CheckPoint CCSE Update 156-915.80 Questions & Answers

• Question 41:

  Which of the following is true regarding the Proxy ARP feature for Manual NAT in R80.10?

  A. The local.arp file must always be configured

  B. Translate Destination on Client Side should be configured

  C. fw ctl proxy should be configured

  D. Automatic proxy ARP configuration can be enabled

  Correct Answer: D

  Reference: https://checkpoint.engineer/releases/r80-10-automatic-proxy-arp-with-manual-nat-rules/

• Question 42:

  True or False: SecureXL improves non-ecnrypted firewall traffic throughput and encrypted VPN traffic throughput.

  A. True, because SecureXL does improve all traffic

  B. False, because SecureXL does not improve this traffic but CoreXL does

  C. True, because SecureXL does improve this traffic

  D. False, because encrypted traffic cannot be inspected

  Correct Answer: C

  Reference: https://downloads.checkpoint.com/fileserver/SOURCE/direct/ID/10001/FILE/SecureXL_and_Nokia_IPSO_White_Paper_20080401.pdf

• Question 43:

  Which of these statements describes the Check Point ThreatCloud?

  A. Blocks or limits usage of web applications

  B. Prevents or controls access to web sites based on category

  C. Prevents Cloud vulnerability exploits

  D. A worldwide collaborative security network

  Correct Answer: D

• Question 44:

  Which of the following describes how Threat Extraction functions?

  A. Detect threats and provides a detailed report of discovered threats

  B. Proactively detects threats

  C. Delivers file with original content

  D. Delivers PDF versions of original files with active content removed

  Correct Answer: D

• Question 45:

  Where do you find the migrate tool for upgrading?

  A. Download from Gaia web portal or use migrate tool from the folder install ISO image linux\upgrade_tools

  B. Download fromGaia web portal or find in target server folder $FWDIR/bin/upgrade_tools

  C. Download the latest version from Check Point Support Center or find in target server folder $FWDIR/bin/upgrade_tools

  Correct Answer: B

  Reference: https://tac.qostechnology.in/kb/article/87-offline-migrationupgrade-of-management-server-from-r7730-gaia-to-r8010-gaia/

• Question 46:

  Choose the correct syntax to add a new host named "emailserver1" with IP address 10.50.23.90 using GAiA Management CLI?

  A. mgmt._cli add host name "myHost12 ip" address 10.50.23.90

  B. mgmt._cli add host name ip-address 10.50.23.90

  C. mgmt._cli add host "emailserver1" address 10.50.23.90

  D. mgmt._cli add host name "emailserver1" ip-address 10.50.23.90

  Correct Answer: D

• Question 47:

  What is the recommended number of physical network interfaces in a Mobile Access cluster deployment?

  A. 4 Interfaces ?an interface leading to the organization, a second interface leading to the internet, a third interface for synchronization, a fourth interface leading to the Security Management Server.

  B. 3 Interfaces ?an interface leading to the organization, a second interface leading to the internet, a third interface for synchronization

  C. 1 interface ?an interface leading to the organization and the Internet, and configure for synchronization

  D. 2 interfaces ?a data interface leading to the organization and the Internet, a second interface for synchronization

  Correct Answer: B

  Reference: https://sc1.checkpoint.com/documents/R76/CP_R76_Mobile_Access_WebAdmin/41723.htm

• Question 48:

  Which process handles connections from SmartConsole R80?

  A. fwd

  B. cpmd

  C. cpm

  D. cpd

  Correct Answer: C

• Question 49:

  John is using Management HA. Which Smartcenter should be connected to for marking changes?

  A. secondary Smartcenter

  B. active SmartConsole

  C. connect virtual IP of Smartcenter HA

  D. Primary Log Server

  Correct Answer: B

• Question 50:

  In R80, where do you manage your Mobile Access Policy?

  A. Access Control Policy

  B. Through the Mobile Console

  C. Shared Gateways Policy

  D. From the Dedicated Mobility Tab

  Correct Answer: A