CheckPoint Checkpoint Certifications 156-115.80 Questions & Answers

• Question 71:

  When troubleshooting acceleration issues on a Security Gateway, you notice that the fw_worker_x process is consuming about 100% processing power. What can be done to stop this from happening?

  A. Assign more CPU cores to the system

  B. Use fwaccel stop/start release process

  C. Edit the registry file to increase virtual memory

  D. Remove the memory file in /proc/ and recreate it

  Correct Answer: A

• Question 72:

  Which command query will search the database for instances of the following FW-Corporate object:

  A. select name from dleobjectderef_data where name = `FW-Corporate';

  B. select data from dleobjectderef_data where name = `FW-Corporate';

  C. select object `FW-Corporate' from dleobjectderef_data;

  D. select name from dleobjectderef_table where name = `FW-Corporate';

  Correct Answer: A

• Question 73:

  When running a debug with fw monitor, which parameter will create a more verbose output?

  A. -l

  B. -i

  C. -D

  D. -d

  Correct Answer: C

  Reference: https://supportcenter.checkpoint.com/supportcenter/portal? eventSubmit_doGoviewsolutiondetails=andsolutionid=sk30583

• Question 74:

  The pepd and pdpd daemons are used by which Software blade?

  A. Identity Awareness

  B. DLP

  C. URL Filtering

  D. Application Control

  Correct Answer: A

• Question 75:

  For organizations with existing IPv4 networks who wish to move to IPv6, which of the following is a Transition Mechanism that can be used?

  A. ipv4 to ipv6 Triple Stack

  B. Hex to Dec translation

  C. 6 in 4 Tunneling

  D. NAT-T to NAT6sec

  Correct Answer: C

• Question 76:

  How can you print the session UUID and the UUID of a connection together in fw monitor?

  A. The switches –s and –u are mutually exclusive and cannot be printed together

  B. fw –s monitor –u –e “accept ;”

  C. fw monitor –uids –e “accept ;”

  D. fw monitor –s –u –e “accept ;”

  Correct Answer: A

  Reference: https://supportcenter.checkpoint.com/supportcenter/portal? eventSubmit_doGoviewsolutiondetails=andsolutionid=sk30583

• Question 77:

  Which kernel table stores information about NAT connections?

  A. connections

  B. tab_nat_conn

  C. xlate

  D. fwx_alloc

  Correct Answer: D

  Reference: https://supportcenter.checkpoint.com/supportcenter/portal? eventSubmit_doGoviewsolutiondetails=andsolutionid=sk32224

• Question 78:

  Which templates for SecureXL are not enabled by default?

  A. All templates are disabled by default

  B. Accept and NMR

  C. Drop and NAT

  D. All templates are enabled by default

  Correct Answer: C

  Reference: https://supportcenter.checkpoint.com/supportcenter/portal? eventSubmit_doGoviewsolutiondetails=andsolutionid=sk71200

• Question 79:

  While using IPS, the network performance is being impacted on a load sharing cluster with asymmetric routes. What is most likely causing the degradation?

  A. A failure in the sync network protocol

  B. A static NAT has been configured and an IPS protection requires the connection be handled on the same cluster member

  C. CoreXL has been disabled

  D. SecureXL has been disabled

  Correct Answer: C

• Question 80:

  URL Filtering is an essential part of Web Security in the Gateway. For the Security Gateway to perform a URL lookup when a client makes a URL request, where is the sync-request forwarded from if a sync-request is required?

  A. RAD Kernel Space

  B. URLF Kernel Client

  C. URLF Online Service

  D. RAD User Space

  Correct Answer: B

  Reference: https://community.checkpoint.com/thread/9034-url-filtering-using-dns