CheckPoint Checkpoint Certifications 156-115.80 Questions & Answers

• Question 101:

  Which database domain stores URL filtering updates?

  A. Threat Prevention Domain

  B. Application Control domain

  C. IPS Domain

  D. Check Point Data Domain

  Correct Answer: B

• Question 102:

  John works for ABC Corporation. They have enabled CoreXL on their firewall. John would like to identify the cores on which the SND runs and the cores on which the firewall instance is running. Which command should John run to view the CPU role allocation?

  A. fw ctl affinity –v

  B. fwaccel stat –l

  C. fwaccel stat –l

  D. fw ctl cores

  Correct Answer: C

• Question 103:

  How can you force a manual failover?

  A. cphaconf set_force_failover 1

  B. kill -15 vpnd

  C. clusterXL_admin down

  D. fw ctl set int fwha_failover 1

  Correct Answer: C

  Reference: https://fwknowledge.wordpress.com/2013/04/04/manual-failover-of-the-fw-cluster/

• Question 104:

  Which command is used to write a kernel debug to a file?

  A. fw ctl debug –T –f > debug.txt

  B. fw ctl kdebug –T –l > debug.txt

  C. fw ctl debug –S –t > debug.txt

  D. fw ctl kdebug –T –f > debug.txt

  Correct Answer: D

  Reference: https://itsecworks.com/2011/08/09/checkpoint-firewall-debugging-basics/

• Question 105:

  Where do Protocol parsers register themselves for IPS?

  A. Passive Streaming Library

  B. Other handlers register to Protocol parser

  C. Protections database

  D. Context Management Infrastructure

  Correct Answer: A

  Reference: http://www.nwtechusa.com/pdf/checkpoint_blade_ips.pdf

• Question 106:

  What is the shorthand reference for a classification object?

  A. CLOB

  B. class.obj

  C. classobj

  D. COBJ

  Correct Answer: A

  Reference: https://supportcenter.checkpoint.com/supportcenter/portal? eventSubmit_doGoviewsolutiondetails=andsolutionid=sk120964

• Question 107:

  To manually configure the number of CoreXL instances running on a gateway, what steps must be taken?

  A. cpconfig – Configure Check Point CoreXL – Choose the number of firewall instances –exit - Reboot

  B. cpstop – cpconfig – Configure Check Point CoreXL – Choose the number of firewall instances –exit cpstart

  C. Uninstall license – cpconfig – Configure Check Point CoreXL – Choose the number of firewall instances – Install license – Exit

  D. cpconfig – Configure Check Point CoreXL – Choose the number of firewall instances -exit

  Correct Answer: A

  Reference: https://sc1.checkpoint.com/documents/R76/ CP_R76_PerformanceTuning_WebAdmin/6731.htm

• Question 108:

  Which of the following would NOT be a flag when debugging a unified policy?

  A. rulebase

  B. clob

  C. connection

  D. tls

  Correct Answer: D

  Reference: https://supportcenter.checkpoint.com/supportcenter/portal? eventSubmit_doGoviewsolutiondetails=andsolutionid=sk120964

• Question 109:

  Which IPS command debug tool can you use for troubleshooting IPS traffic?

  A. ips debug traffic –o IPSdebug

  B. ips debug –f /var/log/IPSdebug.txt

  C. debug ips enable –o IPSdebug

  D. ips debug –o IPSdebug

  Correct Answer: D

  Reference: https://sc1.checkpoint.com/documents/R76/CP_R76_CLI_WebAdmin/84627.htm#o84632

• Question 110:

  What is the role of FWM process in Check Point R80.10 Security Management architecture?

  A. It is called by CPM process to perform verification and conversion of the database

  B. FWM is used to transfer CPsets from management to the gateway

  C. FWM prepares and loads commit functions to execute the policy

  D. Policy installation command initiated from SmartConsole is sent to FWM

  Correct Answer: D

  Reference: https://supportcenter.checkpoint.com/supportcenter/portal? eventSubmit_doGoviewsolutiondetails=andsolutionid=sk101226