CheckPoint 156-915.80 Online Practice Questions and Exam Preparation

CheckPoint 156-915.80 Online Questions & Answers

• Question 501:

  You want to establish a VPN, using certificates. Your VPN will exchange certificates with an external partner. Which of the following activities should you do first?

  A. Exchange exported CA keys and use them to create a new server object to represent your partner's Certificate Authority (CA).
  B. Create a new logical-server object to represent your partner's CA.
  C. Manually import your partner's Access Control List.
  D. Manually import your partner's Certificate Revocation List.
  A. Exchange exported CA keys and use them to create a new server object to represent your partner's Certificate Authority (CA).

• Question 502:

  All R80 Security Servers can perform authentication with the exception of one. Which of the Security Servers can NOT perform authentication?

  A. FTP
  B. SMTP
  C. HTTP
  D. RLOGIN
  B. SMTP

• Question 503:

  When migrating the SmartEvent data base from one server to another, the last step is to save the files on the new server. Which of the following commands should you run to save the SmartEvent data base files on the new server?

  A. cp
  B. restore
  C. migrate import
  D. eva_db_restore
  D. eva_db_restore

• Question 504:

  SandBlast has several functional components that work together to ensure that attacks are prevented in real-time. Which the following is NOT part of the SandBlast component?

  A. Threat Emulation
  B. Mobile Access
  C. Mail Transfer Agent
  D. Threat Cloud
  C. Mail Transfer Agent

• Question 505:

  Which Check Point address translation method is necessary if you want to connect from a host on the Internet via HTTP to a server with a reserved (RFC 1918) IP address on your DMZ?

  A. Dynamic Source Address Translation
  B. Hide Address Translation
  C. Port Address Translation
  D. Static Destination Address Translation
  D. Static Destination Address Translation

• Question 506:

  What is considered Hybrid Emulation Mode?

  A. Manual configuration of file types on emulation location
  B. Load sharing of emulation between an on premise appliance and the cloud
  C. Load sharing between OS behavior and CPU Level emulation
  D. High availability between the local SandBlast appliance and the cloud
  B. Load sharing of emulation between an on premise appliance and the cloud

• Question 507:

  What Shell is required in Gaia to use WinSCP?

  A. UNIX
  B. CPShell
  C. CLISH
  D. Bash
  D. Bash

• Question 508:

  Type the command and syntax you would use to verify that your Check Point cluster is functioning correctly.

  cphaprob state

• Question 509:

  You have created a Rule Base for firewall, websydney. Now you are going to create a new policy package with security and address translation rules for a second Gateway.

  

  What is TRUE about the new package's NAT rules?

  A. Rules 1, 2, 3 will appear in the new package.
  B. Only rule 1 will appear in the new package.
  C. NAT rules will be empty in the new package.
  D. Rules 4 and 5 will appear in the new package.
  A. Rules 1, 2, 3 will appear in the new package.

• Question 510:

  What command with appropriate switches would you use to test Identity Awareness connectivity?

  A. test_ldap
  B. test_ad_connectivity
  C. test_ldap_connectivity
  D. test_ad
  B. test_ad_connectivity