Updated Check Point 156-915.80 Exam Dumps

1. What is the port used for SmartConsole to connect to the Security Management Server:

2. Which is the correct order of a log flow processed by SmartEvents components:

3. In SmartEvent, what are the different types of automatic reactions that the administrator can configure?

4. Which components allow you to reset a VPN tunnel?

5. When synchronizing clusters, which of the following statements is FALSE?

6. Which of the following is a new R80.10 Gateway feature that had not been available in R77.X and older?

7. In R80.10, how do you manage your Mobile Access Policy?

8. You find one of your cluster gateways showing “Down” when you run the “cphaprob stat” command. You then run the “clusterXL_admin up” on the down member but unfortunately the member continues to show down.

What command do you run to determine the case?

9. SandBlast offers flexibility in implementation based on their individual business needs.

What is an option for deployment of Check Point SandBlast Zero-Day Protection?

10. Which of the following is NOT a valid way to view interface’s IP address settings in Gaia?

11. Check Point recommends configuring Disk Space Management parameters to delete old log entities when available disk space is less than or equal to?

12. What API command below creates a new host with the name “New Host” and IP address of “192.168.0.10”?

13. What are types of Check Point APIs available currently as part of R80.10 code?

14. Which of the following is NOT an internal/native Check Point command?

15. What is the SandBlast Agent designed to do?

16. The SmartEvent R80 Web application for real-time event monitoring is called:

17. What Shell is required in Gaia to use WinSCP?

18. Which one of the following is true about Threat Emulation?

19. What are the minimum open server hardware requirements for a Security Management Server/Standalone in R80.10?

20. The “MAC magic” value must be modified under the following condition:

21. The Correlation Unit performs all but which of the following actions:

22. The following command is used to verify the CPUSE version:

23. Which statement is true regarding redundancy?

24. Vanessa is expecting a very important Security Report. The Document should be sent as an attachment via e-mail. An e-mail with Security_ report.pdf file was delivered to her e-mail inbox. When she opened the PDF file, she noticed that the file is basically empty and only few lines of text are in it. The report is missing some graphs, tables and links.

Which component of SandBlast protection is her company using on a Gateway?

25. Which command collects diagnostic data for analyzing customer setup remotely?

26. When deploying multiple clustered firewalls on the same subnet, what does the firewall administrator need to configure to prevent CCP broadcasts being sent to the wrong cluster?

27. Which of these options is an implicit MEP option?

28. John detected high load on sync interface.

Which is most recommended solution?

29. What is the SOLR database for?

30. What is a feature that enables VPN connections to successfully maintain a private and secure VPN session without employing Stateful Inspection?

31. On R80.10 the IPS Blade is managed by:

32. Which packet info is ignored with Session Rate Acceleration?

33. What is the purpose of Priority Delta in VRRP?

34. What is the purpose of a SmartEvent Correlation Unit?

35. The CDT utility supports which of the following?

36. The Firewall kernel is replicated multiple times, therefore:

37. Sticky Decision Function (SDF) is required to prevent which of the following? Assume you set up an Active-Active cluster.

38. Which is not a blade option when configuring SmartEvent?

39. What command would show the API server status?

40. You noticed that CPU cores on the Security Gateway are usually 100% utilized and many packets were dropped. You don’t have a budget to perform a hardware upgrade at this time. To optimize drops you decide to use Priority Queues and fully enable Dynamic Dispatcher.

How can you enable them?

41. You have existing dbedit scripts from R77. Can you use them with R80.10?

42. SecureXL improves non-encrypted firewall traffic throughput and encrypted VPN traffic throughput.

43. What are the three components for Check Point Capsule?

44. Using mgmt_cli, what is the correct syntax to import a host object called Server_1 from the CLI?

45. When defining QoS global properties, which option below is not valid?

46. Check Point APIs allow system engineers and developers to make changes to their organization’s security policy with CLI tools and Web Services for all of the following except?

47. What happen when IPS profile is set in Detect-Only Mode for troubleshooting?

48. When simulating a problem on CLusterXL cluster with cphaprob Cd STOP Cs problem Ct 0 register, to initiate a failover on an active cluster member, what command allows you remove the problematic state?

49. You are investigating issues with two gateway cluster members that are not able to establish the first initial cluster synchronization.

What service is used by the FWD daemon to do a Full Synchronization?

50. Which command shows the current connections distributed by CoreXL FW instances?

51. What is the most ideal Synchronization Status for Security Management Server High Availability deployment?

52. What GUI client would you use to view an IPS packet capture?

53. What is the valid range for VRID value in VRRP configuration?

54. Which one of these features is NOT associated with the Check Point URL Filtering and Application Control Blade?

55. Which command will reset the kernel debug options to default settings?

56. You need to change the number of firewall instances used by CoreXL.

How can you achieve this goal?

57. As a valid Mobile Access Method, what feature provides Capsule Connect/VPN?

58. What does the command vpn crl__zapdo?

59. Firewall policies must be configured to accept VRRP packets on the GAiA platform if it runs Firewall software.

The Multicast destination assigned by the Internet Assigned Numbers Authority (IANA) for VRRP is:

60. Full synchronization between cluster members is handled by Firewall Kernel.

Which port is used for this?

61. GAiA greatly increases operational efficiency by offering an advanced and intuitive software update agent, commonly referred to as the:

62. Which one of these is NOT a firewall chain?

63. Which is a suitable command to check whether Drop Templates are activated or not?

64. Which directory below contains log files?

65. What is the responsibility of SOLR process on R80.10 management server?

66. VPN Tunnel Sharing can be configured with any of the options below, EXCEPT One:

67. You want to store the GAiA configuration in a file for later reference.

What command should you use?

68. What can you do to see the current number of kernel instances in a system with CoreXL enabled?

69. When Dynamic Dispatcher is enabled, connections are assigned dynamically with the exception of

70. Why would you not see a CoreXL configuration option in cpconfig?

71. In SPLAT the command to set the timeout was idle. In order to achieve this and increase the timeout for Gaia, what command do you use?

72. What makes Anti-Bot unique compared to other Threat Prevention mechanisms, such as URL Filtering, Anti-Virus, IPS, and Threat Emulation?

73. SmartEvent does NOT use which of the following procedures to identify events?

74. In Gaia, if one is unsure about a possible command, what command lists all possible commands.

75. In which case is a Sticky Decision Function relevant?

76. The Security Gateway is installed on GAiA R80. The default port for the Web User Interface is _______.

77. When doing a Stand-Alone Installation, you would install the Security Management Server with which other Check Point architecture component?

78. Fill in the blank: The tool ___________ generates a R80 Security Gateway configuration report.

79. Fill in the blank: The R80 utility fw monitoris used to troubleshoot __________.

80. You are working with multiple Security Gateways enforcing an extensive number of rules.

To simplify security administration, which action would you choose?

81. Tom has been tasked to install Check Point R80 in a distributed deployment.

Before Tom installs the systems this way, how many machines will be need if he does NOT include a SmartConsole machine in his calculations?

82. Fill in the blank: The command _______________ provides the most complete restoration of a R80 configuration.

83. Which of the following statements is TRUE about R80 management plug-ins?

84. Fill in the blank: The R80 feature ________ permits blocking specific IP addresses for a specified time period.

85. In R80 spoofing is defined as a method of:

86. Which features are only supported with R80.10 Gateways but not R77.x?

87. For best practices, what is the recommended time for automatic unlocking of locked admin accounts?

88. What scenario indicates that SecureXL is enabled?