CheckPoint Checkpoint Certifications 156-915.80 Questions & Answers

• Question 81:

  Selecting an event displays its configurable properties in the Detail pane and a description of the event in the Description pane. Which is NOT an option to adjust or configure?

  A. Severity

  B. Automatic reactions

  C. Policy

  D. Threshold

  Correct Answer: C

  Reference: https://sc1.checkpoint.com/documents/R76/CP_R76_SmartEvent_AdminGuide/17401.htm

• Question 82:

  Which statement is NOT TRUE about Delta synchronization?

  A. Using UDP Multicast or Broadcast on port 8161

  B. Using UDP Multicast or Broadcast on port 8116

  C. Quicker than Full Sync

  D. Transfers changes in the Kernel labels between cluster members

  Correct Answer: A

• Question 83:

  SmartEvent has several components that function together to track security threats. What is the function of the Correlation Unit as a component of this architecture?

  A. Analyzes this log entry as it arrives at the log server according to the Event Policy. When a threat pattern is identified, an event is forwarded to the SmartEvent Server.

  B. Correlates all the identified threats with the consolidation policy.

  C. Collects syslog data from third party devices and saves them to the database.

  D. Connects with the SmartEvent Client when generating threat reports.

  Correct Answer: A

• Question 84:

  A Threat Prevention profile is a set of configurations based on the following. (Choose all that apply.)

  A. Anti-Virus settings, Anti-Bot settings, Threat Emulation settings

  B. Anti-Virus settings, Anti-Bot settings, Threat Emulation settings, Intrusion-prevention settings

  C. Anti-Virus settings, Anti-Bot settings, Threat Emulation settings, Intrusion-prevention settings, HTTPS inspection settings

  D. Anti-Bot settings, Threat Emulation settings, Intrusion-prevention settings, HTTPS inspection settings

  Correct Answer: A

  Reference: https://sc1.checkpoint.com/documents/R77/CP_R77_ThreatPrevention_WebAdmin/82209.htm

• Question 85:

  How many interfaces can you configure to use the Multi-Queue feature?

  A. 10 interfaces

  B. 3 interfaces

  C. 4 interfaces

  D. 5 interfaces

  Correct Answer: D

  Reference: https://community.checkpoint.com/t5/Enterprise-Appliances-and-Gaia/R80-x-Performance-Tuning-Tip-Multi-Queue/td-p/41608

• Question 86:

  To fully enable Dynamic Dispatcher on a Security Gateway:

  A. run fw ctl multik set_mode 9 in Expert mode and then reboot

  B. Using cpconfig, upodate the Dynamic Dispatcher value to "full" under the CoreXl menu

  C. Edit /proc/interrupts to include multik set_mode 1 at the bottom of the file, save, and reboot

  D. run fw ctl multik set_mode 1 in Expert mode and then reboot

  Correct Answer: A

  Reference: https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=andsolutionid=sk105261

• Question 87:

  What is the correct command to observe the Sync traffic in a VRRP environment?

  A. fw monitor -e "accept [12:4,b]=224.0.0.18;"

  B. fw monitor -e "accept port(6118;"

  C. fw monitor -e "accept proto=mcVRRP;"

  D. fw monitor -e "accept dst=224.0.0.18;"

  Correct Answer: D

• Question 88:

  Which of the following process pulls applications monitoring status?

  A. fwd

  B. fwm

  C. cpwd

  D. cpd

  Correct Answer: C

  Reference: https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=andsolutionid=sk97638

• Question 89:

  SandBlast appliances can be deployed in the following modes: A. using a SPAN port to receive a copy of the traffic only

  B. detect only

  C. inline/prevent or detect

  D. as a Mail Transfer Agent and as part of the we traffic flow only

  Correct Answer: C

• Question 90:

  What utility would you use to configure route-based VPNs?

  A. vpn shell

  B. vpn tu

  C. vpn sw_topology

  D. vpn set_slim_server

  Correct Answer: B