CheckPoint Checkpoint Certifications 156-915.80 Questions & Answers

• Question 271:

  What API command below creates a new host with the name "New Host" and IP address of "192.168.0.10"?

  A. new host name "New Host" ip-address "192.168.0.10"

  B. set host name "New Host" ip-address "192.168.0.10"

  C. create host name "New Host" ip-address "192.168.0.10"

  D. add host name "New Host" ip-address "192.168.0.10"

  Correct Answer: D

  Sample Command with SmartConsole CLI You can use the add host command to create a new host and then publish the changes. > add host name "Sample_Host" ip-address "192.0.2.3" > publish Reference: http://dl3.checkpoint.com/ paid/29/29532b9eec50d0a947719ae631f640d0/CP_R80_CheckPoint_API_ReferenceGuide.pdf?HashKey=1522171823_f53d2a32a77bde441b88d53824dcb893andxtn=.pdf

• Question 272:

  What are types of Check Point APIs available currently as part of R80.10 code?

  A. Security Gateway API, Management API, Threat Prevention API and Identity Awareness Web Services API

  B. Management API, Threat Prevention API, Identity Awareness Web Services API and OPSEC SDK API

  C. OSE API, OPSEC SDK API, Threat Extraction API and Policy Editor API

  D. CPMI API, Management API, Threat Prevention API and Identity Awareness Web Services API

  Correct Answer: B

  Reference: http://dl3.checkpoint.com/paid/29/29532b9eec50d0a947719ae631f640d0/CP_R80_CheckPoint_API_ReferenceGuide.pdf?HashKey=1522171994_d7bae71a861bbc54c18c61420e586d77andxtn=.pdf

• Question 273:

  You find one of your cluster gateways showing "Down" when you run the "cphaprob stat" command. You then run the "clusterXL_admin up" on the down member but unfortunately the member continues to show down. What command do you run to determine the case?

  A. cphaprob -f register

  B. cphaprob -d-s report

  C. cpstat-f-all

  D. cphaprob -a list

  Correct Answer: D

  Reference: http://dl3.checkpoint.com/paid/63/6357d81e3b75b5a09a422d715c3b3d79/CP_R80.10_ClusterXL_AdminGuide.pdf?HashKey=1522170580_c51bd784a86600b5f6141c0f1a6322fdandxtn=.pdf

• Question 274:

  Which components allow you to reset a VPN tunnel?

  A. vpn tu command or SmartView monitor

  B. delete vpn ike sa or vpn she11 command

  C. vpn tunnelutil or delete vpn ike sa command

  D. SmartView monitor only

  Correct Answer: D

• Question 275:

  When synchronizing clusters, which of the following statements is FALSE?

  A. The state of connections using resources is maintained in a Security Server, so their connections cannot be synchronized.

  B. Only cluster members running on the same OS platform can be synchronized.

  C. In the case of a failover, accounting information on the failed member may be lost despite a properly working synchronization.

  D. Client Authentication or Session Authentication connections through a cluster member will be lost if the cluster member fails.

  Correct Answer: D

• Question 276:

  Which of the following is a new R80.10 Gateway feature that had not been available in R77.X and older?

  A. The rule base can be built of layers, each containing a set of the security rules. Layers are inspected in the order in which they are defined, allowing control over the rule base flow and which security functionalities take precedence.

  B. Limits the upload and download throughout for streaming media in the company to 1 Gbps.

  C. Time object to a rule to make the rule active only during specified times.

  D. Sub Policies are sets of rules that can be created and attached to specific rules. If the rule is matched, inspection will continue in the sub policy attached to it rather than in the next rule

  Correct Answer: A

  Reference: http://slideplayer.com/slide/12183998/

• Question 277:

  In R80.10, how do you manage your Mobile Access Policy?

  A. Through the Unified Policy

  B. Through the Mobile Console

  C. From SmartDashboard

  D. From the Dedicated Mobility Tab

  Correct Answer: C

  Reference: http://dl3.checkpoint.com/paid/f7/f78b067c6838c747e1568f139b6e6e8d/CP_R80.10_MobileAccess_AdminGuide.pdf?HashKey=1522170407_805ae0a295fd6664fa23700cc1482686andxtn=.pdf

• Question 278:

  In SmartEvent, what are the different types of automatic reactions that the administrator can configure?

  A. Mail, Block Source, Block Event Activity, External Script, SNMP Trap

  B. Mail, Block Source, Block Destination, Block Services, SNMP Trap

  C. Mail, Block Source, Block Destination, External Script, SNMP Trap

  D. Mail, Block Source, Block Event Activity, Packet Capture, SNMP Trap

  Correct Answer: A

  These are the types of Automatic Reactions:

  Mail - tell an administrator by email that the event occurred. See Create a Mail Reaction.

  Block Source - instruct the Security Gateway to block the source IP address from which this event was detected for a configurable period of time . Select a period of time from one minute to more than three weeks. See Create a Block Source

  Reaction

  Block Event activity - instruct the Security Gateway to block a distributed attack that emanates from multiple sources, or attacks multiple destinations for a configurable period of time. Select a period of time from one minute to more than three

  weeks). See Create a Block Event Activity Reaction.

  External Script - run a script that you provide. See Creating an External Script Automatic Reaction to write a script that can exploit SmartEvent data.

  SNMP Trap - generate an SNMP Trap. See Create an SNMP Trap Reaction.

  Reference: https://sc1.checkpoint.com/documents/R80/CP_R80_LoggingAndMonitoring/html_frameset.htm?topic=documents/R80/CP_R80_LoggingAndMonitoring/131915

• Question 279:

  What's true about Troubleshooting option in the IPS profile properties?

  A. Temporarily change the active protection profile to "Default_Protection"

  B. Temporarily set all protections to track (log) in SmartView Tracker

  C. Temporarily will disable IPS kernel engine

  D. Temporarily set all active protections to Detect

  Correct Answer: B

  Reference: https://sc1.checkpoint.com/documents/R76/CP_R76_IPS_AdminGuide/52512.htm

• Question 280:

  When installing a dedicated R80 SmartEvent server, what is the recommended size of the root partition?

  A. Any size

  B. Less than 20GB

  C. More than 10 GB and less than 20GB

  D. At least 20 GB

  Correct Answer: D

  Reference: https://sc1.checkpoint.com/documents/R80.10/WebAdminGuides/EN/CP_R80.10_LoggingAndMonitoring_AdminGuide/html_frameset.htm?topic=documents/R80.10/WebAdminGuides/EN/ CP_R80.10_LoggingAndMonitoring_AdminGuide/120829