CheckPoint Checkpoint Certifications 156-115.80 Questions & Answers

• Question 81:

  Which Check Point daemon, if it stops responding or goes down, results in connections from the SmartConsole to the Management Server failing?

  A. SMSD

  B. CPTA

  C. CPM

  D. FWD

  Correct Answer: C

• Question 82:

  How can you ensure that a particular service does not use the cluster IP address?

  A. Add the corresponding service port and IP protocol number into the "no_hide_services_ports" section of the table.def file

  B. Add the corresponding service port and IP protocol number into the "hide_services_ports" section of the table.def file

  C. Add the corresponding service port and IP protocol number into the "no_hide_services_ports" section of the user.def file

  D. Add the corresponding service port and IP protocol number into the "hide_services_ports" section of the user.def file

  Correct Answer: A

• Question 83:

  Which "fwm" command syntax will instruct the gateway to load its most recent policy?

  A. fwm fetch localhost

  B. fwm –d fetchlocal

  C. fwm load -m

  D. None, as "fwm" can only be executed on management servers

  Correct Answer: D

• Question 84:

  Which of the following is correct in a Threat Prevention policy?

  A. Threat Prevention inspects traffic to all objects specified in the Protected Scope

  B. Threat Prevention inspects traffic to and/or from all objects specified in the Protected Scope

  C. Threat Prevention is applied based on the profile. Protection Scope does not have any relevance

  D. Threat Prevention inspects traffic from all objects specified in the protected Scope

  Correct Answer: B

  Reference: https://sc1.checkpoint.com/documents/R80.10/WebAdminGuides/EN/ CP_R80.10_ThreatPrevention_AdminGuide/html_frameset.htm?topic=documents/R80.10/ WebAdminGuides/EN/ CP_R80.10_ThreatPrevention_AdminGuide/136933

• Question 85:

  A Firewall administrator is attempting to push a policy to a new Security Gateway for a remote office but the installation fails. The Management Server IP is 10.1.1.101. Initial troubleshooting shows that policy is successfully transferred to the Gateway. What command would you use to attempt to identify the cause of the issue?

  A. fw ctl debug –T –f > /var/log/p_debug.txt

  B. cp_merge export_policy –s 10.1.1.101 –n Standard $var/log/

  C. fw ctl debug –m 10.1.1.101

  D. fw fetchlocal –d $FWDIR/state/_tmp/FW1

  Correct Answer: D

• Question 86:

  Where will the command, "fw monitor -pi -vpn", be inserted into the ctl chain?

  A. Before the Fw VM inbound

  B. Before the vpn module

  C. After the Fw VM outbound

  D. After the vpn module

  Correct Answer: B

• Question 87:

  What does CMI stand for in relation to the Access Control Policy?

  A. Content Matching Infrastructure

  B. Content Management Interface

  C. Context Management Infrastructure

  D. Context Manipulation Interface

  Correct Answer: C

  Reference: https://community.checkpoint.com/thread/6199-classifying-traffic-to-match-unified-policycolumn-objects

• Question 88:

  The maximum number of critical devices or pnotes on a cluster member is what?

  A. 8

  B. 24

  C. 32

  D. 16

  Correct Answer: D

  Reference: https://sc1.checkpoint.com/documents/R76/CP_R76_ClusterXL_AdminGuide/7298.htm

• Question 89:

  If certain services should not use the Cluster Object IP Address, but requires the use of the individual Cluster Member IPs, what steps would be required for configuration?

  A. Create Manual NAT rules in the Security Policy

  B. The configuration is not possible

  C. Edit the table.def file on the Management Server

  D. Edit the fwkern.conf on each Cluster Member

  Correct Answer: C

• Question 90:

  What is the difference between Client-Side and Server-Side NAT?

  A. The translation occurs at the kernel nearest the server for client-side NAT, but for server-side NAT, the translation occurs at the kernel nearest the client

  B. The translation occurs at the kernel nearest the server in both cases. So, there is no difference at all

  C. The translation occurs at the kernel nearest the client for client-side NAT, but for server-side NAT, the translation occurs at the kernel nearest the server

  D. The translation occurs at the kernel nearest the client in both cases. So, there is no difference at all

  Correct Answer: C