156-115.80 by CheckPoint Actual Free Exam Questions And Answers

Question 1

What is the command to check the current status of hyper-threading?

A. cat/proc/smt_status

B. fw ctl get int cphwd_hyper_status

C. cat/proc/hyperstats

D. fw ctl multik stat

Discussion 0

Correct Answer: A Vote an answer

Question 2

Which of the following is NOT a feature of ClusterXL?

A. Transparent failover in case of device failures

B. Transparent upgrades

C. Zero downtime for mission-critical environments with State Synchronization

D. Enhanced throughput in all ClusterXL modes (2 gateway cluster compared with 1 gateway)

Discussion 0

Correct Answer: D Vote an answer

Question 3

During firewall kernel debug with fw ctl zdebug you received less information than expected. You noticed that a lot of messages were lost since the time the debug was started. What should you do to resolve this issue?

A. Increase debug buffer; Use fw ctl debug -buf 32768

B. Redirect debug output to file; Use fw ctl debug -o ./debug.elg

C. Redirect debug output to file; Use fw ctl zdebug -o ./debug.elg

D. Increase debug buffer; Use fw ctl zdebug -buf 32768

Discussion 0

Correct Answer: A Vote an answer

Question 4

When enabling hyper-threading on a Security Gateway, the administrator needs to make sure there is enough to support additional CoreXL Firewall instances.

A. available cache

B. cpu's

C. available memory

D. drive space

Discussion 0

Correct Answer: C Vote an answer

Question 5

Which daemon is responsible for anti-spam?

A. ctasd

B. ctmd

C. cpemd

D. cpmd

Discussion 0

Correct Answer: A Vote an answer

Question 6

Which "fwm" command syntax will instruct the gateway to load its most recent policy?

A. None, as "fwm" can only be executed on management servers

B. fwm -d fetchlocal

C. fwm load <policy_name> -m <management_IP>

D. fwm fetch localhost

Discussion 0

Correct Answer: A Vote an answer

Question 7

Which command will register the host_monitor device and checks end-to-end connectivity to routers and other network devices?

A. clusterXL_monitor_admin

B. clusterXL_monitor_process

C. clusterXL_admin

D. clusterXL_monitor_ips

Discussion 0

Correct Answer: D Vote an answer

Question 8

When troubleshooting Hide NAT failure, what step should be taken after the NAT configuration has been verified?

A. Run fw ctl arp to verify that the static addresses are loaded

B. Verify that the gateway answers the ARP requests

C. Verify the NAT configuration

D. Run fw tab -t fwx_alloc to verify that the fwx_alloc table is not filled up

Discussion 0

Correct Answer: A Vote an answer

Question 9

Having a look at the output of the "fwaccel conns" command, the F flag is the indicator for a packet
.

A. getting the routing information according to the Forwarding Information Base (FIB)

B. being processed by the firewall kernel module

C. being forced of using the accelerated path

D. going through the slow path

Discussion 0

Correct Answer: B Vote an answer

Question 10

You have configured SecureXL NAT templates with the "fw ctl set" command. You check configuration and ensure that NAT templates were enabled. After an accidental reboot, you issue "fwaccel stat" and noticed that NAT Templates are not enabled. You need to permanently enable SecureXL NAT templates. What should you do?

A. Set NAT Templates with "fwaccel templates NAT" command and save configuration with "save config"

B. Enable NAT Templates again with "fw ctl set" and save configuration with "save config"

C. Enable NAT Templates again with "fw ctl set" and edit appropriate parameters in
$FWDIR/boot/modules/
fwkern.conf

D. Edit appropriate parameters in $FWDIR/boot/modules/fwkern.conf

Discussion 0

Correct Answer: B Vote an answer

Question 11

Where will the usermode core files located?

A. $FWDIR/var/log/dump/usermode

B. /var/suroot

C. $CPDIR/var/log/dump/usermode

D. /var/log/dump/usermode

Discussion 0

Correct Answer: D Vote an answer

Question 12

Your customer is experiencing problems connecting to the Security Management Server via SmartConsole.
You suggest testing the connection to the SMS with GuiBedit from the client machine. This connection was successful. Now you suggest enabling debug to investigate possible issues with connections to SMS via SmartConsole. Which process does the customer need to debug on the SMS?

A. cpm

B. cpd

C. fwm

D. fwd

Discussion 0

Correct Answer: A Vote an answer

Question 13

Which one of the following does not belong to an initial status of a critical device?

A. ok

B. restart

C. init

D. problem

Discussion 0

Correct Answer: B Vote an answer

CheckPoint Check Point Certified Security Master - R80 - 156-115.80 Exam Practice Test

Contact Us

Useful Links

Latest Updated