CheckPoint CCSE Update 156-915.80 Questions & Answers

• Question 31:

  With SecureXL enabled, accelerated packets will pass through the following:

  A. Network Interface Card, OSI Network Layer, OS IP Stack, and the Acceleration Device

  B. Network Interface Card, Check Point Firewall Kernel, and the Acceleration Device

  C. Network Interface Card and the Acceleration Device

  D. Network Interface Card, OSI Network Layer, and the Acceleration Device

  Correct Answer: C

• Question 32:

  An administrator would like to troubleshoot why templating is not working for some traffic. How can he determine at which rule templating id disabled?

  A. He can use the fw accel command on the gateway

  B. He can use the fw accel statistics command on the gateway

  C. He can use the fwaccel stat command on the Security Management Server

  D. He can use the fwaccel stat command on the gateway

  Correct Answer: D

• Question 33:

  How can SmartView Web application be accessed?

  A. https:///smartview

  B. https://:4434/smartview/

  C. https:///smartview/

  D. https://:4434/smartview/

  Correct Answer: A

  Reference: https://community.checkpoint.com/t5/Logging-and-Reporting/SmartView-Accessing-Check-Point-Logs-from-Web/td-p/3710

• Question 34:

  The WebUI offers several methods for downloading hotfixes via CPUSE except:

  A. Automatic

  B. Force override

  C. Manually

  D. Scheduled

  Correct Answer: B

  Reference: https://sc1.checkpoint.com/documents/R77/CP_R77_Gaia_AdminWebAdminGuide/html_frameset.htm?topic=documents/R77/CP_R77_Gaia_AdminWebAdminGuide/112109

• Question 35:

  How would you deploy TE250X Check Point appliance just for email traffic and in-line mode without a Check Point Security Gateway?

  A. Install appliance TE250X on SpanPort on LAN switch in MTA mode

  B. Install appliance TE250X in standalone mode and setup MTA

  C. You can utilize only Check Point Cloud Services for this scenario

  D. It is not possible, always Check Point SGW is needed to forward emails to SandBlast appliance

  Correct Answer: C

• Question 36:

  Which file is not in the $FWDIR directory collected by the CPInfo utility from the server?

  A. fwauthd.conf

  B. asm.C

  C. classes.C

  D. cpd.elg

  Correct Answer: D

  Reference: http://sachingarg-checkpoint.blogspot.com/2011/06/viewing-and-analyzing-cpinfo-output.html

• Question 37:

  How many confidence levels are there for IPS?

  A. four

  B. two

  C. five

  D. three

  Correct Answer: C

  Reference: https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=andsolutionid=sk116254

• Question 38:

  In terms of Order Rule Enforcement, when a packet arrives at the gateway, the gateway checks it against the rules in the top Policy Layer, sequentially from top to bottom. Which of the following statements is correct?

  A. If the Action of the matching rule is Accept, the gateway will drop the packet.

  B. If the Action of the matching rule is Drop, the gateway continues to check rules in the next Policy Layer down.

  C. If the Action of the matching rule is Drop, the gateway stops matching against later rules in the Policy Rule Base and drops the packet.

  D. If the rule does not matched in the Network policy it will continue to other enabled policies

  Correct Answer: C

• Question 39:

  SandBlast offers businesses flexibility in implementation based on their individual business needs. What is an option for deployment of Check Point SandBlast Zero-Day Protection?

  A. Smart Cloud Services

  B. Any Cloud Service

  C. Threat Agent Solution

  D. Public Cloud Services

  Correct Answer: C

• Question 40:

  Connections to the Check Point R80 Web API use what protocol?

  A. HTTPS

  B. SOAP

  C. HTTP

  D. SIC

  Correct Answer: A