CheckPoint Checkpoint Certifications 156-215.80 Questions & Answers

• Question 501:

  Which option would allow you to make a backup copy of the OS and Check Point configuration, without stopping Check Point processes?

  A. All options stop Check Point processes

  B. backup

  C. migrate export

  D. snapshot

  Correct Answer: D

  Reference: https://supportcenter.checkpoint.com/supportcenter/portal? eventSubmit_doGoviewsolutiondetails=andsolutionid=sk106127

• Question 502:

  What is the Transport layer of the TCP/IP model responsible for?

  A. It transports packets as datagrams along different routes to reach their destination.

  B. It manages the flow of data between two hosts to ensure that the packets are correctly assembled and delivered to the target application.

  C. It defines the protocols that are used to exchange data between networks and how host programs interact with the Application layer.

  D. It deals with all aspects of the physical components of network connectivity and connects with different network types.

  Correct Answer: B

• Question 503:

  What needs to be configured if the NAT property `Translate destination on client side' is not enabled in Global properties?

  A. A host route to route to the destination IP

  B. Use the file local.arp to add the ARP entries for NAT to work

  C. Nothing, the Gateway takes care of all details necessary D. Enabling `Allow bi-directional NAT' for NAT to work correctly

  Correct Answer: C

• Question 504:

  In the Check Point Security Management Architecture, which component(s) can store logs?

  A. SmartConsole

  B. Security Management Server and Security Gateway

  C. Security Management Server

  D. SmartConsole and Security Management Server

  Correct Answer: B

• Question 505:

  Fill in the blank: In Security Gateways R75 and above, SIC uses ______________ for encryption.

  A. AES-128

  B. AES-256

  C. DES

  D. 3DES

  Correct Answer: A

  Reference: https://sc1.checkpoint.com/documents/R80/CP_R80_SecMGMT/html_frameset.htm? topic=documents/R80/CP_R80_SecMGMT/125443

• Question 506:

  What protocol is specifically used for clustered environments?

  A. Clustered Protocol

  B. Synchronized Cluster Protocol

  C. Control Cluster Protocol

  D. Cluster Control Protocol

  Correct Answer: D

  Reference: https://downloads.checkpoint.com/fileserver/SOURCE/direct/ID/5990/FILE/ sk31085_Cluster_Control_Protocol_Functionality.pdf

• Question 507:

  Which of the following is NOT a tracking option? (Select three)

  A. Partial log

  B. Log

  C. Network log

  D. Full log

  Correct Answer: ACD

  Reference: https://sc1.checkpoint.com/documents/R80.10/WebAdminGuides/EN/ CP_R80.10_LoggingAndMonitoring_AdminGuide/html_frameset.htm?topic=documents/R80.10/ WebAdminGuides/EN/ CP_R80.10_LoggingAndMonitoring_AdminGuide/131914

• Question 508:

  Which command shows the installed licenses?

  A. cplic print

  B. print cplic

  C. fwlic print

  D. show licenses

  Correct Answer: A

• Question 509:

  Of all the Check Point components in your network, which one changes most often and should be backed up most frequently?

  A. SmartManager

  B. SmartConsole

  C. Security Gateway

  D. Security Management Server

  Correct Answer: D

• Question 510:

  Which of the following is NOT an option to calculate the traffic direction?

  A. Incoming

  B. Internal

  C. External

  D. Outgoing

  Correct Answer: D