CheckPoint 156-915.80 Online Practice Questions and Exam Preparation

CheckPoint 156-915.80 Online Questions & Answers

• Question 251:

  If the Active Security Management Server fails or if it becomes necessary to change the Active to Standby, the following steps must be taken to prevent data loss. Providing the Active Security Management Server is responsive, which of these steps should NOT be performed:

  A. Rename the hostname of the Standby member to match exactly the hostname of the Active member.
  B. Change the Standby Security Management Server to Active.
  C. Change the Active Security Management Server to Standby.
  D. Manually synchronize the Active and Standby Security Management Servers.
  A. Rename the hostname of the Standby member to match exactly the hostname of the Active member.

• Question 252:

  For Management High Availability, which of the following is NOT a valid synchronization status?

  A. Collision
  B. Down
  C. Lagging
  D. Never been synchronized
  B. Down

• Question 253:

  What are the available options for downloading Check Point hotfixes in Gaia WebUI (CPUSE)?

  A. Manually, Scheduled, Automatic
  B. Manually, Automatic, Disabled
  C. Manually, Scheduled, Disabled
  D. Manually, Scheduled, Enabled
  A. Manually, Scheduled, Automatic

• Question 254:

  In SPLAT the command to set the timeout was idle. In order to achieve this and increase the timeout for Gaia, what command do you use?

  A. set idle
  B. set inactivity–timeout
  C. set timeout
  D. set inactivity
  B. set inactivity–timeout

• Question 255:

  Jennifer McHanry is CEO of ACME; She recently bought her own personal iPad. She wants use her iPad to access the internal Finance Web server. Because the iPad is not a member of the Active Directory domain, she cannot identify

  seamlessly with AD Query. However, she can enter her AD credentials in the Captive Portal and then get the same access as on her office computer. Her access to resources is based on rules in the R80 Firewall Rule Base.

  To make this scenario work, the IT administrator must:

  1) Enable Identity Awareness on a gateway and select Captive Portal as one of the Identity Sources.

  2) In the Portal Settings window in the User Access section, make sure that Name and password login is selected.

  3) Create a new rule in the Firewall Rule Base to let Jennifer McHanry access network destinations.

  Select accept as the Action.

  Ms. McHanry tries to access the resource but is unable. What should she do?

  A. Have the security administrator select the Action field of the Firewall Rule "Redirect HTTP connections to an authentication (captive) portal"
  B. Have the security administrator reboot the firewall
  C. Have the security administrator select Any for the Machines tab in the appropriate Access Role
  D. Install the Identity Awareness agent on her iPad
  A. Have the security administrator select the Action field of the Firewall Rule "Redirect HTTP connections to an authentication (captive) portal"

• Question 256:

  Fill in the blank: The tool ___________ generates a R80 Security Gateway configuration report.

  A. infoCP
  B. infoview
  C. cpinfo
  D. fw cpinfo
  C. cpinfo

• Question 257:

  To fully enable Dynamic Dispatcher on a Security Gateway:

  A. run fw ctl multik set_mode 9 in Expert mode and then reboot
  B. Using cpconfig, upodate the Dynamic Dispatcher value to "full" under the CoreXl menu
  C. Edit /proc/interrupts to include multik set_mode 1 at the bottom of the file, save, and reboot
  D. run fw ctl multik set_mode 1 in Expert mode and then reboot
  A. run fw ctl multik set_mode 9 in Expert mode and then reboot

• Question 258:

  The Correlation Unit performs all but which of the following actions:

  A. Marks logs that individually are not events, but may be part of a larger pattern to be identified later
  B. Generates an event based on the Event policy
  C. Assigns a severity level to the event
  D. Takes a new log entry that is part of a group of items that together make up an event, and adds it to an ongoing event
  C. Assigns a severity level to the event

• Question 259:

  Fill in the blank. To enter the router shell, use command __________ .

  cligated

• Question 260:

  John detected high load on sync interface. Which is most recommended solution?

  A. For short connections like http service ?delay sync for 2 seconds
  B. Add a second interface to handle sync traffic
  C. For short connections like http service ?do not sync
  D. For short connections like icmp service ?delay sync for 2 seconds
  A. For short connections like http service ?delay sync for 2 seconds