The Secret Of Check-Point 156-315.80 Sample Question

NEW QUESTION 1
If you needed the Multicast MAC address of a cluster, what command would you run?

• A. cphaprob –a if
• B. cphaconf ccp multicast
• C. cphaconf debug data
• D. cphaprob igmp

Answer: D

NEW QUESTION 2
There are 4 ways to use the Management API for creating host object with R80 Management API. Which one is NOT correct?

• A. Using Web Services
• B. Using Mgmt_cli tool
• C. Using CLISH
• D. Using SmartConsole GUI console
• E. Events are collected with SmartWorkflow from Trouble Ticket systems

Answer: E

NEW QUESTION 3
CoreXL is supported when one of the following features is enabled:

• A. Route-based VPN
• B. IPS
• C. IPv6
• D. Overlapping NAT

Answer: B

Explanation:
CoreXL does not support Check Point Suite with these features: References:

NEW QUESTION 4
SecureXL improves non-encrypted firewall traffic throughput and encrypted VPN traffic throughput.

• A. This statement is true because SecureXL does improve all traffic.
• B. This statement is false because SecureXL does not improve this traffic but CoreXL does.
• C. This statement is true because SecureXL does improve this traffic.
• D. This statement is false because encrypted traffic cannot be inspected.

Answer: C

Explanation:
SecureXL improved non-encrypted firewall traffic throughput, and encrypted VPN traffic throughput, by nearly an order-of-magnitude- particularly for small packets flowing in long duration connections.

NEW QUESTION 5
When gathering information about a gateway using CPINFO, what information is included or excluded when using the “-x” parameter?

• A. Includes the registry
• B. Gets information about the specified Virtual System
• C. Does not resolve network addresses
• D. Output excludes connection table

Answer: B

NEW QUESTION 6
Vanessa is a Firewall administrator. She wants to test a backup of her company’s production Firewall cluster Dallas_GW. She has a lab environment that is identical to her production environment. She decided to restore production backup via SmartConsole in lab environment.
Which details she need to fill in System Restore window before she can click OK button and test the backup?

• A. Server, SCP, Username, Password, Path, Comment, Member
• B. Server, TFTP, Username, Password, Path, Comment, All Members
• C. Server, Protocol, Username, Password, Path, Comment, All Members
• D. Server, Protocol, username Password, Path, Comment, Member

Answer: C

NEW QUESTION 7
What is the command to see cluster status in cli expert mode?

• A. fw ctl stat
• B. clusterXL stat
• C. clusterXL status
• D. cphaprob stat

Answer: D

NEW QUESTION 8
When users connect to the Mobile Access portal they are unable to open File Shares. Which log file would you want to examine?

• A. cvpnd.elg
• B. httpd.elg
• C. vpnd.elg
• D. fw.elg

Answer: A

NEW QUESTION 9
Which of the following technologies extracts detailed information from packets and stores that information in state tables?

• A. INSPECT Engine
• B. Stateful Inspection
• C. Packet Filtering
• D. Application Layer Firewall

Answer: A

NEW QUESTION 10
When requiring certificates for mobile devices, make sure the authentication method is set to one of the following, Username and Password, RADIUS or _____.

• A. SecureID
• B. SecurID
• C. Complexity
• D. TacAcs

Answer: B

NEW QUESTION 11
SandBlast has several functional components that work together to ensure that attacks are prevented in real-time. Which the following is NOT part of the SandBlast component?

• A. Threat Emulation
• B. Mobile Access
• C. Mail Transfer Agent
• D. Threat Cloud

Answer: C

NEW QUESTION 12
Which of the following blades is NOT subscription-based and therefore does not have to be renewed on a regular basis?

• A. Application Control
• B. Threat Emulation
• C. Anti-Virus
• D. Advanced Networking Blade

Answer: B

NEW QUESTION 13
What two ordered layers make up the Access Control Policy Layer?

• A. URL Filtering and Network
• B. Network and Threat Prevention
• C. Application Control and URL Filtering
• D. Network and Application Control

Answer: D

NEW QUESTION 14
What is the order of NAT priorities?

• A. Static NAT, IP pool NAT, hide NAT
• B. IP pool NAT, static NAT, hide NAT
• C. Static NAT, automatic NAT, hide NAT
• D. Static NAT, hide NAT, IP pool NAT

Answer: A

NEW QUESTION 15
Which command shows the current connections distributed by CoreXL FW instances?

• A. fw ctl multik stat
• B. fw ctl affinity -l
• C. fw ctl instances -v
• D. fw ctl iflist

Answer: A

NEW QUESTION 16
Using ClusterXL, what statement is true about the Sticky Decision Function?

• A. Can only be changed for Load Sharing implementations
• B. All connections are processed and synchronized by the pivot
• C. Is configured using cpconfig
• D. Is only relevant when using SecureXL

Answer: A

NEW QUESTION 17
What is true about VRRP implementations?

• A. VRRP membership is enabled in cpconfig
• B. VRRP can be used together with ClusterXL, but with degraded performance
• C. You cannot have a standalone deployment
• D. You cannot have different VRIDs in the same physical network

Answer: C

NEW QUESTION 18
......