CheckPoint 156-915.80 Online Practice Questions and Exam Preparation

CheckPoint 156-915.80 Online Questions & Answers

• Question 341:

  To run GAiA in 64bit mode, which of the following is true?

  1) Run set edition default 64-bit.

  2) Install more than 4 GB RAM.

  3) Install more than 4 TB of Hard Disk.

  A. 1 and 3
  B. 1 and 2
  C. 2 and 3
  D. 1, 2, and 3
  B. 1 and 2

• Question 342:

  In what way in Secure Network Distributor (SND) a relevant feature of the Security Gateway?

  A. SND is a feature to accelerate multiple SSL VPN connections
  B. SND is an alternative to IPSec Main Mode, using only 3 packets
  C. SND is used to distribute packets among Firewall instances
  D. SND is a feature of fw monitor to capture accelerated packets
  C. SND is used to distribute packets among Firewall instances

• Question 343:

  What utility would you use to configure route-based VPNs?

  A. vpn shell
  B. vpn tu
  C. vpn sw_topology
  D. vpn set_slim_server
  A. vpn shell

• Question 344:

  Fill in the blank. What is the correct command and syntax used to view a connection table summary on a Check Point Firewall?

  fw tab -t connections -s

• Question 345:

  The system administrator of a company is trying to find out why acceleration is not working for the traffic. The traffic is allowed according to the rule base and checked for viruses. But it is not accelerated. What is the most likely reason that the traffic is not accelerated?

  A. There is a virus found. Traffic is still allowed but not accelerated.
  B. The connection required a Security server.
  C. Acceleration is not enabled.
  D. The traffic is originating from the gateway itself.
  D. The traffic is originating from the gateway itself.

• Question 346:

  Which of the following is a CLI command for Security Gateway R80?

  A. fw tab -u
  B. fw shutdown
  C. fw merge
  D. fwm policy_print
  A. fw tab -u

• Question 347:

  What mechanism does a gateway configured with Identity Awareness and LDAP initially use to communicate with a Windows 2003 or 2008 server?

  A. WMI
  B. CIFS
  C. RCP
  D. LDAP
  A. WMI

• Question 348:

  After filtering a fw monitor trace by port and IP, a packet is displayed three times; in the i, I, and o inspection points, but not in the O inspection point. Which is the likely source of the issue?

  A. The packet has been sent out through a VPN tunnel unencrypted.
  B. An IPSO ACL has blocked the packet's outbound passage.
  C. A SmartDefense module has blocked the packet.
  D. It is due to NAT.
  D. It is due to NAT.

• Question 349:

  What is the default size of NAT table fwx_alloc?

  A. 20000
  B. 35000
  C. 25000
  D. 10000
  C. 25000

• Question 350:

  Which file is not in the $FWDIR directory collected by the CPInfo utility from the server?

  A. fwauthd.conf
  B. asm.C
  C. classes.C
  D. cpd.elg
  D. cpd.elg