156-915.80 by CheckPoint Actual Free Exam Questions And Answers

Question 1

Which of the following is a task of the CPD process?

A. Responsible for processing most traffic on a security gateway

B. Transfers messages between Firewall processes

C. Invoke and monitor critical processes and attempts to restart them if they fail

D. Log forwarding

Discussion 0

Correct Answer: B Vote an answer

Question 2

The third-shift Administrator was updating Security Management Server access settings in Global Properties and testing. He managed to lock himself out of his account. How can you unlock this account?

A. Delete the file admin.lock in the Security Management Server directory $FWDIR/tmp/.

B. Type fwm lock_admin -u <account name> from the Security Management Server command line.

C. Type fwm unlock_admin -u from the Security Gateway command line.

D. Type fwm unlock_admin from the Security Management Server command line.

Discussion 0

Correct Answer: B Vote an answer

Question 3

Fill in the blank: The tool ___________ generates a R80 Security Gateway configuration report.

A. fw cpinfo

B. infoCP

C. cpinfo

D. infoview

Discussion 0

Correct Answer: C Vote an answer

Question 4

Which of the following process pulls applications monitoring status?

A. cpwd

B. cpd

C. fwm

D. fwd

Discussion 0

Correct Answer: A Vote an answer

Question 5

If you need strong protection for the encryption of user data, what option would be the BEST choice?

A. Disable Diffie-Hellman by using stronger certificate based key-derivation. Use AES-256 bit on all encrypted channels and add PFS to QuickMode. Use double encryption by implementing AH and ESP as protocols.

B. Use Diffie-Hellman for key construction and pre-shared keys for Quick Mode. Choose SHA in Quick Mode and encrypt with AES. Use AH protocol. Switch to Aggressive Mode.

C. Use certificates for Phase 1, SHA for all hashes, AES for all encryption and PFS, and use ESP protocol.

D. When you need strong encryption, IPsec is not the best choice. SSL VPN's are a better choice.

Discussion 0

Correct Answer: C Vote an answer

Question 6

Type the full cphaprob command and syntax that will show full synchronization status.

Discussion 0

Correct Answer:

cphaprob -i list

Question 7

Which is a suitable command to check whether Drop Templates are activated or not?

A. fwaccel stats

B. fw ctl get int activate _drop_ templates

C. fw ctl templates -d

D. fwaccel stat

Discussion 0

Correct Answer: D Vote an answer

Question 8

You want VPN traffic to match packets from internal interfaces. You also want the traffic to exit the Security Gateway bound for all site-to-site VPN Communities, including Remote Access Communities. How should you configure the VPN match rule?

A. internal_clear > All_GwToGw

B. Internal_clear > External_Clear

C. internal_clear > All_communities

D. Communities > Communities

Discussion 0

Correct Answer: C Vote an answer

Question 9

Which of the following is true regarding the Proxy ARP feature for Manual NAT in R80.10?

A. Translate Destination on Client Side should be configured

B. fw ctl proxy should be configured

C. The local.arp file must always be configured

D. Automatic proxy ARP configuration can be enabled

Discussion 0

Correct Answer: D Vote an answer

Question 10

You are the Security Administrator for ABC-Corp. A Check Point Firewall is installed and in use on GAiA.
You are concerned that the system might not be retaining your entries for the interfaces and routing configuration. You would like to verify your entries in the corresponding file(s) on GAiA. Where can you view them? Give the BEST answer.

A. /etc/sysconfig/network-scripts/ifcfg-ethx

B. /etc/sysconfig/netconf.C

C. /etc/conf/route.C

D. /etc/sysconfig/network

Discussion 0

Correct Answer: B Vote an answer

Question 11

What API command below creates a new host with the name "New Host" and IP address of "192.168.0.10"?

A. set host name "New Host" ip-address "192.168.0.10"

B. add host name "New Host" ip-address "192.168.0.10"

C. new host name "New Host" ip-address "192.168.0.10"

D. create host name "New Host" ip-address "192.168.0.10"

Discussion 0

Correct Answer: B Vote an answer

Explanation: Only visible for Fast2test members. You can sign-up / login (it's free).

Question 12

Which is NOT a SmartEvent component?

A. SmartEvent Server

B. Log Server

C. Correlation Unit

D. Log Consolidator

Discussion 0

Correct Answer: D Vote an answer

Question 13

Which of the following authentication methods can be configured in the Identity Awareness setup wizard?

A. Windows password

B. TACACS

C. Check Point Password

D. LDAP

Discussion 0

Correct Answer: D Vote an answer

Question 14

What are the main stages of a policy installation?

A. Verification & Compilation, Transfer and Commit

B. Verification & Compilation, Transfer and Installation

C. Verification, Commit, Installation

D. Verification, Compilation & Transfer, Installation

Discussion 0

Correct Answer: B Vote an answer

CheckPoint Check Point Certified Security Expert Update - R80 - 156-915.80 Exam Practice Test

Contact Us

Useful Links

Latest Updated