CheckPoint 156-915.80 Online Practice Questions and Exam Preparation

CheckPoint 156-915.80 Online Questions & Answers

• Question 461:

  Several Security Policies can be used for different installation targets. The Firewall protecting Human Resources' servers should have its own Policy Package. These rules must be installed on this machine and not on the Internet Firewall. How can this be accomplished?

  A. A Rule Base is always installed on all possible targets. The rules to be installed on a Firewall are defined by the selection in the Rule Base row Install On.
  B. When selecting the correct Firewall in each line of the Rule Base row Install On, only this Firewall is shown in the list of possible installation targets after selecting Policy > Install on Target.
  C. In the menu of SmartDashboard, go to Policy > Policy Installation Targets and select the correct firewall via Specific Targets.
  D. A Rule Base can always be installed on any Check Point Firewall object. It is necessary to select the appropriate target directly after selecting Policy > Install on Target.
  C. In the menu of SmartDashboard, go to Policy > Policy Installation Targets and select the correct firewall via Specific Targets.

• Question 462:

  Fill in the blank. The command that typically generates the firewall application, operating system, and hardware specific drivers is _________ .

  snapshot

• Question 463:

  Which is a suitable command to check whether Drop Templates are activated or not?

  A. fw ctl get int activate _drop_ templates
  B. fwaccel stat
  C. fwaccel stats
  D. fw ctl templates -d
  B. fwaccel stat

• Question 464:

  Your perimeter Security Gateway's external IP is 200.200.200.3. Your network diagram shows:

  

  Required: Allow only network 192.168.10.0 and 192.168.20.0 to go out to the Internet, using 200.200.200.5.

  The local network 192.168.1.0/24 needs to use 200.200.200.3 to go out to the Internet. Assuming you enable all the settings in the NAT page of Global Properties, how could you achieve these requirements?

  A. Create network objects for 192.168.10.0/24 and 192.168.20.0/24. Enable Hide NAT on both network objects, using 200.200.200.5 as hiding IP address. Add an ARP entry for 200.200.200.3 for the MAC address of 200.200.200.5.
  B. Create an Address Range object, starting from 192.168.10.1 to 192.168.20.254. Enable Hide NAT on the NAT page of the address range object. Enter Hiding IP address 200.200.200.5. Add an ARP entry for 200.200.200.5 for the MAC address of 200.200.200.3.
  C. Create a network object 192.168.0.0/16. Enable Hide NAT on the NAT page. Enter 200.200.200.5 as the hiding IP address. Add an ARP entry for 200.200.200.5 for the MAC address of 200.200.200.3.
  D. Create two network objects: 192.168.10.0/24 and 192.168.20.0/24. Add the two network objects to a group object. Create a manual NAT rule like the following: Original source - group object; Destination - any; Service - any; Translated source - 200.200.200.5; Destination - original; Service - original.
  B. Create an Address Range object, starting from 192.168.10.1 to 192.168.20.254. Enable Hide NAT on the NAT page of the address range object. Enter Hiding IP address 200.200.200.5. Add an ARP entry for 200.200.200.5 for the MAC address of 200.200.200.3.

• Question 465:

  How granular may an administrator filter an Access Role with identity awareness? Per:

  A. Specific ICA Certificate
  B. AD User
  C. Radius Group
  D. Windows Domain
  B. AD User

• Question 466:

  Where do you find the migrate tool for upgrading?

  A. Download from Gaia web portal or use migrate tool from the folder install ISO image linux\upgrade_tools
  B. Download fromGaia web portal or find in target server folder $FWDIR/bin/upgrade_tools
  C. Download the latest version from Check Point Support Center or find in target server folder $FWDIR/bin/upgrade_tools
  B. Download fromGaia web portal or find in target server folder $FWDIR/bin/upgrade_tools

• Question 467:

  Fill in the blank.

  

  In New Mode HA, the internal cluster IP VIP address is 10.4.8.3. The internal interfaces on two members are 10.4.8.1 and 10.4.8.2 Internal host 10.4.8.108 pings 10.4.8.3, and receives replies. Review the ARP table from the internal Windows host 10.4.8.108. According to the output, which member is the standby machine?

  10.4.8.1

• Question 468:

  What command lists all interfaces using Multi-Queue?

  A. cpmq get
  B. show interface all
  C. cpmq set
  D. show multiqueue all
  A. cpmq get

• Question 469:

  Firewall policies must be configured to accept VRRP packets on the GAiA platform if it runs Firewall software. The Multicast destination assigned by the Internet Assigned Numbers Authority (IANA) for VRRP is:

  A. 224.0.0.18
  B. 224.0.0.5
  C. 224.0.0.102
  D. 224.0.0.22
  A. 224.0.0.18

• Question 470:

  By default, the R80 web API uses which content-type in its response?

  A. Java Script
  B. XML
  C. Text
  D. JSON
  D. JSON