CheckPoint Checkpoint Certifications 156-915.80 Questions & Answers

• Question 501:

  An internal host initiates a session to the Google.com website and is set for Hide NAT behind the Security Gateway. The initiating traffic is an example of __________.

  A. client side NAT

  B. source NAT

  C. destination NAT

  D. None of these

  Correct Answer: B

• Question 502:

  A host on the Internet initiates traffic to the Static NAT IP of your Web server behind the Security Gateway. With the default settings in place for NAT, the initiating packet will translate the _________.

  A. destination on server side

  B. source on server side

  C. source on client side

  D. destination on client side

  Correct Answer: D

• Question 503:

  A Web server behind the Security Gateway is set to Automatic Static NAT. Client side NAT is not checked in the Global Properties. A client on the Internet initiates a session to the Web Server. Assuming there is a rule allowing this traffic, what other configuration must be done to allow the traffic to reach the Web server?

  A. Automatic ARP must be unchecked in the Global Properties.

  B. Nothing else must be configured.

  C. A static route must be added on the Security Gateway to the internal host.

  D. A static route for the NAT IP must be added to the Gateway's upstream router.

  Correct Answer: C

• Question 504:

  Fill in the blank. What is the correct command and syntax used to view a connection table summary on a Check Point Firewall?

  Correct Answer: fw tab -t connections -s

• Question 505:

  Fill in the blank. The user wants to replace a failed Windows-based firewall with a new server running GAi. For the most complete restore of an GAiA configuration, he or she will use the command _______

  Correct Answer: migrate_import

• Question 506:

  Fill in the blank. The command that typically generates the firewall application, operating system, and hardware specific drivers is _________ .

  Correct Answer: snapshot

• Question 507:

  To provide full connectivity upgrade status, use command _____________

  Correct Answer: cphaprob

• Question 508:

  In a zero downtime firewall cluster environment, what command syntax do you run to avoid switching problems around the cluster for command cphaconf?

  Correct Answer: set_ccp

• Question 509:

  In a zero downtime scenario, which command do you run manually after all cluster members are upgraded?

  Correct Answer: cphaconf set_ccp multicast

• Question 510:

  Complete this statement. To save interface information before upgrading a Windows Gateway, use command

  Correct Answer: ipconfig -a > [filename].txt