CheckPoint Checkpoint Certifications 156-215.80 Questions & Answers

• Question 511:

  When an encrypted packet is decrypted, where does this happen?

  A. Security policy

  B. Inbound chain

  C. Outbound chain

  D. Decryption is not supported

  Correct Answer: A

• Question 512:

  Which of the following is NOT a component of Check Point Capsule?

  A. Capsule Docs

  B. Capsule Cloud

  C. Capsule Enterprise

  D. Capsule Workspace

  Correct Answer: C

  Reference: https://www.checkpoint.com/download/products/sg-capsule-solution.pdf

• Question 513:

  You have successfully backed up your Check Point configurations without the OS information. What command would you use to restore this backup?

  A. restore_backup

  B. import backup

  C. cp_merge

  D. migrate import

  Correct Answer: A

  Reference: https://supportcenter.checkpoint.com/supportcenter/portal? eventSubmit_doGoviewsolutiondetails=andsolutionid=sk54100#1.1.1

• Question 514:

  What is the best sync method in the ClusterXL deployment?

  A. Use 1 cluster + 1st sync

  B. Use 1 dedicated sync interface

  C. Use 3 clusters + 1st sync + 2nd sync + 3rd sync

  D. Use 2 clusters + 1st sync + 2nd sync

  Correct Answer: B

• Question 515:

  Can multiple administrators connect to a Security Management Server at the same time?

  A. No, only one can be connected

  B. Yes, all administrators can modify a network object at the same time

  C. Yes, every administrator has their own username, and works in a session that is independent of other administrators

  D. Yes, but only one has the right to write

  Correct Answer: C

  Reference: https://sc1.checkpoint.com/documents/R80/CP_R80_SecMGMT/html_frameset.htm? topic=documents/R80/CP_R80_SecMGMT/124265

• Question 516:

  What Identity Agent allows packet tagging and computer authentication?

  A. Endpoint Security Client

  B. Full Agent

  C. Light Agent

  D. System Agent

  Correct Answer: B

  Reference: https://sc1.checkpoint.com/documents/R77/CP_R77_IdentityAwareness_WebAdminGuide/ html_frameset.htm?topic=documents/R77/CP_R77_IdentityAwareness_WebAdminGuide/62838

• Question 517:

  In Logging and Monitoring, the tracking options are Log, Detailed Log and Extended Log. Which of the following options can you add to each Log, Detailed Log and Extended Log?

  A. Accounting

  B. Suppression

  C. Accounting/Suppression

  D. Accounting/Extended

  Correct Answer: C

  Reference: https://sc1.checkpoint.com/documents/R80/CP_R80_LoggingAndMonitoring/ html_frameset.htm?topic=documents/R80/CP_R80_LoggingAndMonitoring/131914

• Question 518:

  You noticed that CPU cores on the Security Gateway are usually 100% utilized and many packets were dropped. You don't have a budget to perform a hardware upgrade at this time. To optimize drops you decide to use Priority Queues and fully enable Dynamic Dispatcher. How can you enable them?

  A. fw ctl multik dynamic_dispatching on

  B. fw ctl multik dynamic_dispatching set_mode 9

  C. fw ctl multik set_mode 9

  D. fw ctl miltik pq enable

  Correct Answer: A

• Question 519:

  Which two of these Check Point Protocols are used by _____ ?

  A. ELA and CPD

  B. FWD and LEA

  C. FWD and CPLOG

  D. ELA and CPLOG

  Correct Answer: B

• Question 520:

  To ensure that VMAC mode is enabled, which CLI command you should run on all cluster members? Choose the best answer.

  A. fw ctl set int fwha vmac global param enabled

  B. fw ctl get int fwha vmac global param enabled; result of command should return value 1

  C. cphaprob 璦 if

  D. fw ctl get int fwha_vmac_global_param_enabled; result of command should return value 1

  Correct Answer: B

  Reference: https://sc1.checkpoint.com/documents/R76/CP_R76_ClusterXL_AdminGuide/7292.htm