CheckPoint Checkpoint Certifications 156-115.80 Questions & Answers

• Question 111:

  Which daemon would you debug if you have issues acquiring identities via identity sharing and identities with other gateways?

  A. pdpd

  B. wstlsd

  C. iad

  D. pepd

  Correct Answer: A

  Reference: https://sc1.checkpoint.com/documents/R76/ CP_R76_IdentityAwareness_AdminGuide/66477.htm

• Question 112:

  What is the difference between disabling SecureXL by running "fwaccel off" and disabling it via cpconfig?

  A. Disabling SecureXL in cpconfig survives reboot

  B. cpconfig option is available only on the security manager

  C. There is no difference. These are two different ways of accomplishing the same task

  D. "fwaccel off" will survive the reboot but cpconfig will not

  Correct Answer: A

  Reference: https://supportcenter.checkpoint.com/supportcenter/portal? eventSubmit_doGoviewsolutiondetails=andsolutionid=sk41397

• Question 113:

  The Security Gateway is installed on GAiA R80. The default port for the Web User Interface is _____________.

  A. TCP 18211

  B. TCP 257

  C. TCP 4433

  D. TCP 443

  Correct Answer: D

• Question 114:

  What is enabled by the command "vpn debug mon"?

  A. statistics monitoring for vpn encrypted packets

  B. vpn daemon monitor mode

  C. ike monitor

  D. vpn debug mode

  Correct Answer: C

• Question 115:

  Fill in the blank: The R80 utility fw monitor is used to troubleshoot ___________________.

  A. User data base corruption

  B. LDAP conflicts

  C. Traffic issues

  D. Phase two key negotiation

  Correct Answer: C

• Question 116:

  Which one of the following does not belong to an initial status of a critical device?

  A. restart

  B. problem

  C. init

  D. ok

  Correct Answer: A

  Reference: https://sc1.checkpoint.com/documents/R76/CP_R76_ClusterXL_AdminGuide/7298.htm

• Question 117:

  Fill in the blank: The R80 feature _________________ permits blocking specific IP addresses for a specified time period.

  A. Block Port Overflow

  B. Local Interface Spoofing

  C. Suspicious Activity Monitoring

  D. Adaptive Threat Prevention

  Correct Answer: C

• Question 118:

  Which process is responsible for the generation of certificates?

  A. cpm

  B. cpca

  C. dbsync

  D. fwm

  Correct Answer: B

  Reference: https://supportcenter.checkpoint.com/supportcenter/portal? eventSubmit_doGoviewsolutiondetails=andsolutionid=sk97638#Security%20Management%20Software% 20Blades%20and%20Features%20-%20SmartLog

• Question 119:

  What is the name of the table that an administrator would review to investigate a port exhaustion error when using Hide NAT?

  A. dyn_nat_table

  B. connection

  C. nat_dyn_table

  D. fwx_alloc

  Correct Answer: D

  Reference: https://supportcenter.checkpoint.com/supportcenter/portal? eventSubmit_doGoviewsolutiondetails=andsolutionid=sk32224

• Question 120:

  After determining that the IPS Blade is causing high resource utilization in the gateway, which would be an appropriate strategy to improve IPS performance?

  A. Enabling CoreXL

  B. Enable Bypass mode

  C. Disabling SecureXL

  D. Enabling SecureXL

  Correct Answer: A