CheckPoint 156-915.80 Online Practice Questions and Exam Preparation

CheckPoint 156-915.80 Online Questions & Answers

• Question 241:

  What is the limitation of employing Sticky Decision Function?

  A. With SDF enabled, the involved VPN Gateways only supports IKEv1
  B. Acceleration technologies, such as SecureXL and CoreXL are disabled when activating SDF
  C. With SDF enabled, only ClusterXL in legacy mode is supported
  D. With SDF enabled, you can only have three Sync interfaces at most
  B. Acceleration technologies, such as SecureXL and CoreXL are disabled when activating SDF

• Question 242:

  You are trying to configure Directional VPN Rule Match in the Rule Base. But the Match column does not have the option to see the Directional Match. You see the following window.

  

  What must you enable to see the Directional Match?

  A. directional_match(true) in the objects_5_0.C file on Security Management Server
  B. VPN Directional Match on the Gateway object's VPN tab
  C. VPN Directional Match on the VPN advanced window, in Global Properties
  D. Advanced Routing on each Security Gateway
  C. VPN Directional Match on the VPN advanced window, in Global Properties

• Question 243:

  What happens if the identity of a user is known?

  A. If the user credentials do not match an Access Role, the traffic is automatically dropped.
  B. If the user credentials do not match an Access Role, the system displays a sandbox.
  C. If the user credentials do not match an Access Role, the gateway moves onto the next rule.
  D. If the user credentials do not match an Access Role, the system displays the Captive Portal.
  C. If the user credentials do not match an Access Role, the gateway moves onto the next rule.

• Question 244:

  What are types of Check Point APIs available currently as part of R80.10 code?

  A. Security Gateway API, Management API, Threat Prevention API and Identity Awareness Web Services API
  B. Management API, Threat Prevention API, Identity Awareness Web Services API and OPSEC SDK API
  C. OSE API, OPSEC SDK API, Threat Extraction API and Policy Editor API
  D. CPMI API, Management API, Threat Prevention API and Identity Awareness Web Services API
  B. Management API, Threat Prevention API, Identity Awareness Web Services API and OPSEC SDK API

• Question 245:

  To accelerate the rate of connection establishment, SecureXL groups all connection that match a particular service and whose sole differentiating element is the source port. The type of grouping enables even the very first packets of a TCP handshake to be accelerated. The first packets of the first connection on the same service will be forwarded to the Firewall kernel which will then create a template of the connection. Which of these IS NOT a SecureXL template?

  A. Accept Template
  B. Deny template
  C. Drop Template
  D. NAT Template
  B. Deny template

• Question 246:

  Which of the following process pulls applications monitoring status?

  A. fwd
  B. fwm
  C. cpwd
  D. cpd
  C. cpwd

• Question 247:

  What API command below creates a new host with the name "New Host" and IP address of "192.168.0.10"?

  A. new host name "New Host" ip-address "192.168.0.10"
  B. set host name "New Host" ip-address "192.168.0.10"
  C. create host name "New Host" ip-address "192.168.0.10"
  D. add host name "New Host" ip-address "192.168.0.10"
  D. add host name "New Host" ip-address "192.168.0.10"

• Question 248:

  Your company's Security Policy forces users to authenticate to the Gateway explicitly, before they can use any services. The Gateway does not allow the Telnet service to itself from any location. How would you configure authentication on the Gateway? With a:

  A. Client Authentication rule using the manual sign-on method, using HTTP on port 900
  B. Client Authentication rule, using partially automatic sign on
  C. Client Authentication for fully automatic sign on
  D. Session Authentication rule
  A. Client Authentication rule using the manual sign-on method, using HTTP on port 900

• Question 249:

  Daisy need to review how the Security Gateway Cluster, Jonas, behaves when a cluster member comes back on line. Where would she review the behavior of cluster member recovery in the Dashboard?

  A. Open SmartDashboard, select and open the Cluster Object Jonas, Select ClusterXL and review the High Availability recovery options.
  B. Open SmartDashboard, select and open the Cluster Object Jonas, Select Cluster Members and review the High Availability recovery options.
  C. Open SmartDashboard, select and open the Cluster Object Jonas, Select Topology ?Advanced Options and review the High Availability recovery options.
  D. Open SmartDashboard, select and open the Cluster Object Jonas, Select ClusterXL ?Advanced Options and review the High Availability recovery options.
  C. Open SmartDashboard, select and open the Cluster Object Jonas, Select Topology ?Advanced Options and review the High Availability recovery options.

• Question 250:

  You want to verify if your management server is ready to upgrade to R80.10. What tool could you use in this process?

  A. migrate export
  B. upgrade_tools verify
  C. pre_upgrade_verifier
  D. migrate import
  C. pre_upgrade_verifier