CheckPoint Checkpoint Certifications 156-915.80 Questions & Answers

• Question 321:

  Which method below is NOT one of the ways to communicate using the Management API's?

  A. Typing API commands using the "mgmt._cli" command

  B. Typing API commands from a dialog box inside the SmartConsole GUI application

  C. Typing API commands using Gaia's secure shell (clash)19+

  D. Sending API commands over an http connection using web-services

  Correct Answer: D

  Reference: https://sc1.checkpoint.com/documents/R80/APIs/#introduction%20

• Question 322:

  Due to high CPU workload on the Security Gateway, the security administrator decided to purchase a new multicore CPU to replace the existing single core CPU. After installation, is the administrator required to perform any additional tasks?

  A. Go to clash-Run cpstop|Run cpstart

  B. Go to clash-Run cpconfig|Configure CoreXL to make use of the additional Cores|Exit cpconfig|Reboot Security Gateway

  C. Administrator does not need to perform any task. Check Point will make use of the newly installed CPU and Cores

  D. Go to clash-Run cpconfig|Configure CoreXL to make use of the additional Cores|Exit cpconfig|Reboot Security Gateway|Install Security Policy

  Correct Answer: B

• Question 323:

  When an encrypted packet is decrypted, where does this happen?

  A. Security policy

  B. Inbound chain

  C. Outbound chain

  D. Decryption is not supported

  Correct Answer: A

• Question 324:

  What are the main stages of a policy installation?

  A. Verification and Compilation, Transfer and Commit

  B. Verification and Compilation, Transfer and Installation

  C. Verification, Commit, Installation

  D. Verification, Compilation and Transfer, Installation

  Correct Answer: B

• Question 325:

  Which Check Point ClusterXL mode is used to synchronize the physical interface IP and MAC addresses on all clustered interfaces?

  A. Legacy Mode HA

  B. Pivot Mode Load Sharing

  C. New Mode HA

  D. Multicast Mode Load Sharing

  Correct Answer: D

• Question 326:

  Return oriented programming (ROP) exploits are detected by which security blade?

  A. Check Point Anti-Virus / Threat Emulation

  B. Intrusion Prevention Software

  C. Application control

  D. Data Loss Prevention

  Correct Answer: A

• Question 327:

  What is the protocol and port used for Health Check and State Synchronization in ClusterXL?

  A. CCP and 18190

  B. CCP and 257

  C. CCP and 8116

  D. CPC and 8116

  Correct Answer: C

  Reference: https://sc1.checkpoint.com/documents/R76/CP_R76_ClusterXL_AdminGuide/index.html

• Question 328:

  If the first packet of an UDP session is rejected by a security policy, what does the firewall send to the client?

  A. Nothing

  B. TCP FIN

  C. TCP RST

  D. ICMP unreachable

  Correct Answer: A

• Question 329:

  What has to be taken into consideration when configuring Management HA?

  A. The Database revisions will not be synchronized between the management servers.

  B. SmartConsole must be closed prior to synchronize changes in the objects database.

  C. If you wanted to use Full Connectivity Upgrade, you must change the Implied Rules to allow FW1_cpredundant to pass before the Firewall Control Connections.

  D. For Management Server synchronization, only External Virtual Switches are supported. So, if you wanted to employ Virtual Routers instead, you have to reconsider your design.

  Correct Answer: A

• Question 330:

  Advanced Security Checkups can be easily conducted within:

  A. Reports

  B. Advanced

  C. Checkups

  D. Views

  Correct Answer: A