CheckPoint Checkpoint Certifications 156-915.80 Questions & Answers

• Question 71:

  How do you enable virtual mac (VMAC) on-the-fly on a cluster member?

  A. cphaprob set int fwha_vmac_global_param_enabled 1

  B. clusterXL set int fwha_vmac_global_param_enabled 1;

  C. cphaconf set int fwha_vmac_global_param_enabled 1

  D. fw ctl set int fwha_vmac_global_param_enabled 1

  Correct Answer: D

• Question 72:

  In which formats can Threat Emulation forensics reports be viewed in?

  A. TXT, XML and CSV

  B. PDF and TXT

  C. PDF, HTML, and XML

  D. PDF and HTML

  Correct Answer: D

• Question 73:

  With MTA (Mail Transfer Agent) enabled the gateways manages SMTP traffic and holds external email with potentially malicious attachments. What is required in order to enable MTA (Mail Transfer Agent) functionality in the Security Gateway?

  A. Threat Cloud Intelligence

  B. Threat Prevention Software Blade Package

  C. Endpoint Total Protection

  D. Traffic on port 25

  Correct Answer: B

• Question 74:

  In what way are SSL VPN and IPSec VPN different?

  A. SSL VPN is using HTTPS in addition to IKE, whereas IPSec VPN is clientless

  B. SSL VPN adds and extra VPN header to the packet, IPsec VPN does not

  C. IPsec VPN does not support two factor authentication, SSL VPN does support this

  D. IPsec VPN uses an additional virtual adapter; SSL VPN uses the client network adapter only

  Correct Answer: D

• Question 75:

  The Check Point installation history feature in R80 provides the following:

  A. View install changes and install specific version.

  B. View install changes

  C. Policy Installation Date, view install changes and install specific version

  D. Policy Installation Date only

  Correct Answer: C

  Reference: https://sc1.checkpoint.com/documents/R80.10/WebAdminGuides/EN/CP_R80.10_SecurityManagement_AdminGuide/html_frameset.htm?topic=documents/R80.10/WebAdminGuides/EN/ CP_R80.10_SecurityManagement_AdminGuide/159917

• Question 76:

  What is not a component of Check Point SandBlast?

  A. Threat Emulation

  B. Threat Simulation

  C. Threat Extraction

  D. Threat Cloud

  Correct Answer: B

• Question 77:

  How can you see historical data with cpview?

  A. cpview -d

  B. cpview -t

  C. cpview -f

  D. cpview -e

  Correct Answer: B

  Reference: https://www.youtube.com/watch?v=OjsvuT2YxKs

• Question 78:

  Which configuration file contains the structure of the Security Servers showing the port numbers, corresponding protocol name, and status?

  A. $FWDIR/database/fwauthd.conf

  B. $FWDIR/conf/fwauth.conf

  C. $FWDIR/conf/fwauthd.conf

  D. $FWDIR/state/fwauthd.conf

  Correct Answer: C

• Question 79:

  SmartEvent provides a convenient way to run common command line executables that can assist in investigating events. Right-clicking the IP address, source or destination, in a event provides a list of default and customized commands. They appear only on cells that refer to IP addresses because the IP address of the active cell is used as the destination of the command when run. The default commands are:

  A. ping, traceroute, netstat, and route

  B. ping, nslookup, Telnet, and route

  C. ping, whois, nslookup, and Telnet

  D. ping, traceroute, netstat, and nslookup

  Correct Answer: C

  Reference: https://sc1.checkpoint.com/documents/R76/CP_R76_SmartEventIntro_AdminGuide/17468.htm

• Question 80:

  Check Point Management (cpm) is the main management process in that it provides the architecture for the consolidated management console. It empowers the migration from legacy Client side logic to Server side-logic. The cpm process:

  A. Allow GUI Client and management server to communicate via TCP Port 19001

  B. Allow GUI Client and management server to communicate via TCP Port 18191

  C. Performs database tasks such as creating, deleting, and modifying objects and compiling policy.

  D. Performs database tasks such as creating, deleting, and modifying objects and compiling as well as policy code generation.

  Correct Answer: C