CheckPoint Checkpoint Certifications 156-315.80 Questions & Answers

• Question 81:

  To fully enable Dynamic Dispatcher with Firewall Priority Queues on a Security Gateway, run the following command in Expert mode then reboot:

  A. fw ctl multik set_mode 1

  B. fw ctl Dynamic_Priority_Queue on

  C. fw ctl Dynamic_Priority_Queue enable

  D. fw ctl multik set_mode 9

  Correct Answer: D

  Reference: https://supportcenter.checkpoint.com/supportcenter/portal? eventSubmit_doGoviewsolutiondetails=andsolutionid=sk105762

• Question 82:

  Advanced Security Checkups can be easily conducted within:

  A. Reports

  B. Advanced

  C. Checkups

  D. Views

  E. Summary

  Correct Answer: A

• Question 83:

  What is the limitation of employing Sticky Decision Function?

  A. With SDF enabled, the involved VPN Gateways only supports IKEv1

  B. Acceleration technologies, such as SecureXL and CoreXL are disabled when activating SDF

  C. With SDF enabled, only ClusterXL in legacy mode is supported

  D. With SDF enabled, you can only have three Sync interfaces at most

  Correct Answer: B

  Reference: https://sc1.checkpoint.com/documents/R76/CP_R76_ClusterXL_AdminGuide/7290.htm

• Question 84:

  Which Mobile Access Application allows a secure container on Mobile devices to give users access to internal website, file share and emails?

  A. Check Point Remote User

  B. Check Point Capsule Workspace

  C. Check Point Mobile Web Portal

  D. Check Point Capsule Remote

  Correct Answer: C

  Reference: https://sc1.checkpoint.com/documents/R76/CP_R76_Mobile_Access_WebAdmin/41723.htm

• Question 85:

  Which of the following process pulls application monitoring status?

  A. fwd

  B. fwm

  C. cpwd

  D. cpd

  Correct Answer: D

• Question 86:

  To fully enable Dynamic Dispatcher on a Security Gateway:

  A. run "fw ctl multik dynamic_dispatching on" and then Reboot.

  B. Using cpconfig, update the Dynamic Dispatcher value to "full" under the CoreXL menu.

  C. Edit/proc/interrupts to include multik set_mode 1 at the bottom of the file, save, and reboot.

  D. run fw ctl multik set_mode 1 in Expert mode and then reboot.

  Correct Answer: A

• Question 87:

  Session unique identifiers are passed to the web api using which http header option?

  A. X-chkp-sid

  B. Accept-Charset

  C. Proxy-Authorization

  D. Application

  Correct Answer: C

• Question 88:

  Which command shows actual allowed connections in state table?

  A. fw tab -t StateTable

  B. fw tab -t connections

  C. fw tab -t connection

  D. fw tab connections

  Correct Answer: B

• Question 89:

  What SmartEvent component creates events?

  A. Consolidation Policy

  B. Correlation Unit

  C. SmartEvent Policy

  D. SmartEvent GUI

  Correct Answer: B

  Reference: https://sc1.checkpoint.com/documents/R76/CP_R76_SmartEvent_AdminGuide/17401.htm

• Question 90:

  The Firewall kernel is replicated multiple times, therefore:

  A. The Firewall kernel only touches the packet if the connection is accelerated

  B. The Firewall can run different policies per core

  C. The Firewall kernel is replicated only with new connections and deletes itself once the connection times out

  D. The Firewall can run the same policy on all cores.

  Correct Answer: D

  On a Security Gateway with CoreXL enabled, the Firewall kernel is replicated multiple times. Each replicated copy, or instance, runs on one processing core. These instances handle traffic concurrently, and each instance is a complete and independent inspection kernel. When CoreXL is enabled, all the kernel instances in the Security Gateway process traffic through the same interfaces and apply the same security policy.

  Reference: https://sc1.checkpoint.com/documents/R77/ CP_R77_PerformanceTuning_WebAdmin/6731.htm