Updated Check Point Certified Security Expert - R80 156-315.80 Exam Question

NEW QUESTION 1
Which command is used to display status information for various components?

• A. show all systems
• B. show system messages
• C. sysmess all
• D. show sysenv all

Answer: D

NEW QUESTION 2
You find one of your cluster gateways showing “Down” when you run the “cphaprob stat” command. You then run the “clusterXL_admin up” on the down member but unfortunately the member continues to show down. What command do you run to determine the cause?

• A. cphaprob –f register
• B. cphaprob –d –s report
• C. cpstat –f all
• D. cphaprob –a list

Answer: D

NEW QUESTION 3
What component of R80 Management is used for indexing?

• A. DBSync
• B. API Server
• C. fwm
• D. SOLR

Answer: D

NEW QUESTION 4
Which of the following is NOT a component of Check Point Capsule?

• A. Capsule Docs
• B. Capsule Cloud
• C. Capsule Enterprise
• D. Capsule Workspace

Answer: C

NEW QUESTION 5
Which firewall daemon is responsible for the FW CLI commands?

• A. fwd
• B. fwm
• C. cpm
• D. cpd

Answer: A

NEW QUESTION 6
For Management High Availability, which of the following is NOT a valid synchronization status?

• A. Collision
• B. Down
• C. Lagging
• D. Never been synchronized

Answer: B

NEW QUESTION 7
An administrator is creating an IPsec site-to-site VPN between his corporate office and branch office. Both offices are protected by Check Point Security Gateway managed by the same Security Management Server. While configuring the VPN community to specify the pre-shared secret the administrator found that the check box to enable pre-shared secret and cannot be enabled.
Why does it not allow him to specify the pre-shared secret?

• A. IPsec VPN blade should be enabled on both Security Gateway.
• B. Pre-shared can only be used while creating a VPN between a third party vendor and Check Point Security Gateway.
• C. Certificate based Authentication is the only authentication method available between two Security Gateway managed by the same SMS.
• D. The Security Gateways are pre-R75.40.

Answer: C

NEW QUESTION 8
What is mandatory for ClusterXL to work properly?

• A. The number of cores must be the same on every participating cluster node
• B. The Magic MAC number must be unique per cluster node
• C. The Sync interface must not have an IP address configured
• D. If you have “Non-monitored Private” interfaces, the number of those interfaces must be the same on all cluster members

Answer: B

NEW QUESTION 9
What is true about the IPS-Blade?

• A. In R80, IPS is managed by the Threat Prevention Policy
• B. In R80, in the IPS Layer, the only three possible actions are Basic, Optimized and Strict
• C. In R80, IPS Exceptions cannot be attached to “all rules”
• D. In R80, the GeoPolicy Exceptions and the Threat Prevention Exceptions are the same

Answer: A

NEW QUESTION 10
Which is NOT an example of a Check Point API?

• A. Gateway API
• B. Management API
• C. OPSC SDK
• D. Threat Prevention API

Answer: A

NEW QUESTION 11
What can we infer about the recent changes made to the Rule Base?

• A. Rule 7 was created by the ‘admin’ administrator in the current session
• B. 8 changes have been made by administrators since the last policy installation
• C. The rules 1, 5 and 6 cannot be edited by the ‘admin’ administrator
• D. Rule 1 and object webserver are locked by another administrator

Answer: D

NEW QUESTION 12
In the Firewall chain mode FFF refers to:

• A. Stateful Packets
• B. No Match
• C. All Packets
• D. Stateless Packets

Answer: C

NEW QUESTION 13
Which statement is correct about the Sticky Decision Function?

• A. It is not supported with either the Performance pack of a hardware based accelerator card
• B. Does not support SPI’s when configured for Load Sharing
• C. It is automatically disabled if the Mobile Access Software Blade is enabled on the cluster
• D. It is not required L2TP traffic

Answer: A

NEW QUESTION 14
Joey want to configure NTP on R80 Security Management Server. He decided to do this via WebUI. What is the correct address to access the Web UI for Gaia platform via browser?

• A. https://<Device_IP_Adress>
• B. http://<Device IP_Address>:443
• C. https://<Device_IP_Address>:10000
• D. https://<Device_IP_Address>:4434

Answer: A

NEW QUESTION 15
When attempting to start a VPN tunnel, in the logs the error “no proposal chosen” is seen numerous times. No other VPN-related entries are present.
Which phase of the VPN negotiations has failed?

• A. IKE Phase 1
• B. IPSEC Phase 2
• C. IPSEC Phase 1
• D. IKE Phase 2

Answer: A

NEW QUESTION 16
The log server sends what to the Correlation Unit?

• A. Authentication requests
• B. CPMI dbsync
• C. Logs
• D. Event Policy

Answer: D

NEW QUESTION 17
......