CheckPoint Checkpoint Certifications 156-915.80 Questions & Answers

• Question 301:

  R80.10 management server can manage gateways with which versions installed?

  A. Versions R77 and higher

  B. Versions R76 and higher

  C. Versions R75.20 and higher

  D. Version R75 and higher

  Correct Answer: C

  Reference: http://dl3.checkpoint.com/paid/88/88e25b652f62aa6f59dc955e34f98d5c/CP_R80.10_ReleaseNotes.pdf?HashKey=1538443232_ff63052c2c5a68c42c47eae9e15273c8andxtn=.pdf

• Question 302:

  Which statement is most correct regarding about "CorrectXL Dynamic Dispatcher"?

  A. The CoreXL FW instances assignment mechanism is based on Source MAC addresses, Destination MAC addresses.

  B. The CoreXL FW instances assignment mechanism is based on the utilization of CPU cores.

  C. The CoreXL FW instances assignment mechanism is based on IP Protocol type.

  D. The CoreXL FW instances assignment mechanism is based on Source IP addresses, Destination IP addresses, and the IP `Protocol' type.

  Correct Answer: B

  Reference: https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=andsolutionid=sk105261

• Question 303:

  Fred is troubleshooting a NAT issue and wants to check to see if the inbound connection from his internal network is being translated across the interface in the firewall correctly. He decides to use the fw monitor to capture the traffic from the source 192.168.3.5 or the destination of 10.1.1.25 on his Security Gateway, Green that has an IP of 192.168.4.5. What command captures this traffic in a file that he can download and review with WireShark?

  A. Expert@Green# fwmonitor -e “accept src=192.168.3.5 and dst=10.1.1.25;” -o monitor.out

  B. Expert@Green# fw monitor -e “accept src=192.168.3.5 or dst=10.1.1.25;” -o monitor.out

  C. Expert@Green# fwmonitor -e “accept src=192.168.3.5 or dst=10.1.1.25;” -o monitor.out

  D. Expert@Green# fw monitor -e “accept src=192.168.4.5 or dst=10.1.1.25;” -o monitor.out

  Correct Answer: D

• Question 304:

  Security Checkup Summary can be easily conducted within:

  A. Summary

  B. Views

  C. Reports

  D. Checkups

  Correct Answer: C

• Question 305:

  Select the right answer to export IPS profiles to copy to another management server?

  A. IPS profile export is not allowed

  B. fwm dbexport -p

  C. SmartDashboard -IPS tab -Profiles -select profile + right click and select "export profile"

  D. ips_export_import export

  Correct Answer: D

• Question 306:

  What are the methods of SandBlast Threat Emulation deployment?

  A. Cloud, Appliance and Private

  B. Cloud, Appliance and Hybrid

  C. Cloud, Smart-1 and Hybrid

  D. Cloud, OpenServer and VMware

  Correct Answer: A

• Question 307:

  What is the difference between an event and a log?

  A. Events are generated as gateway according to Event Policy

  B. A log entry becomes an event when it matches any rule defined in Event Policy

  C. Events are collected with SmartWorkflow from Trouble Ticket systems

  D. Logs and Events are synonyms

  Correct Answer: B

• Question 308:

  SandBlast agent extends 0 day prevention to what part of the network?

  A. Web Browsers and user devices

  B. DMZ server

  C. Cloud

  D. Email servers

  Correct Answer: A

• Question 309:

  In a Client to Server scenario, which represents that the packet has already been checked against the tables and the Rule Base?

  A. Big I

  B. Little o

  C. Little i

  D. Big O

  Correct Answer: D

• Question 310:

  When using Monitored circuit VRRP, what is a priority delta?

  A. When an interface fails the priority changes to the priority delta

  B. When an interface fails the delta claims the priority

  C. When an interface fails the priority delta is subtracted from the priority

  D. When an interface fails the priority delta decides if the other interfaces takes over

  Correct Answer: C

  Reference: https://sc1.checkpoint.com/documents/R76/CP_R76_Gaia_WebAdmin/87911.htm