CheckPoint Checkpoint Certifications 156-315.80 Questions & Answers

• Question 61:

  What CLI utility runs connectivity tests from a Security Gateway to an AD domain controller?

  A. test_connectivity_ad –d

  B. test_ldap_connectivity –d

  C. test_ad_connectivity –d

  D. ad_connectivity_test –d

  Correct Answer: C

  Reference: https://sc1.checkpoint.com/documents/R80.30/WebAdminGuides/EN/ CP_R80.30_CLI_ReferenceGuide/html_frameset.htm?topic=documents/R80.30/WebAdminGuides/EN/ CP_R80.30_CLI_ReferenceGuide/200877

• Question 62:

  According to out of the box SmartEvent policy, which blade will automatically be correlated into events?

  A. Firewall

  B. VPN

  C. IPS

  D. HTTPS

  Correct Answer: C

• Question 63:

  What state is the Management HA in when both members have different policies/databases?

  A. Synchronized

  B. Never been synchronized

  C. Lagging

  D. Collision

  Correct Answer: D

  Reference: https://sc1.checkpoint.com/documents/R77/CP_R77_SecurityManagement_WebAdminGuide/ html_frameset.htm?topic=documents/R77/CP_R77_SecurityManagement_WebAdminGuide/98838

• Question 64:

  UserCheck objects in the Application Control and URL Filtering rules allow the gateway to communicate with the users. Which action is not supported in UserCheck objects?

  A. Ask

  B. Drop

  C. Inform

  D. Reject

  Correct Answer: D

• Question 65:

  Firewall polices must be configured to accept VRRP packets on the GAiA platform if it Firewall software. The Multicast destination assigned by the internet Assigned Number Authority (IANA) for VRRP is:

  A. 224.0.0.18

  B. 224 00 5

  C. 224.0.0.102

  D. 224.0.0.22

  Correct Answer: A

• Question 66:

  What state is the Management HA in when both members have different policies/databases?

  A. Synchronized

  B. Never been synchronized

  C. Lagging

  D. Collision

  Correct Answer: A

• Question 67:

  When Configuring Endpoint Compliance Settings for Applications and Gateways within Mobile Access, which of the three approaches will allow you to contuju'1* individual policies for each application?

  A. Basic Approach

  B. Strong Approach

  C. Very Advanced Approach

  D. Medium Approach

  Correct Answer: C

• Question 68:

  You need to change the MAC-address on eth2 interface of the gateway. What is the correct way to change MAC-address in Check Point Gaia?

  A. In CLISH run: set interface eth2 mac-addr 11:11:11:11:11:11

  B. In expert-mode run ifconfig eth1 hw 11:11:11:11 11 11

  C. In CLISH run set interface eth2 hw-addr 11 11 11:11:11 11

  D. In expert-mode run: ethtool -4 eth2 mac 11 11:11:11:11:11

  Correct Answer: A

• Question 69:

  Which CLI command will reset the IPS pattern matcher statistics?

  A. ips reset pmstat

  B. ips pstats reset

  C. ips pmstats refresh

  D. ips pmstats reset

  Correct Answer: D

  Reference: https://sc1.checkpoint.com/documents/R76/CP_R76_CLI_WebAdmin/84627.htm

• Question 70:

  When requiring certificates for mobile devices, make sure the authentication method is set to one of the following, Username and Password, RADIUS or _______.

  A. SecureID

  B. SecurID

  C. Complexity

  D. TacAcs

  Correct Answer: B

  Reference: https://sc1.checkpoint.com/documents/R77/CP_R77_Mobile_Access_WebAdmin/41587.htm