CheckPoint 156-915.80 Online Practice Questions and Exam Preparation

CheckPoint 156-915.80 Online Questions & Answers

• Question 61:

  Your organization maintains several IKE VPN's. Executives in your organization want to know which mechanism Security Gateway R80 uses to guarantee the authenticity and integrity of messages. Which technology should you explain to the executives?

  A. Certificate Revocation Lists
  B. Application Intelligence
  C. Key-exchange protocols
  D. Digital signatures
  D. Digital signatures

• Question 62:

  What scenario indicates that SecureXL is enabled?

  A. Dynamic objects are available in the Object Explorer
  B. SecureXL can be disabled in cpconfig
  C. fwaccel commands can be used in clish
  D. Only one packet in a stream is seen in a fw monitor packet capture
  C. fwaccel commands can be used in clish

• Question 63:

  Which is NOT an example of a Check Point API?

  A. Gateway API
  B. Management API
  C. OPSEC SDK
  D. Threat Prevention API
  A. Gateway API

• Question 64:

  CPD is a core Check Point process that does all of the following EXCEPT:

  A. AMON status pull from the Gateway
  B. Management High Availability (HA) sync
  C. SIC (Secure Internal Communication) functions
  D. Policy installation
  B. Management High Availability (HA) sync

• Question 65:

  What is the difference between an event and a log?

  A. Events are generated as gateway according to Event Policy
  B. A log entry becomes an event when it matches any rule defined in Event Policy
  C. Events are collected with SmartWorkflow from Trouble Ticket systems
  D. Logs and Events are synonyms
  B. A log entry becomes an event when it matches any rule defined in Event Policy

• Question 66:

  What is the least amount of CPU cores required to enable CoreXL?

  A. 2
  B. 1
  C. 4
  D. 6
  B. 1

• Question 67:

  Which statement is correct about the Sticky Decision Function?

  A. It is not supported with either the Performance pack or a hardware based accelerator card
  B. Does not support SPI's when configured for Load Sharing
  C. It is automatically disabled if the Mobile Access Software Blade is enabled on the cluster
  D. It is not required L2TP traffic
  A. It is not supported with either the Performance pack or a hardware based accelerator card

• Question 68:

  Jack is using SmartEvent and does not see the identities of the users on the events. As an administrator with full access, what does he need to do to fix his issue?

  A. Open SmartDashboard and toggle the Show or Hide Identities Icon, then re-open SmartEvent
  B. Open SmartEvent, Click on Query Properties and select the User column
  C. Open SmartEvent, go to the Policy Tab, select General Settings from the left column > User Identities and check the box Show Identities
  D. Open SmartEvent and toggle the Show or Hide Identities icon
  C. Open SmartEvent, go to the Policy Tab, select General Settings from the left column > User Identities and check the box Show Identities

• Question 69:

  SandBlast appliances can be deployed in the following modes:

  A. using a SPAN port to receive a copy of the traffic only
  B. detect only
  C. inline/prevent or detect
  D. as a Mail Transfer Agent and as part of the we traffic flow only
  C. inline/prevent or detect

• Question 70:

  Which Check Point software blades could be enforced under Threat Prevention profile using Check Point R80.10 SmartConsole application?

  A. IPS, Anti-Bot, URL Filtering, Application Control, Threat Emulation
  B. Firewall, IPS, Threat Emulation, Application Control
  C. IPS, Anti-Bot, Anti-Virus, Threat Emulation, Threat Extraction
  D. Firewall, IPS, Anti-Bot, Anti-Virus, Threat Emulation
  C. IPS, Anti-Bot, Anti-Virus, Threat Emulation, Threat Extraction