CheckPoint 156-915.80 Online Practice Questions and Exam Preparation

CheckPoint 156-915.80 Online Questions & Answers

• Question 511:

  In SmartDashboard, Translate destination on client side is checked in Global Properties. When Network Address Translation is used:

  A. It is not necessary to add a static route to the Gateway's routing table.
  B. It is necessary to add a static route to the Gateway's routing table.
  C. The Security Gateway's ARP file must be modified.
  D. VLAN tagging cannot be defined for any hosts protected by the Gateway.
  A. It is not necessary to add a static route to the Gateway's routing table.

• Question 512:

  You just installed a new Web server in the DMZ that must be reachable from the Internet. You create a manual Static NAT rule as follows:

  Source: Any || Destination: web_public_IP || Service: Any || Translated Source: original || Translated Destination: web_private_IP || Service: Original "web_public_IP" is the node object that represents the new Web server's public IP address.

  "web_private_IP" is the node object that represents the new Web site's private IP address. You enable all settings from Global Properties > NAT. When you try to browse the Web server from the Internet you see the error "page cannot be

  displayed". Which of the following is NOT a possible reason?

  A. There is no Security Policy defined that allows HTTP traffic to the protected Web server.
  B. There is no ARP table entry for the protected Web server's public IP address.
  C. There is no route defined on the Security Gateway for the public IP address to the Web server's private IP address.
  D. There is no NAT rule translating the source IP address of packets coming from the protected Web server.
  D. There is no NAT rule translating the source IP address of packets coming from the protected Web server.

• Question 513:

  What are the methods of SandBlast Threat Emulation deployment?

  A. Cloud, Appliance and Private
  B. Cloud, Appliance and Hybrid
  C. Cloud, Smart-1 and Hybrid
  D. Cloud, OpenServer and Vmware
  A. Cloud, Appliance and Private

• Question 514:

  You want to generate a cpinfo file via CLI on a system running GAiA;

  This will take about 40 minutes since the log files are also needed. What action do you need to take regarding timeout?

  A. No action is needed because cpshell has a timeout of one hour by default.
  B. Log in as the default user expert and start cpinfo.
  C. Log in as admin, switch to expert mode, set the timeout to one hour with the command, idle 60, then start cpinfo.
  D. Log in as Administrator, set the timeout to one hour with the command idle 60 and start cpinfo.
  D. Log in as Administrator, set the timeout to one hour with the command idle 60 and start cpinfo.

• Question 515:

  Which of the following allows administrators to allow or deny traffic to or from a specific network based on the user's credentials?

  A. Access Policy
  B. Access Role
  C. Access Rule
  D. Access Certificate
  B. Access Role

• Question 516:

  What is true about the IPS-Blade?

  A. in R80, IPS is managed by the Threat Prevention Policy
  B. in R80, in the IPS Layer, the only three possible actions are Basic, Optimized and Strict
  C. in R80, IPS Exceptions cannot be attached to "all rules"
  D. in R80, the GeoPolicy Exceptions and the Threat Prevention Exceptions are the same
  A. in R80, IPS is managed by the Threat Prevention Policy

• Question 517:

  What is the least ideal Synchronization Status for Security Management Server High Availability deployment?

  A. Lagging
  B. Synchronized
  C. Never been synchronized
  D. Collision
  A. Lagging

• Question 518:

  Which three of the following are ClusterXL member requirements? 1) same operating systems 2) same Check Point version 3) same appliance model 4) same policy

  A. 1, 3, and 4
  B. 1, 2, and 4
  C. 2, 3, and 4
  D. 1, 2, and 3
  B. 1, 2, and 4

• Question 519:

  What is the valid range for VRID value in VRRP configuration?

  A. 1 -254
  B. 1 -255
  C. 0 -254
  D. 0 -255
  B. 1 -255

• Question 520:

  Your company is running Security Management Server R80 on GAiA, which has been migrated through each version starting from Check Point 4.1. How do you add a new administrator account?

  A. Using SmartDashboard, under Users, select Add New Administrator
  B. Using SmartDashboard or cpconfig
  C. Using the Web console on GAiA under Product configuration, select Administrators
  D. Using cpconfig on the Security Management Server, choose Administrators
  A. Using SmartDashboard, under Users, select Add New Administrator