CheckPoint Checkpoint Certifications 156-915.80 Questions & Answers

• Question 211:

  In which case is a Sticky Decision Function relevant?

  A. Load Sharing ?Multicast

  B. Load Balancing ?Forward

  C. High Availability

  D. Load Sharing ?Unicast

  Correct Answer: C

• Question 212:

  You want to store the GAiA configuration in a file for later reference. What command should you use?

  A. write mem

  B. show config -f

  C. save config -o

  D. save configuration

  Correct Answer: D

  Reference: https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=andsolutionid=sk102234

• Question 213:

  What can you do to see the current number of kernel instances in a system with CoreXL enabled?

  A. Browse to Secure Platform Web GUI

  B. Only Check Point support personnel can access that information

  C. Execute SmarDashboard client

  D. Execute command cpconfig

  Correct Answer: D

  Reference: https://sc1.checkpoint.com/documents/R76/CP_R76_PerformanceTuning_WebAdmin/6731.htm

• Question 214:

  When Dynamic Dispatcher is enabled, connections are assigned dynamically with the exception of

  A. Threat Emulation

  B. HTTPS

  C. QOS

  D. VolP

  Correct Answer: D

  The following types of traffic are not load-balanced by the CoreXL Dynamic Dispatcher (this traffic will always be handled by the same CoreXL FW instance): VoIP VPN encrypted packets

  Reference: https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=andsolutionid=sk105261

• Question 215:

  VPN Tunnel Sharing can be configured with any of the options below, EXCEPT One:

  A. Gateway-based

  B. Subnet-based

  C. IP range based

  D. Host-based

  Correct Answer: C

  VPN Tunnel Sharing provides interoperability and scalability by controlling the number of VPN tunnels created between peer Security Gateways. There are three available settings: One VPN tunnel per each pair of hosts One VPN tunnel per subnet pair One VPN tunnel per Security Gateway pair

  Reference: https://sc1.checkpoint.com/documents/R77/CP_R77_VPN_AdminGuide/14018.htm

• Question 216:

  Which directory below contains log files?

  A. /opt/CPSmartlog-R80/log

  B. /opt/CPshrd-R80/log

  C. /opt/CPsuite-R80/fw1/log

  D. /opt/CPsuite-R80/log

  Correct Answer: C

• Question 217:

  What is the responsibility of SOLR process on R80.10 management server?

  A. Validating all data before it's written into the database

  B. It generates indexes of data written to the database

  C. Communication between SmartConsole applications and the Security Management Server

  D. Writing all information into the database

  Correct Answer: B

• Question 218:

  Which one of these features is NOT associated with the Check Point URL Filtering and Application Control Blade?

  A. Detects and blocks malware by correlating multiple detection engines before users are affected.

  B. Configure rules to limit the available network bandwidth for specified users or groups.

  C. Use UserCheck to help users understand that certain websites are against the company's security policy.

  D. Make rules to allow or block applications and Internet sites for individual applications, categories, and risk levels.

  Correct Answer: A

  Use the URL Filtering and Application Control Software Blades to:

  Create a Granular Policy - Make rules to allow or block applications and Internet sites for individual applications, categories, and risk levels. You can also create an HTTPS policy that enables Security Gateways to inspect HTTPS traffic and

  prevent security risks related to the SSL protocol.

  Manage Bandwidth Consumption - Configure rules to limit the available network bandwidth for specified users or groups. You can define separate limits for uploading and downloading.

  Keep Your Policies Updated - The Application Database is updated regularly, which helps you makes sure that your Internet security policy has the newest applications and website categories. Security Gateways connect to the Check Point

  Online Web Service to identify new social networking widgets and website categories.

  Communicate with Users - UserCheck objects add flexibility to URL Filtering and Application Control and let the Security Gateways communicate with users. UserCheck helps users understand that certain websites are against the company's

  security policy. It also tells users about the changes in Internet policy related to websites and applications.

  Reference: https://sc1.checkpoint.com/documents/R80/CP_R80_SecMGMT/html_frameset.htm?topic=documents/R80/CP_R80_SecMGMT/126197

• Question 219:

  Which command will reset the kernel debug options to default settings?

  A. fw ctl dbg -a 0

  B. fw ctl dbg resetall

  C. fw ctl debug 0

  D. fw ctl debug set 0

  Correct Answer: C

  Reset the debugs to the default.

  In case someone changed the setting in the past and since then the firewall was not rebooted we should set all back to the defaults.

  

  Reference: https://itsecworks.com/2011/08/09/checkpoint-firewall-debugging-basics/

• Question 220:

  You need to change the number of firewall instances used by CoreXL. How can you achieve this goal?

  A. edit fwaffinity.conf; reboot required

  B. cpconfig; reboot required

  C. edit fwaffinity.conf; reboot not required

  D. cpconfig: reboot not required

  Correct Answer: B

  Reference: https://sc1.checkpoint.com/documents/R76/CP_R76_PerformanceTuning_WebAdmin/6731.htm#o94530