CheckPoint 156-915.80 Online Practice Questions and Exam Preparation

CheckPoint 156-915.80 Online Questions & Answers

• Question 281:

  What is the command to show SecureXL status?

  A. fwaccel status
  B. fwaccel stats -m
  C. fwaccel -s
  D. fwaccel stat
  D. fwaccel stat

• Question 282:

  After implementing Static Address Translation to allow Internet traffic to an internal Web Server on your DMZ, you notice that any NATed connections to that machine are being dropped by anti- spoofing protections. Which of the following is the MOST LIKELY cause?

  A. The Global Properties setting Translate destination on client side is unchecked. But the topology on the DMZ interface is set to Internal - Network defined by IP and Mask. Check the Global Properties setting Translate destination on client side.
  B. The Global Properties setting Translate destination on client side is unchecked. But the topology on the external interface is set to Others +. Change topology to External.
  C. The Global Properties setting Translate destination on client side is checked. But the topology on the external interface is set to External. Change topology to Others +.
  D. The Global Properties setting Translate destination on client side is checked. But the topology on the DMZ interface is set to Internal - Network defined by IP and Mask. Uncheck the Global Properties setting Translate destination on client side.
  A. The Global Properties setting Translate destination on client side is unchecked. But the topology on the DMZ interface is set to Internal - Network defined by IP and Mask. Check the Global Properties setting Translate destination on client side.

• Question 283:

  Aaron is a Cyber Security Engineer working for Global Law Firm with large scale deployment of Check Point Enterprise Appliances using GAiA/R80.10. Company's Network Security Developer Team is having issue testing new API with newly deployed R80.10 Security Management Server and blames Check Point Security Management Server as root cause. The ticket has been created and issue is at Aaron's desk for an investigation. What do you recommend as the best suggestion for Aaron to make sure API testing works as expected?

  A. Aaron should check API Server status from expert CLI by "fwm api status" and if it's stopped he should start using command "fwm api start" on Security Management Server.
  B. Aaron should check API Server5 status from expert CLI by "cpapi status" and if it's stopped he should start using command "cpapi start" on Security Management Server.
  C. Aaron should check API Server status from expert CLI by "api status" and if it's stopped he should start using command "api start" on Security Management Server.
  D. Aaron should check API Server status from expert CLI by "cpm api status" and if it's stopped he should start using command "cpm api start" on Security Management Server.
  C. Aaron should check API Server status from expert CLI by "api status" and if it's stopped he should start using command "api start" on Security Management Server.

• Question 284:

  Which is the correct order of a log flow processed by SmartEvents components:

  A. Firewall > Correlation Unit > Log Server > SmartEvent Server Database > SmartEvent Client
  B. Firewall > SmartEvent Server Database > Correlation unit > Log Server > SmartEvent Client
  C. Firewall > Log Server > SmartEvent Server Database > Correlation Unit > SmartEvent Client
  D. Firewall > Log Server > Correlation Unit > SmartEvent Server Database > SmartEvent Client
  D. Firewall > Log Server > Correlation Unit > SmartEvent Server Database > SmartEvent Client

• Question 285:

  In the following cluster configuration; if you reboot sglondon_1 which device will be active when sglondon_1 is back up and running? Why?

  A. sglondon_1 because it the first configured object with the lowest IP.
  B. sglondon_2 because sglondon_1 has highest IP.
  C. sglondon_1, because it is up again, sglondon_2 took over during reboot.
  D. sglondon_2 because it has highest priority.
  D. sglondon_2 because it has highest priority.

• Question 286:

  How can you check whether IP forwarding is enabled on an IP Security Appliance?

  A. clish -c show routing active enable
  B. cat /proc/sys/net/ipv4/ip_forward
  C. echo 1 > /proc/sys/net/ipv4/ip_forward
  D. ipsofwd list
  D. ipsofwd list

• Question 287:

  Using Threat Emulation technologies, what is the best way to block .exe and .bat file types?

  A. Enable DLP and select .exe and .bat file type
  B. enable .exe and .bat protection in IPS Policy
  C. create FW rule for particular protocol
  D. tecli advanced attributes set prohibited_file_types exe,bat
  D. tecli advanced attributes set prohibited_file_types exe,bat

• Question 288:

  The following command is used to verify the CPUSE version:

  A. HostName:0>show installer status build
  B. [Expert@HostName:0]#show installer status
  C. [Expert@HostName:0]#show installer status build
  D. HostName:0>show installer build
  A. HostName:0>show installer status build

• Question 289:

  When synchronizing clusters, which of the following statements is FALSE?

  A. The state of connections using resources is maintained in a Security Server, so their connections cannot be synchronized.
  B. Only cluster members running on the same OS platform can be synchronized.
  C. In the case of a failover, accounting information on the failed member may be lost despite a properly working synchronization.
  D. Client Authentication or Session Authentication connections through a cluster member will be lost if the cluster member fails.
  D. Client Authentication or Session Authentication connections through a cluster member will be lost if the cluster member fails.

• Question 290:

  Match the following commands to their correct function.

  

  Each command has one function only listed.

  A. C1>F6; C2>F4; C3>F2; C4>F5
  B. C1>F2; C2>F1; C3>F6; C4>F4
  C. C1>F2; C2>F4; C3>F1; C4>F5
  D. C1>F4; C2>F6; C3>F3; C4>F2
  A. C1>F6; C2>F4; C3>F2; C4>F5