CheckPoint Checkpoint Certifications 156-115.80 Questions & Answers

• Question 61:

  In a high traffic network, which feature allows for more than one traffic path on an interface so that more than one CPU can be used for acceleration?

  A. interface bonding

  B. vlan

  C. asic

  D. multi queue

  Correct Answer: D

  Reference: https://sc1.checkpoint.com/documents/R76/ CP_R76_PerformanceTuning_WebAdmin/93689.htm

• Question 62:

  The CPM process uses what ports?

  A. 19009 and 18120

  B. 18265 and 257

  C. 19009 and 9009

  D. 18265 and 9009

  Correct Answer: C

  Reference: https://sc1.checkpoint.com/documents/R80/CP_R80_MultiDomainSecurity/html_frameset.htm? topic=documents/R80/CP_R80_MultiDomainSecurity/15420

• Question 63:

  You need to investigate issues with policy installation on the Security Gateway side. Which process will you debug and how?

  A. cpd; cpd_admin debug on TDERROR_ALL_ALL=5

  B. cpd; fw ctl debug on –m cpd

  C. fwm; fw debug fwm on TDERROR_ALL_ALL=5

  D. fwd; fw debug fwd on TDERROR_ALL_ALL=5

  Correct Answer: A

  Reference: https://downloads.checkpoint.com/fileserver/SOURCE/direct/ID/11844/FILE/How-ToTroubleshoot-Policy-Installation-Issues.pdf

• Question 64:

  In order to review the IPS statistics to determine if adjustments can be made to improve performance, which command would you use to get the appropriate information?

  A. fw monitor –e “accept IPS_stats;” >> ips_statistics.xml

  B. fw ctl debug –m ips debug_compilation

  C. fw ctl set int enable_ips_debug_output 1

  D. $FWDIR/scripts/get_ips_statistics.sh 10.1.1.1 60

  Correct Answer: D

• Question 65:

  Consider an IKE debug file that has been generated when debugging an issue with site to site VPN. What is the purpose of a NONCE?

  A. Randomly generated part of key generation

  B. Vendor ID and Remote Gateway ID

  C. Protocol 50 and 51 representations

  D. Fixed hex value of Phase 2 keys with PFS

  Correct Answer: A

• Question 66:

  Fill in the blank: The command ______________________ provides the most complete restoration of a R80 configuration.

  A. upgrade_import

  B. cpconfig

  C. fwm dbimport –p

  D. cpinfo -recover

  Correct Answer: A

• Question 67:

  Static NAT has been configured and NAT rules were created automatically. The global properties option "Translate destination on client side" is not checked. Clients are complaining that they are not able to connect to one of your web servers using its public address. How would you solve the problem without changing the global properties and reinstalling the security policy?

  A. On the security gateway, add a static route for the web server's public ip address

  B. Rebooting the security gateway will resolve the problem

  C. You will have the global properties and reinstall the security policy

  D. Configure manual NAT

  Correct Answer: D

• Question 68:

  Which of the following is NOT a feature of ClusterXL?

  A. Transparent upgrades

  B. Zero downtime for mission-critical environments with State Synchronization

  C. Enhanced throughput in all ClusterXL modes (2 gateway cluster compared with 1 gateway)

  D. Transparent failover in case of device failures

  Correct Answer: C

  Reference: https://sc1.checkpoint.com/documents/R76/CP_R76_ClusterXL_AdminGuide/7292.htm

• Question 69:

  Which daemon is responsible for anti-spam?

  A. cpmd

  B. ctasd

  C. ctmd

  D. cpemd

  Correct Answer: B

  Reference: https://supportcenter.checkpoint.com/supportcenter/portal? eventSubmit_doGoviewsolutiondetails=andsolutionid=sk97638

• Question 70:

  IPS detection incorporates 4 layers. Which of the following is NOT a layer in IPS detection?

  A. Context Management

  B. Protocol Parsers

  C. Protections

  D. Detections

  Correct Answer: D