CheckPoint 156-915.80 Online Practice Questions and Exam Preparation

CheckPoint 156-915.80 Online Questions & Answers

• Question 421:

  Fill in the blank. To save your OSPF configuration in GAiA, enter the command ___________ .

  save config

• Question 422:

  The concept of layers was introduced in R80. What is the biggest benefit of layers?

  A. To break one policy into several virtual policies.
  B. Policy Layers and Sub-Policies enable flexible control over the security policy.
  C. To include Threat Prevention as a sub policy for the firewall policy
  D. They improve the performance on OS kernel version 3.0
  B. Policy Layers and Sub-Policies enable flexible control over the security policy.

• Question 423:

  Fill in the blank.

  

  In New Mode HA, the internal cluster IP VIP address is 10.4.8.3. An internal host 10.4.8.108 successfully pings its Cluster and receives replies. Review the ARP table from the internal Windows host 10.4.8.108. Based on this information, what is the active cluster member's IP address?

  10.4.8.2

• Question 424:

  Which command will allow you to see the interface status?

  A. cphaprob interface
  B. cphaprob -l interface
  C. cphaprob -a if
  D. cphaprob stat
  C. cphaprob -a if

• Question 425:

  You want to store the GAiA configuration in a file for later reference. What command should you use?

  A. write mem
  B. show config -f
  C. save config -o
  D. save configuration
  D. save configuration

• Question 426:

  Selecting an event displays its configurable properties in the Detail pane and a description of the event in the Description pane. Which is NOT an option to adjust or configure?

  A. Severity
  B. Automatic reactions
  C. Policy
  D. Threshold
  C. Policy

• Question 427:

  Which CLI tool helps on verifying proper ClusterXL sync?

  A. fw stat
  B. fw ctl sync
  C. fw ctl pstat
  D. cphaprob stat
  C. fw ctl pstat

• Question 428:

  You have configured Automatic Static NAT on an internal host-node object. You clear the box Translate destination on client site from Global Properties > NAT. Assuming all other NAT settings in Global Properties are selected, what else must be configured so that a host on the Internet can initiate an inbound connection to this host?

  A. No extra configuration is needed.
  B. A proxy ARP entry, to ensure packets destined for the public IP address will reach the Security Gateway's external interface.
  C. The NAT IP address must be added to the external Gateway interface anti-spoofing group.
  D. A static route, to ensure packets destined for the public NAT IP address will reach the Gateway's internal interface.
  D. A static route, to ensure packets destined for the public NAT IP address will reach the Gateway's internal interface.

• Question 429:

  Where can you find the Check Point's SNMP MIB file?

  A. $CPDIR/lib/snmp/chkpt.mib
  B. $FWDIR/conf/snmp.mib
  C. It is obtained only by request from the TAC.
  D. There is no specific MIB file for Check Point products.
  A. $CPDIR/lib/snmp/chkpt.mib

• Question 430:

  How long may verification of one file take for Sandblast Threat Emulation?

  A. up to 1 minutes
  B. within seconds cleaned file will be provided
  C. up to 5 minutes
  D. up to 3 minutes
  B. within seconds cleaned file will be provided