CheckPoint 156-915.80 Online Practice Questions and Exam Preparation

CheckPoint 156-915.80 Online Questions & Answers

• Question 391:

  In terms of Order Rule Enforcement, when a packet arrives at the gateway, the gateway checks it against the rules in the top Policy Layer, sequentially from top to bottom. Which of the following statements is correct?

  A. If the Action of the matching rule is Accept, the gateway will drop the packet.
  B. If the Action of the matching rule is Drop, the gateway continues to check rules in the next Policy Layer down.
  C. If the Action of the matching rule is Drop, the gateway stops matching against later rules in the Policy Rule Base and drops the packet.
  D. If the rule does not matched in the Network policy it will continue to other enabled policies
  C. If the Action of the matching rule is Drop, the gateway stops matching against later rules in the Policy Rule Base and drops the packet.

• Question 392:

  Customer's R80 management server needs to be upgraded to R80.10. What is the best upgrade method when the management server is not connected to the Internet?

  A. Export R80 configuration, clean install R80.10 and import the configuration
  B. CPUSE online upgrade
  C. CPUSE offline upgrade
  D. SmartUpdate upgrade
  C. CPUSE offline upgrade

• Question 393:

  What is the SOLR database for?

  A. Used for full text search and enables powerful matching capabilities
  B. Writes data to the database and full text search
  C. Serves GUI responsible to transfer request to the DLEserver
  D. Enables powerful matching capabilities and writes data to the database
  A. Used for full text search and enables powerful matching capabilities

• Question 394:

  The essential means by which state synchronization works to provide failover in the event an active member goes down, ___________ is used specifically for clustered environments to allow gateways to report their own state and learn about the states of other members in the cluster.

  A. ccp
  B. cphaconf
  C. cphad
  D. cphastart
  A. ccp

• Question 395:

  There are 4 ways to use the Management API for creating host object with R80 Management API. Which one is NOT correct?

  A. Using Web Services
  B. Using Mgmt_cli tool
  C. Using CLISH
  D. Using SmartConsole GUI console
  C. Using CLISH

• Question 396:

  Which of the following is a task of the CPD process?

  A. Invoke and monitor critical processes and attempts to restart them if they fail
  B. Transfers messages between Firewall processes
  C. Log forwarding
  D. Responsible for processing most traffic on a security gateway
  B. Transfers messages between Firewall processes

• Question 397:

  Sticky Decision Function (SDF) is required to prevent which of the following? Assume you set up an Active-Active cluster.

  A. Symmetric routing
  B. Failovers
  C. Asymmetric routing
  D. Anti-Spoofing
  C. Asymmetric routing

• Question 398:

  Suppose the Security Gateway hard drive fails and you are forced to rebuild it. You have a snapshot file stored to a TFTP server and backups of your Security Management Server. What is the correct procedure for rebuilding the Gateway quickly?

  A. Reinstall the base operating system (i.e., GAiA). Configure the Gateway interface so that the Gateway can communicate with the TFTP server. Revert to the stored snapshot image, and install the Security Policy.
  B. Run the command revert to restore the snapshot, establish SIC, and install the Policy.
  C. Run the command revert to restore the snapshot. Reinstall any necessary Check Point products. Establish SIC and install the Policy.
  D. Reinstall the base operating system (i.e., GAia). Configure the Gateway interface so that the Gateway can communicate with the TFTP server. Reinstall any necessary Check Point products and previously applied hotfixes. Revert to the stored snapshot image, and install the Policy.
  A. Reinstall the base operating system (i.e., GAiA). Configure the Gateway interface so that the Gateway can communicate with the TFTP server. Revert to the stored snapshot image, and install the Security Policy.

• Question 399:

  Select the right answer to export IPS profiles to copy to another management server?

  A. IPS profile export is not allowed
  B. fwm dbexport -p
  C. SmartDashboard -IPS tab -Profiles -select profile + right click and select "export profile"
  D. ips_export_import export
  D. ips_export_import export

• Question 400:

  You are about to integrate RSA SecurID users into the Check Point infrastructure. What kind of users are to be defined via SmartDashboard?

  A. A group with generic user
  B. All users
  C. LDAP Account Unit Group
  D. Internal user Group
  A. A group with generic user