CheckPoint Checkpoint Certifications 156-315.80 Questions & Answers

• Question 431:

  Which command is used to obtain the configuration lock in Gaia?

  A. Lock database override

  B. Unlock database override

  C. Unlock database lock

  D. Lock database user

  Correct Answer: A

  Obtaining a Configuration Lock

  1.

  lock database override

  2.

  unlock database

• Question 432:

  Fill in the blank: The IPS policy for pre-R80 gateways is installed during the _______ .

  A. Firewall policy install

  B. Threat Prevention policy install

  C. Anti-bot policy install

  D. Access Control policy install

  Correct Answer: B

• Question 433:

  How many users can have read/write access in Gaia at one time?

  A. Infinite

  B. One

  C. Three

  D. Two

  Correct Answer: B

• Question 434:

  Which software blade does NOT accompany the Threat Prevention policy?

  A. Anti-virus

  B. IPS

  C. Threat Emulation

  D. Application Control and URL Filtering

  Correct Answer: D

• Question 435:

  True or False: In R80, more than one administrator can login to the Security Management Server with write permission at the same time.

  A. False, this feature has to be enabled in the Global Properties.

  B. True, every administrator works in a session that is independent of the other administrators.

  C. True, every administrator works on a different database that is independent of the other administrators.

  D. False, only one administrator can login with write permission.

  Correct Answer: B

• Question 436:

  Which utility allows you to configure the DHCP service on Gaia from the command line?

  A. ifconfig

  B. dhcp_ofg

  C. sysconfig

  D. cpconfig

  Correct Answer: C

• Question 437:

  There are two R77.30 Security Gateways in the Firewall Cluster. They are named FW_A and FW_B. The cluster is configured to work as HA (High availability) with default cluster configuration. FW_A is configured to have higher priority than FW_B. FW_A was active and processing the traffic in the morning. FW_B was standby. Around 1100 am, its interfaces went down and this caused a failover. FW_B became active. After an hour, FW_A's interface issues were resolved and it became operational.

  When it re-joins the cluster, will it become active automatically?

  A. No, since `maintain' current active cluster member' option on the cluster object properties is enabled by default.

  B. No, since `maintain' current active cluster member' option is enabled by default on the Global Properties.

  C. Yes, since `Switch to higher priority cluster member' option on the cluster object properties is enabled by default.

  D. Yes, since `Switch to higher priority cluster member' option is enabled by default on the Global Properties.

  Correct Answer: A

  Reference: http://dl3.checkpoint.com/paid/7e/7ef174cf00762ceaf228384ea20ea64a/ CP_R77_ClusterXL_AdminGuide.pdf? HashKey=1479822138_31410b1f8360074be87fd8f1ab682464andxtn=.pdf

• Question 438:

  DLP and Geo Policy are examples of what type of Policy?

  A. Standard Policies

  B. Shared Policies

  C. Inspection Policies

  D. Unified Policies

  Correct Answer: B

  Reference: https://sc1.checkpoint.com/documents/R80/CP_R80_SecMGMT/html_frameset.htm? topic=documents/R80/CP_R80_SecMGMT/126197

• Question 439:

  In the R80 SmartConsole, on which tab are Permissions and Administrators defined?

  A. Security Policies

  B. Logs and Monitor

  C. Manage and Settings

  D. Gateways and Servers

  Correct Answer: C

• Question 440:

  Fill in the blank: A ________ VPN deployment is used to provide remote users with secure access to internal corporate resources by authenticating the user through an internet browser.

  A. Clientless remote access

  B. Clientless direct access

  C. Client-based remote access

  D. Direct access

  Correct Answer: A

  Reference: https://sc1.checkpoint.com/documents/R80/CP_R80BC_Firewall/html_frameset.htm? topic=documents/R80/CP_R80BC_Firewall/92704