CheckPoint CCSE Update 156-915.80 Questions & Answers

• Question 21:

  What is the proper CLISH syntax to configure a default route via 192.168.255.1 in Gaia?

  A. set static-route default nexthop gateway address 192.168.255.1 priority 1 on

  B. set static-route 192.168.255.0/24 nexthop gateway logical eth1 on

  C. set static-route 192.168.255.0/24 nexthop gateway address 192.168.255.1 priority 1 on

  D. set static-route nexthop default gateway logical 192.168.255.1 priority 1 on

  Correct Answer: A

• Question 22:

  What is the correct command to observe the Sync traffic in a VRRP environment?

  A. fw monitor -e "accept [12:4,b]=224.0.0.18;"

  B. fw monitor -e "accept port(6118;"

  C. fw monitor -e "accept proto=mcVRRP;"

  D. fw monitor -e "accept dst=224.0.0.18;"

  Correct Answer: D

• Question 23:

  For Management High Availability, which of the following is NOT a valid synchronization status?

  A. Collision

  B. Down

  C. Lagging

  D. Never been synchronized

  Correct Answer: B

  Reference: https://sc1.checkpoint.com/documents/R76/CP_R76_SecMan_WebAdmin/html_frameset.htm?topic=documents/R76/CP_R76_SecMan_WebAdmin/13132

• Question 24:

  How many interfaces can you configure to use the Multi-Queue feature?

  A. 10 interfaces

  B. 3 interfaces

  C. 4 interfaces

  D. 5 interfaces

  Correct Answer: D

  Reference: https://community.checkpoint.com/t5/Enterprise-Appliances-and-Gaia/R80-x-Performance-Tuning-Tip-Multi-Queue/td-p/41608

• Question 25:

  A Threat Prevention profile is a set of configurations based on the following. (Choose all that apply.)

  A. Anti-Virus settings, Anti-Bot settings, Threat Emulation settings

  B. Anti-Virus settings, Anti-Bot settings, Threat Emulation settings, Intrusion-prevention settings

  C. Anti-Virus settings, Anti-Bot settings, Threat Emulation settings, Intrusion-prevention settings, HTTPS inspection settings

  D. Anti-Bot settings, Threat Emulation settings, Intrusion-prevention settings, HTTPS inspection settings

  Correct Answer: A

  Reference: https://sc1.checkpoint.com/documents/R77/CP_R77_ThreatPrevention_WebAdmin/82209.htm

• Question 26:

  Which command shows the connection table in human readable format?

  A. fw tab -t connections -s

  B. fw tab -t connections -u

  C. fw tab -t connections -h

  D. fw tab -t connections -f

  Correct Answer: D

  Reference: https://sc1.checkpoint.com/documents/R80.30/WebAdminGuides/EN/CP_R80.30_NextGenSecurityGateway_Guide/html_frameset.htm?topic=documents/R80.30/WebAdminGuides/EN/ CP_R80.30_NextGenSecurityGateway_Guide/208178

• Question 27:

  What is the default size of NAT table fwx_alloc?

  A. 20000

  B. 35000

  C. 25000

  D. 10000

  Correct Answer: C

  Reference: https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=andsolutionid=sk32224

• Question 28:

  What is the least amount of CPU cores required to enable CoreXL?

  A. 2

  B. 1

  C. 4

  D. 6

  Correct Answer: B

  Reference: https://sc1.checkpoint.com/documents/R76/CP_R76_PerformanceTuning_WebAdmin/6731.htm

• Question 29:

  Which TCP-port does CPM process listen to?

  A. 18191

  B. 18190

  C. 8983

  D. 19009

  Correct Answer: D

• Question 30:

  In order to optimize performance of a Security Gateway you plan to use SecureXL technology. Your company uses different types of applications. Identify application traffic that will NOT be accelerated

  A. Corporate relational database TCP traffic

  B. Custom application multicast traffic

  C. Transactions to the external application server using UDP

  D. TCP connections to the corporate Web-server

  Correct Answer: B