CheckPoint 156-915.80 Online Practice Questions and Exam Preparation

CheckPoint 156-915.80 Online Questions & Answers

• Question 271:

  When deploying multiple clustered firewalls on the same subnet, what does the firewall administrator need to configure to prevent CCP broadcasts being sent to the wrong cluster?

  A. Set the fwha_mac_magic_forward parameter in the $CPDIR/boot/modules/ha_boot. conf
  B. Set the fwha_mac_magic parameter in the $FWDIR/boot/fwkern.conf file
  C. Set the cluster global ID using the command "cphaconf cluster_id set "
  D. Set the cluster global ID using the command "fw ctt set cluster_id "
  C. Set the cluster global ID using the command "cphaconf cluster_id set "

• Question 272:

  You want to gather data and analyze threats to your mobile device. It has to be a lightweight app. Which application would you use?

  A. SmartEvent Client Info
  B. SecuRemote
  C. Check Point Protect
  D. Check Point Capsule Cloud
  C. Check Point Protect

• Question 273:

  How do you recover communications between your Security Management Server and Security Gateway if you lock yourself out through a rule or policy mis-configuration?

  A. fw unload policy
  B. fw unloadlocal
  C. fw delete all.all@localhost
  D. fwm unloadlocal
  B. fw unloadlocal

• Question 274:

  UserCheck objects in the Application Control and URL Filtering rules allow the gateway to communicate with the users. Which action is not supported in UserCheck objects?

  A. Ask
  B. Drop
  C. Inform
  D. Reject
  D. Reject

• Question 275:

  Which of the following authentication methods can be configured in the Identity Awareness setup wizard?

  A. Check Point Password
  B. TACACS
  C. LDAP
  D. Windows password
  C. LDAP

• Question 276:

  To qualify as an Identity Awareness enabled rule, which column MAY include an Access Role?

  A. Source
  B. Track
  C. User
  D. Action
  A. Source

• Question 277:

  To qualify as an Identity Awareness enabled rule, which column MAY include an Access Role?

  A. Action
  B. Source
  C. User
  D. Track
  B. Source

• Question 278:

  Which one of the following is NOT a configurable Compliance Regulation?

  A. GLBA
  B. CJIS
  C. SOCI
  D. NCIPA
  C. SOCI

• Question 279:

  Captive Portal is a __________ that allows the gateway to request login information from the user.

  A. Pre-configured and customizable web-based tool
  B. Transparent network inspection tool
  C. LDAP server add-on
  D. Separately licensed feature
  A. Pre-configured and customizable web-based tool

• Question 280:

  How would you deploy TE250X Check Point appliance just for email traffic and in-line mode without a Check Point Security Gateway?

  A. Install appliance TE250X on SpanPort on LAN switch in MTA mode
  B. Install appliance TE250X in standalone mode and setup MTA
  C. You can utilize only Check Point Cloud Services for this scenario
  D. It is not possible, always Check Point SGW is needed to forward emails to SandBlast appliance
  C. You can utilize only Check Point Cloud Services for this scenario