CheckPoint Checkpoint Certifications 156-115.80 Questions & Answers

• Question 131:

  When enabling hyper-threading on a Security Gateway, the administrator needs to make sure there is enough _______________ to support additional CoreXL Firewall instances.

  A. drive space

  B. cpu's

  C. available cache

  D. available memory

  Correct Answer: D

  Reference: https://supportcenter.checkpoint.com/supportcenter/portal? eventSubmit_doGoviewsolutiondetails=andsolutionid=sk93000

• Question 132:

  You run "cat/proc/smt_status" on your security gateway and the output shows `Soft Disable'. How is your system configured in reference to hyper-threading?

  A. Hyper-threading is disabled in BIOS and cpconfig

  B. Hyper-threading is enabled in BIOS but disabled in cpconfig

  C. Hyper-threading is disabled in BIOS but enabled in cpconfig

  D. Your system does not support Hyper-threading

  Correct Answer: B

  Reference: https://supportcenter.checkpoint.com/supportcenter/portal? eventSubmit_doGoviewsolutiondetails=andsolutionid=sk93000

• Question 133:

  What does the command "vpn shell tunnels delete all ike" do?

  A. Delete only outbound_SPI tables

  B. Deletes all IKE and IPSEC SA's

  C. Deletes all IKE configuration on the Gateway

  D. Deletes all IKE SA's

  Correct Answer: D

• Question 134:

  Having a look at the output of the "fwaccel conns" command, the F flag is the indicator for a packet ______________.

  A. getting the routing information according to the Forwarding Information Base (FIB)

  B. being processed by the firewall kernel module

  C. going through the slow path

  D. being forced of using the accelerated path

  Correct Answer: B

• Question 135:

  Of how many packets consists Main Mode in Phase 1?

  A. Three packets

  B. Four packets

  C. Six packets

  D. it depends on the encryption algorithm used. 3DES has three times more packets than DES encryption

  Correct Answer: C

• Question 136:

  What occurs when Bypass Under Load activated?

  A. Packets are forwarded to the destination without checking the packets against the firewall rule base

  B. Packets are forwarded to the destination without performing IPS analysis

  C. To still ensure a minimum level of data integrity, the system revert to the use of MD5 instead of SHA-1, since former produces an output smaller than the latter

  D. The amount of the state table entries is decreased according to the LRU (least recently used) algorithm

  Correct Answer: B

  Reference: https://sc1.checkpoint.com/documents/R76/CP_R76_IPS_AdminGuide/12750.htm

• Question 137:

  What is the command to check the current status of hyper-threading?

  A. fw ctl get int cphwd_hyper_status

  B. fw ctl multik stat

  C. cat/proc/hyperstats

  D. cat/proc/smt_status

  Correct Answer: D

  Reference: https://supportcenter.checkpoint.com/supportcenter/portal? eventSubmit_doGoviewsolutiondetails=andsolutionid=sk93000#To%20check%20SMT%20current%20status

• Question 138:

  Which is the correct "fw monitor" syntax for creating a capture file for loading it into WireShark?

  A. fw monitor –e “accept ; “andgt;> Output.cap

  B. This cannot be accomplished as it is not supported with R80.10

  C. fw monitor –e “accept ;” –file Output.cap

  D. fw monitor –e “accept ;” –o Output.cap

  Correct Answer: D

• Question 139:

  How many layers are incorporated in IPS detection and what are they called?

  A. 4 layers – Passive Streaming Library (PSL), Protocol Parsers, Context Management, Protections

  B. 3 layers – Active Streaming Library (ASL), CMI, Protections

  C. 4 layers – Active Streaming Library (ASL), Protocol Parsers, Context Management, Protections

  D. 3 layers – Protocol Parsers, CMI, Protections

  Correct Answer: A

• Question 140:

  Where does the translation occur with Hide NAT?

  A. The destination translation occurs at the client side

  B. The source translation occurs at the server side

  C. The source translation occurs at the client side

  D. The destination translation occurs at the server side

  Correct Answer: B