:

  In Gaia, if one is unsure about a possible command, what command lists all possible commands.

  A. show all |grep commands

  B. show configuration

  C. show commands

  D. get all commands

  Correct Answer: C

  Reference: https://sc1.checkpoint.com/documents/R76/CP_R76_Gaia_WebAdmin/75697.htm