CheckPoint 156-915.80 Online Practice Questions and Exam Preparation

CheckPoint 156-915.80 Online Questions & Answers

• Question 321:

  What type of traffic can be re-directed to the Captive Portal?

  A. SMTP
  B. HTTP
  C. All of the above
  D. FTP
  B. HTTP

• Question 322:

  An administrator would like to troubleshoot why templating is not working for some traffic. How can he determine at which rule templating id disabled?

  A. He can use the fw accel command on the gateway
  B. He can use the fw accel statistics command on the gateway
  C. He can use the fwaccel stat command on the Security Management Server
  D. He can use the fwaccel stat command on the gateway
  D. He can use the fwaccel stat command on the gateway

• Question 323:

  What are the available options for downloading Check Point hotfixes in Gaia WebUI (CPUSE)?

  A. Manually, Scheduled, Automatic
  B. Update Now, Scheduled Update, Offline Update
  C. Update Automatically, Update Now, Disable Update
  D. Manual Update, Disable Update, Automatic Update
  A. Manually, Scheduled, Automatic

• Question 324:

  Due to high CPU workload on the Security Gateway, the security administrator decided to purchase a new multicore CPU to replace the existing single core CPU. After installation, is the administrator required to perform any additional tasks?

  A. Go to clish-Run cpstop | Run cpstart
  B. Go to clish-Run cpconfig | Configure CoreXL to make use of the additional Cores | Exit cpconfig |Reboot Security Gateway
  C. Administrator does not need to perform any task. Check Point will make use of the newly installed CPU and Cores.
  D. Go to clish-Run cpconfig | Configure CoreXL to make use of the additional Cores | Exit cpconfig |Reboot Security Gateway | Install Security Policy.
  B. Go to clish-Run cpconfig | Configure CoreXL to make use of the additional Cores | Exit cpconfig |Reboot Security Gateway

• Question 325:

  Which of the following is NOT a type of Check Point API available in R80.10?

  A. Identity Awareness Web Services
  B. OPSEC SDK
  C. Mobile Access
  D. Management
  C. Mobile Access

• Question 326:

  The technical-support department has a requirement to access an intranet server. When configuring a User Authentication rule to achieve this, which of the following should you remember?

  A. You can only use the rule for Telnet, FTP, SMTP, and rlogin services.
  B. The Security Gateway first checks if there is any rule that does not require authentication for this type of connection before invoking the Authentication Security Server.
  C. Once a user is first authenticated, the user will not be prompted for authentication again until logging out.
  D. You can limit the authentication attempts in the User Properties' Authentication tab.
  B. The Security Gateway first checks if there is any rule that does not require authentication for this type of connection before invoking the Authentication Security Server.

• Question 327:

  The Check Point installation history feature in R80 provides the following:

  A. View install changes and install specific version.
  B. View install changes
  C. Policy Installation Date, view install changes and install specific version
  D. Policy Installation Date only
  C. Policy Installation Date, view install changes and install specific version

• Question 328:

  When configuring SmartEvent Initial settings, you must specify a basic topology for SmartEvent to help it calculate traffic direction for events. What is this setting called, and what are you defining?

  A. Network; and defining your Class A space
  B. Topology; and you are defining the Internal network
  C. Internal addresses; you are defining the gateways
  D. Internal network(s); you are defining your networks
  B. Topology; and you are defining the Internal network

• Question 329:

  Which of the following items should be configured for the Security Management Server to authenticate using LDAP?

  A. Login Distinguished Name and password
  B. Windows logon password
  C. Check Point Password
  D. WMI object
  A. Login Distinguished Name and password

• Question 330:

  During inspection of your Threat Prevention logs you find four different computers having one event each with a Critical Severity. Which of those hosts should you try to remediate first?

  A. Host having a Critical event found by Threat Emulation
  B. Host having a Critical event found by IPS
  C. Host having a Critical event found by Antivirus
  D. Host having a Critical event found by Anti-Bot
  D. Host having a Critical event found by Anti-Bot