CheckPoint Checkpoint Certifications 156-115.80 Questions & Answers

• Question 91:

  If cluster members are geographically separated and the time to detect a failover needs to be longer, what timer needs to be adjusted?

  A. fwha_timer_cpha_res

  B. fwha_timer_dist_res

  C. fwha_geosync_timer

  D. fwha_timer_sync_res

  Correct Answer: A

  Reference: https://sc1.checkpoint.com/documents/R76/CP_R76_ClusterXL_AdminGuide/7298.htm

• Question 92:

  Which command should be used to insert fw monitor before secxl_sync module?

  A. fw monitor –pi –secxl_sync –o capture.cap

  B. fw monitor –pl –secxl_sync –o capture.cap

  C. fw monitor –pO –secxl_sync –o capture.cap

  D. fw monitor –e “accept –pi –secxl_sync;” –o capture.cap

  Correct Answer: A

• Question 93:

  Your customer is experiencing problems connecting to the Security Management Server via SmartConsole. You suggest testing the connection to the SMS with GuiBedit from the client machine. This connection was successful. Now you suggest enabling debug to investigate possible issues with connections to SMS via SmartConsole. Which process does the customer need to debug on the SMS?

  A. cpd

  B. fwd

  C. cpm

  D. fwm

  Correct Answer: C

  Reference: https://supportcenter.checkpoint.com/supportcenter/portal? eventSubmit_doGoviewsolutiondetails=andsolutionid=sk97638

• Question 94:

  What effect would change the parameter of fwha_timer_cpha_res to 5 have on a cluster?

  A. Change the cluster interface active check to 5 milliseconds

  B. Change the cphad to send test packets every 5 milliseconds

  C. Change the sync network timeout to 5 seconds

  D. Change the failover delay timeout to 500 milliseconds

  Correct Answer: D

  Reference: https://sc1.checkpoint.com/documents/R76/CP_R76_ClusterXL_AdminGuide/7298.htm

• Question 95:

  What is the default setting and minimum value of the Sync tick timer?

  A. 500ms

  B. 1000ms

  C. 100ms

  D. 1500ms

  Correct Answer: C

  Reference: https://sc1.checkpoint.com/documents/R76/CP_R76_ClusterXL_AdminGuide/7298.htm

• Question 96:

  Which Check Point utility should be used to assist in analyzing the output of vpn and ike debug?

  A. cpview

  B. cpinfo

  C. ikeview

  D. vpnview

  Correct Answer: C

  Reference: https://sc1.checkpoint.com/documents/R76/CP_R76_Gaia_WebAdmin/12467.htm

• Question 97:

  Which of the following statements is TRUE about R80 management plug-ins?

  A. The plug-in is a package installed on the Security Gateway

  B. Installing a management plug-in requires a Snapshot, just like any upgrade process

  C. A management plug-in interacts with a Security Management Server to provide new features and support for new products

  D. Using a plug-in offers full central management only if special licensing is applied to specific features of the plug-in

  Correct Answer: C

• Question 98:

  Which of the following commands can be used to see the list of processes monitored by the Watch Dog process?

  A. cpwd_admin list

  B. ps –ef | grep watchd

  C. cpstat fw –f watchdog

  D. fw ctl get str watchdog

  Correct Answer: A

  Reference: https://community.checkpoint.com/thread/8054-cpwdadmin-list-overview-sms

• Question 99:

  When dealing with monolithic operating systems such as Gaia, where are system calls initiated from to achieve a required system level function?

  A. Slow Path

  B. Medium Path

  C. Kernel Mode

  D. User Mode

  Correct Answer: D

• Question 100:

  What ClusterXL mechanism is used to verify that the interfaces of other cluster members are UP and communicates the status of cluster members?

  A. PING

  B. CCP

  C. PPP

  D. HELLO

  Correct Answer: B