CheckPoint 156-915.80 Online Practice Questions and Exam Preparation

CheckPoint 156-915.80 Online Questions & Answers

• Question 491:

  To fully enable Dynamic Dispatcher with Firewall Priority Queues on a Security Gateway, run the following command in Expert mode then reboot:

  A. fw ctl multik set_mode 1
  B. fw ctl Dynamic_Priority_Queue on
  C. fw ctl Dynamic_Priority_Queue enable
  D. fw ctl multik set_mode 9
  D. fw ctl multik set_mode 9

• Question 492:

  The third-shift Administrator was updating Security Management Server access settings in Global Properties. He managed to lock all administrators out of their accounts. How should you unlock these accounts?

  A. Delete the file admin.lock in the Security Management Server directory $FWDIR/tmp/.
  B. Reinstall the Security Management Server and restore using upgrade_import.
  C. Type fwm lock_admin -ua from the Security Management Server command line.
  D. Login to SmartDashboard as the special cpconfig_admin user account; right-click on each administrator object and select unlock.
  C. Type fwm lock_admin -ua from the Security Management Server command line.

• Question 493:

  Security Checkup Summary can be easily conducted within:

  A. Summary
  B. Views
  C. Reports
  D. Checkups
  C. Reports

• Question 494:

  The "MAC magic" value must be modified under the following condition:

  A. There is more than one cluster connected to the same VLAN
  B. A firewall cluster is configured to use Multicast for CCP traffic
  C. There are more than two members in a firewall cluster
  D. A firewall cluster is configured to use Broadcast for CCP traffic
  D. A firewall cluster is configured to use Broadcast for CCP traffic

• Question 495:

  What is the officially accepted diagnostic tool for IP Appliance Support?

  A. ipsoinfo
  B. CST
  C. uag-diag
  D. cpinfo
  B. CST

• Question 496:

  What is the command to see cluster status in cli expert mode?

  A. fw ctl stat
  B. clusterXL stat
  C. clusterXL status
  D. cphaprob stat
  D. cphaprob stat

• Question 497:

  Check Point security components are divided into the following components:

  A. GUI Client, Security Gateway, WebUI interface
  B. GUI Client, Security Management, Security Gateway
  C. Security Gateway, WebUI interface, Consolidated Security Logs
  D. Security Management, Security Gateway, Consolidate Security Logs
  B. GUI Client, Security Management, Security Gateway

• Question 498:

  As a Security Administrator, you must refresh the Client Authentication authorization time-out every time a new user connection is authorized. How do you do this? Enable the Refreshable Timeout setting:

  A. in the user object's Authentication screen.
  B. in the Gateway object's Authentication screen.
  C. in the Limit tab of the Client Authentication Action Properties screen.
  D. in the Global Properties Authentication screen.
  C. in the Limit tab of the Client Authentication Action Properties screen.

• Question 499:

  MultiCorp has bought company OmniCorp and now has two active AD domains. How would you deploy Identity Awareness in this environment?

  A. You must run an ADquery for every domain.
  B. Identity Awareness can only manage one AD domain.
  C. Only one ADquery is necessary to ask for all domains.
  D. Only Captive Portal can be used.
  A. You must run an ADquery for every domain.

• Question 500:

  What's true about Troubleshooting option in the IPS profile properties?

  A. Temporarily change the active protection profile to "Default_Protection"
  B. Temporarily set all protections to track (log) in SmartView Tracker
  C. Temporarily will disable IPS kernel engine
  D. Temporarily set all active protections to Detect
  B. Temporarily set all protections to track (log) in SmartView Tracker