CheckPoint Checkpoint Certifications 156-915.80 Questions & Answers

• Question 431:

  MegaCorps' disaster recovery plan is past due for an update to the backup and restore section to enjoy the benefits of the new distributed R80 installation. You must propose a plan that meets the following required and desired objectives:

  Required: Security Policy repository must be backed up no less frequently than every 24 hours. Desired: Back up R80 components enforcing the Security Policies at least once a week.

  Desired: Back up R80 logs at least once a week.

  You develop a disaster recovery plan proposing the following:

  *

  Use the utility cron to run the command upgrade_export each night on the Security Management Servers.

  *

  Configure the organization's routine backup software to back up files created by the command upgrade_export.

  *

  Configure GAiA back up utility to back up Security Gateways every Saturday night.

  *

  Use the utility cron to run the command upgrade_export each Saturday night on the log servers.

  *

  Configure an automatic, nightly logswitch.

  *

  Configure the organization's routine back up software to back up the switched logs every night. The corporate IT change review committee decides your plan:

  A.

  meets the required objective and only one desired objective.

  B.

  meets the required objective and both desired objectives.

  C.

  meets the rquired objective but does not meet either deisred objective.

  D.

  does not meet the required objective.

  Correct Answer: B

• Question 432:

  How could you compare the Fingerprint shown to the Fingerprint on the server? Exhibit:

  

  A. Run cpconfig, select the Certificate's Fingerprint option and view the fingerprint

  B. Run cpconfig, select the GUI Clients option and view the fingerprint

  C. Run cpconfig, select the Certificate Authority option and view the fingerprint

  D. Run sysconfig, select the Server Fingerprint option and view the fingerprint

  Correct Answer: A

• Question 433:

  How could you compare the Fingerprint shown to the Fingerprint on the server? Run cpconfig and select: Exhibit:

  

  A. the Certificate Authority option and view the fingerprint.

  B. the GUI Clients option and view the fingerprint.

  C. the Certificate's Fingerprint option and view the fingerprint.

  D. the Server Fingerprint option and view the fingerprint.

  Correct Answer: C

• Question 434:

  MultiCorp is running Smartcenter R71 on an IPSO platform and wants to upgrade to a new Appliance with R80. Which migration tool is recommended?

  A. Download Migration Tool R80 for IPSO and Splat/Linux from Check Point website.

  B. Use already installed Migration Tool.

  C. Use Migration Tool from CD/ISO

  D. Fetch Migration Tool R71 for IPSO and Migration Tool R80 for Splat/Linux from CheckPoint website

  Correct Answer: A

• Question 435:

  MegaCorp is running Smartcenter R70, some Gateways at R65 and some other Gateways with R60. Management wants to upgrade to the most comprehensive IPv6 support. What should the administrator do first?

  A. Upgrade Smartcenter to R80 first.

  B. Upgrade R60-Gateways to R65.

  C. Upgrade every unit directly to R80.

  D. Check the ReleaseNotes to verify that every step is supported.

  Correct Answer: D

• Question 436:

  To run GAiA in 64bit mode, which of the following is true?

  1) Run set edition default 64-bit.

  2) Install more than 4 GB RAM.

  3) Install more than 4 TB of Hard Disk.

  A. 1 and 3

  B. 1 and 2

  C. 2 and 3

  D. 1, 2, and 3

  Correct Answer: B

• Question 437:

  What gives administrators more flexibility when configuring Captive Portal instead of LDAP query for Identity Awareness authentication?

  A. Captive Portal is more secure than standard LDAP

  B. Nothing, LDAP query is required when configuring Captive Portal

  C. Captive Portal works with both configured users and guests

  D. Captive Portal is more transparent to the user

  Correct Answer: C

• Question 438:

  Which file defines the fields for each object used in the file objects.C (color, num/string, default value...)?

  A. $FWDIR/conf/classes.C

  B. $FWDIR/conf/scheam.C

  C. $FWDIR/conf/fields.C

  D. $FWDIR/conf/table.C

  Correct Answer: A

• Question 439:

  Can you implement a complete IPv6 deployment without IPv4 addresses?

  A. No. SmartCenter cannot be accessed from everywhere on the Internet.

  B. Yes. Only one TCP stack (IPv6 or IPv4) can be used at the same time.

  C. Yes, There is no requirement for managing IPv4 addresses.

  D. No. IPv4 addresses are required for management.

  Correct Answer: C

• Question 440:

  You are troubleshooting a HTTP connection problem. You've started fw monitor -o http.pcap. When you open http.pcap with Wireshark there is only one line. What is the most likely reason?

  A. fw monitor was restricted to the wrong interface.

  B. Like SmartView Tracker only the first packet of a connection will be captured by fw monitor.

  C. By default only SYN pakets are captured.

  D. Acceleration was turned on and therefore fw monitor sees only SYN.

  Correct Answer: D