CheckPoint Checkpoint Certifications 156-115.80 Questions & Answers

• Question 21:

  Which layer in the IPS blade is responsible for reassembly of TCP packets as they arrive at the gateway?

  A. Protocol Parsers

  B. Passive Streaming Library

  C. Contexts Management

  D. Protections

  Correct Answer: B

  Reference: https://www.checkpoint.com/downloads/product-related/whitepapers/ IPS_Engine_Architecture.pdf page 7

• Question 22:

  Which command will register the host_monitor device and checks end-to-end connectivity to routers and other network devices?

  A. clusterXL_monitor_ips

  B. clusterXL_monitor_admin

  C. clusterXL_monitor_process

  D. clusterXL_admin

  Correct Answer: A

  Reference: https://sc1.checkpoint.com/documents/R77/CP_R77_ClusterXL_WebAdminGuide/ html_frameset.htm?topic=documents/R77/CP_R77_ClusterXL_WebAdminGuide/7298

• Question 23:

  Which SecureXL table holds IPs that should not be accelerated?

  A. f2f_addresses

  B. cphwd_psglue_conn_db

  C. tcp_f2f_ports

  D. udp_f2f_conns

  Correct Answer: A

• Question 24:

  Your company plans to start migration on IPv6 protocol. What steps do you need to perform to fully enable IPv6 protocol on the Security Gateway?

  A. Issue "set ipv6 enable"; Save configuration and reboot

  B. Issue "set ipv6-state on"; Save configuration and reboot

  C. Issue "set ipv6 on"; Save configuration and reboot

  D. Issue "set ipv6-state enable"; Save configuration and reboot

  Correct Answer: B

  Reference: https://sc1.checkpoint.com/documents/R76SP.10/ CP_R76SP.10_SecuritySystem_AdminGuide/83600.htm

• Question 25:

  Which daemon is used for Geo protection?

  A. in.geod

  B. cphamcset

  C. fwd

  D. cpd

  Correct Answer: A

  Reference: https://supportcenter.checkpoint.com/supportcenter/portal? eventSubmit_doGoviewsolutiondetails=andsolutionid=sk97638

• Question 26:

  The fw monitor output file type is?

  A. Binary

  B. ASCII text

  C. ZIP

  D. tar.gzip

  Correct Answer: B

• Question 27:

  Consider IPv4 header. How does the Security Gateway handle an IP packet that has bits set in its option type field?

  A. Modifies TCP/UDP packet with IP options automatically

  B. Uses PSL mechanism to pad the IP Options field

  C. Drop TCP/UDP packet with IP options

  D. Accept TCP/UDP packet with IP options

  Correct Answer: C

• Question 28:

  Which command(s) can be used to set up 5 core files per process?

  A. set core-dump per_process 5 save config

  B. set core-dump per_process amount = 5 save config

  C. set core-dump per_process 5

  D. add core-dump per_process 5 save config

  Correct Answer: A

  Reference: https://supportcenter.checkpoint.com/supportcenter/portal? eventSubmit_doGoviewsolutiondetails=andsolutionid=sk92764

• Question 29:

  You have users complain that they have no Internet access. Additionally, you have different Policy Layers configured to control Network Access, Web Filtering and Content. From the SmartLog you notice drop logs with the reason CPEarlyDrop. What is the main cause of this?

  A. Due to rulebase optimization, the connection is being blocked

  B. In-Line layers with a clean-up rule must be used to optimize the rulebase

  C. Ordered layers rulebase must contain a clean-up rule similar to main Access layer to avoid implicit drop and optimize the rulebase

  D. This is the new implicit block in R80 gateways because there is no clean-up rule in at least one of the policy layers

  Correct Answer: A

• Question 30:

  The CPSizeMe script will run how long by default?

  A. 48 hours

  B. 12 hours

  C. 8 hours

  D. 24 hours

  Correct Answer: D

  Reference: https://supportcenter.checkpoint.com/supportcenter/portal? eventSubmit_doGoviewsolutiondetails=andsolutionid=sk88160#:~:text=Running%20cpsizeme,-To%20see% 20theandtext=By%20default%2C%20the%20script%20will%20run %20for%2024%20hours.