CheckPoint Checkpoint Certifications 156-915.80 Questions & Answers

• Question 221:

  As a valid Mobile Access Method, what feature provides Capsule Connect/VPN?

  A. that is used to deploy the mobile device as a generator of one-time passwords for authenticating to an RSA Authentication Manager

  B. Full Layer4 VPN -SSL VPN that gives users network access to all mobile applications

  C. Full layer3 VPN -IPSec VPN that gives users network access to all mobile applications

  D. You can make sure that documents are sent to the intended recipients only

  Correct Answer: C

  Reference: https://sc1.checkpoint.com/documents/R77/CP_R77_Mobile_Access_WebAdmin/82201.htm

• Question 222:

  What does the command vpn crl__zap do?

  A. Nothing, it is not a valid command

  B. Erases all CRL's from the gateway cache

  C. Erases VPN certificates from cache

  D. Erases CRL's from the management server cache

  Correct Answer: B

  Reference: https://indeni.com/check-point-firewalls-certification-revocation-list-crl-check-mechanism-on-a-check-point-gateway/

• Question 223:

  Firewall policies must be configured to accept VRRP packets on the GAiA platform if it runs Firewall software. The Multicast destination assigned by the Internet Assigned Numbers Authority (IANA) for VRRP is:

  A. 224.0.0.18

  B. 224.0.0.5

  C. 224.0.0.102

  D. 224.0.0.22

  Correct Answer: A

  Reference: https://www.iana.org/assignments/multicast-addresses/multicast-addresses.xhtml

• Question 224:

  Full synchronization between cluster members is handled by Firewall Kernel. Which port is used for this?

  A. UDP port 265

  B. TCP port 265

  C. UDP port 256

  D. TCP port 256

  Correct Answer: D

  Synchronization works in two modes:

  Full Sync transfers all Security Gateway kernel table information from one cluster member to another. It is handled by the fwd daemon using an encrypted TCP connection on port 256.

  Delta Sync transfers changes in the kernel tables between cluster members. Delta sync is handled by the Security Gateway kernel using UDP connections on port 8116.

  Reference: https://sc1.checkpoint.com/documents/R80.10/WebAdminGuides/EN/CP_R80.10_ClusterXL_AdminGuide/html_frameset.htm?topic=documents/R80.10/WebAdminGuides/EN/CP_R80.10_ClusterXL_AdminGuide/7288

• Question 225:

  GAiA greatly increases operational efficiency by offering an advanced and intuitive software update agent, commonly referred to as the:

  A. Check Point Upgrade Service Engine.

  B. Check Point Software Update Agent

  C. Check Point Remote Installation Daemon (CPRID)

  D. Check Point Software Update Daemon

  Correct Answer: A

• Question 226:

  Which one of these is NOT a firewall chain?

  A. RTM packet in (rtm)

  B. VPN node add (vpnad)

  C. IP Options restore (in) (ipopt_res)

  D. Fw SCV inbound (scv)

  Correct Answer: B

  Reference: http://dkcheckpoint.blogspot.com/2016/07/chapter-2-chain-module.html

• Question 227:

  Which is a suitable command to check whether Drop Templates are activated or not?

  A. fw ctl get int activate _drop_ templates

  B. fwaccel stat

  C. fwaccel stats

  D. fw ctl templates -d

  Correct Answer: B

• Question 228:

  What is the valid range for VRID value in VRRP configuration?

  A. 1 -254

  B. 1 -255

  C. 0 -254

  D. 0 -255

  Correct Answer: B

  Virtual Router ID - Enter a unique ID number for this virtual router. The range of valid values is 1 to 255. Reference: https://sc1.checkpoint.com/documents/R76/CP_R76_Gaia_WebAdmin/87911.htm

• Question 229:

  What GUI client would you use to view an IPS packet capture?

  A. SmartView Monitor

  B. SmartView Tracker

  C. Smart Update

  D. Smart Reporter

  Correct Answer: B

  Reference: https://sc1.checkpoint.com/documents/R76/CP_R76_IPS_AdminGuide/12766.htm

• Question 230:

  What is the most ideal Synchronization Status for Security Management Server High Availability deployment?

  A. Lagging

  B. Synchronized

  C. Never been synchronized

  D. Collision

  Correct Answer: B

  The possible synchronization statuses are:

  Never been synchronized - immediately after the Secondary Security Management server has been installed, it has not yet undergone the first manual synchronization that brings it up to date with the Primary Security Management server.

  Synchronized - the peer is properly synchronized and has the same database information and installed Security Policy.

  Lagging - the peer SMS has not been synchronized properly.

  For instance, on account of the fact that the Active SMS has undergone changes since the previous synchronization (objects have been edited, or the Security Policy has been newly installed), the information on the Standby SMS is lagging.

  Advanced - the peer SMS is more up-to-date.

  For instance, in the above figure, if a system administrators logs into Security Management server B before it has been synchronized with the Security Management server A, the status of the Security Management server A is Advanced, since

  it contains more up-to-date information which the former does not have.

  In this case, manual synchronization must be initiated by the system administrator by changing the Active SMS to a Standby SMS. Perform a synch me operation from the more advanced server to the Standby SMS. Change the Standby SMS

  to the Active SMS.

  Collision - the Active SMS and its peer have different installed policies and databases. The administrator must perform manual synchronization and decide which of the SMSs to overwrite.

  Reference: https://sc1.checkpoint.com/documents/R76/CP_R76_SecMan_WebAdmin/html_frameset.htm?topic=documents/R76/CP_R76_SecMan_WebAdmin/13132