CheckPoint Checkpoint Certifications 156-115.80 Questions & Answers

• Question 51:

  Which Threat Prevention daemon is the core Threat Emulation engine and responsible for emulation files and communications with Threat Cloud?

  A. ctasd

  B. in.msd

  C. ted

  D. scrub

  Correct Answer: C

  Reference: https://supportcenter.checkpoint.com/supportcenter/portal? eventSubmit_doGoviewsolutiondetails=andsolutionid=sk97638

• Question 52:

  John works for ABC Corporation. His manager wants him to analyze the previous day's resource usage on the firewall. John decides to use cpview. John knows that, by default cpview history enabled but he wants to verify whether someone has disabled it. Which command should John use to verify whether cpview history is enabled?

  A. cpview status

  B. cpstat

  C. cpview history stat

  D. cpview info

  Correct Answer: C

  Reference: https://supportcenter.checkpoint.com/supportcenter/portal? eventSubmit_doGoviewsolutiondetails=andsolutionid=sk101878

• Question 53:

  An organization has 3 sites; 1 Headquarters (HQ) site and 2 remote sites. The remote sites are connected to the HQ through site-to-site VPNs and phone communication is done using standard SIP. There is an issue with VOIP calls where one side cannot hear the other over the phone. As a test, they decide to disable protocol inspection for SIP. How can this be achieved?

  A. Select the existing SIP Service, change the Protocol type to None

  B. Create a new UDP 5060 service, change the protocol type to None

  C. Create a new TCP 5060 service, change the protocol type to None

  D. Select the existing SIP service, change the protocol to None in advance settings.

  Correct Answer: D

• Question 54:

  You suspect that IPS protections may be dropping legitimate traffic by mistake. To reduce the false positives, what GuiDBedit parameter could you enable to work with fw ctl zdebug drop to generate a more elaborate drop message for these packets?

  A. enable_inspect_debug_ips_compilation

  B. inspect_ips_debug_inspection

  C. enable_inspect_debug_compilation

  D. enable_inspect_debug_ips

  Correct Answer: C

• Question 55:

  Which command would show the synchronization statistics between cluster members?

  A. cphaprob stat

  B. fw ctl sync

  C. fw ctl pstat

  D. cphaprob sync

  Correct Answer: C

  Reference: https://sc1.checkpoint.com/documents/R76/CP_R76_ClusterXL_AdminGuide/7298.htm

• Question 56:

  What is the correct syntax for firewall monitor to output to standard out?

  A. fw mon

  B. fw monitor > std_out

  C. fw monitor

  D. fw monitor –out

  Correct Answer: C

• Question 57:

  What is the purpose of a Management server?

  A. The sole purpose of the Management server is to store the log files sent by the Security Gateways.

  B. The Management server manages, creates, stores, and distributes the security policy to Security Gateways. It also functions as the Certificate Authority of all managed Check Point products.

  C. The Management server provides the connector for the GUI client and uses exclusively port 257/tcp.

  D. The Management server only functions as the Certificate Authority of all managed Check Point products.

  Correct Answer: B

  Reference: https://sc1.checkpoint.com/documents/R80/CP_R80_SecMGMT/html_frameset.htm? topic=documents/R80/CP_R80_SecMGMT/101062

• Question 58:

  By default, how long does the UDP connection remain on the state table?

  A. 30 Seconds

  B. 30 minutes

  C. 60 minutes

  D. 40 Seconds

  Correct Answer: D

  Reference: https://community.checkpoint.com/t5/General-Topics/R80-x-Performance-Tuning-TipConnection-Table/td-p/41581#:~:text=For%20example%2C%20the%20default%20session,(TCP%20to% 203600%20seconds).

• Question 59:

  Which of the following is NOT a vpn debug command used for troubleshoot?

  A. fw ctl debug –m fw + conn drop vm crypt

  B. vpn debug trunc

  C. mpclient getdata sslvpn

  D. vpn debug on TDERROR_ALL_ALL=5

  Correct Answer: C

• Question 60:

  What is the proper syntax to enter the "central database" that contains all objects within the Postgres database?

  A. psql_client cpm postgres

  B. psql_client checkpoint postgres

  C. psql_client central_database postgres

  D. In clish: show postgres main

  Correct Answer: A