CheckPoint 156-915.80 Online Practice Questions and Exam Preparation

CheckPoint 156-915.80 Online Questions & Answers

• Question 51:

  What does the command vpn crl_zap do?

  A. Nothing, it is not a valid command
  B. Erases all CRL's from the gateway cache
  C. Erases VPN certificates from cache
  D. Erases CRL's from the management server cache
  B. Erases all CRL's from the gateway cache

• Question 52:

  In R80 spoofing is defined as a method of:

  A. Disguising an illegal IP address behind an authorized IP address through Port Address Translation.
  B. Hiding your firewall from unauthorized users.
  C. Detecting people using false or wrong authentication logins
  D. Making packets appear as if they come from an authorized IP address.
  D. Making packets appear as if they come from an authorized IP address.

• Question 53:

  In which formats can Threat Emulation forensics reports be viewed in?

  A. TXT, XML and CSV
  B. PDF and TXT
  C. PDF, HTML, and XML
  D. PDF and HTML
  D. PDF and HTML

• Question 54:

  If you need strong protection for the encryption of user data, what option would be the BEST choice?

  A. Use Diffie-Hellman for key construction and pre-shared keys for Quick Mode. Choose SHA in Quick Mode and encrypt with AES. Use AH protocol. Switch to Aggressive Mode.
  B. When you need strong encryption, IPsec is not the best choice. SSL VPN's are a better choice.
  C. Use certificates for Phase 1, SHA for all hashes, AES for all encryption and PFS, and use ESP protocol.
  D. Disable Diffie-Hellman by using stronger certificate based key-derivation. Use AES-256 bit on all encrypted channels and add PFS to QuickMode. Use double encryption by implementing AH and ESP as protocols.
  C. Use certificates for Phase 1, SHA for all hashes, AES for all encryption and PFS, and use ESP protocol.

• Question 55:

  What is the protocol and port used for Health Check and State Synchronization in ClusterXL?

  A. CCP and 18190
  B. CCP and 257
  C. CCP and 8116
  D. CPC and 8116
  C. CCP and 8116

• Question 56:

  MultiCorp is running Smartcenter R71 on an IPSO platform and wants to upgrade to a new Appliance with R80. Which migration tool is recommended?

  A. Download Migration Tool R80 for IPSO and Splat/Linux from Check Point website.
  B. Use already installed Migration Tool.
  C. Use Migration Tool from CD/ISO
  D. Fetch Migration Tool R71 for IPSO and Migration Tool R80 for Splat/Linux from CheckPoint website
  A. Download Migration Tool R80 for IPSO and Splat/Linux from Check Point website.

• Question 57:

  To stop acceleration on a GAiA Security Gateway, enter command:

  fwaccel off

• Question 58:

  Which statement is most correct regarding about "CorrectXL Dynamic Dispatcher"?

  A. The CoreXL FW instances assignment mechanism is based on Source MAC addresses, Destination MAC addresses.
  B. The CoreXL FW instances assignment mechanism is based on the utilization of CPU cores.
  C. The CoreXL FW instances assignment mechanism is based on IP Protocol type.
  D. The CoreXL FW instances assignment mechanism is based on Source IP addresses, Destination IP addresses, and the IP `Protocol' type.
  B. The CoreXL FW instances assignment mechanism is based on the utilization of CPU cores.

• Question 59:

  What information is NOT collected from a Security Gateway in a Cpinfo?

  A. Firewall logs
  B. Configuration and database files
  C. System message logs
  D. OS and network statistics
  A. Firewall logs

• Question 60:

  You find one of your cluster gateways showing "Down" when you run the "cphaprob stat" command. You then run the "clusterXL_admin up" on the down member but unfortunately the member continues to show down. What command do you run to determine the case?

  A. cphaprob -f register
  B. cphaprob -d-s report
  C. cpstat-f-all
  D. cphaprob -a list
  D. cphaprob -a list