Nest 0 Cart
Nest Account
Popular Exams
All Categories...
Nest
Nest 0
Contact
Log In / Sign Up
Copyright 2024 © store. All rights reserved.
Home Checkpoint 156-315.80

Checkpoint 156-315.80 Exam Practice Questions (P. 4)

  • Full Access (479 questions)
  • Six months of Premium Access
  • Access to one million comments
  • Seamless ChatGPT Integration
  • Ability to download PDF files
  • Anki Flashcard files for revision
  • No Captcha & No AdSense
  • Advanced Exam Configuration
Get Contributor Access
Question #31
What Factor preclude Secure XL Templating?
  1. A
    Source Port Ranges/Encrypted Connections
  2. B
    Simple Groups
  3. C
    ClusterXL in load sharing Mode
  4. D
    CoreXL

Correct Answer:
A
There are factors that can preclude templating if all other parameters are met for packet acceleration, such as:
ג€¢ Source port ranges
ג€¢ IPS features not supported in Acceleration
ג€¢ NAT'd traffic, unless NAT templates are enabled
ג€¢ Encrypted connections

Question #32
In order to get info about assignment (FW, SND) of all CPUs in your SGW, what is the most accurate CLI command?
  1. A
    fw ctl sdstat
  2. B
    fw ctl affinity ג€"l ג€"a ג€"r ג€"v
  3. C
    fw ctl multik stat
  4. D
    cpinfo

Correct Answer:
B

Question #33
Check Pont Central Deployment Tool (CDT) communicates with the Security Gateway / Cluster Members over Check Point SIC _____________ .
  1. A
    TCP Port 18190
  2. B
    TCP Port 18209
  3. C
    TCP Port 19009
  4. D
    TCP Port 18191

Correct Answer:
D

Question #34
The CPD daemon is a Firewall Kernel Process that does NOT do which of the following?
  1. A
    Secure Internal Communication (SIC)
  2. B
    Restart Daemons if they fail
  3. C
    Transfers messages between Firewall processes
  4. D
    Pulls application monitoring status

Correct Answer:
D
Reference:
https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk97638

Question #35
What is not a component of Check Point SandBlast?
  1. A
    Threat Emulation
  2. B
    Threat Simulator
  3. C
    Threat Extraction
  4. D
    Threat Cloud

Correct Answer:
B

Question #36
Full synchronization between cluster members is handled by Firewall Kernel. Which port is used for this?
  1. A
    UDP port 265
  2. B
    TCP port 265
  3. C
    UDP port 256
  4. D
    TCP port 256

Correct Answer:
D
Synchronization works in two modes:
Full Sync transfers all Security Gateway kernel table information from one cluster member to another. It is handled by the fwd daemon using an encrypted TCP connection on port 256.
Delta Sync transfers changes in the kernel tables between cluster members. Delta sync is handled by the Security Gateway kernel using UDP connections on port
8116.
Reference:
https://sc1.checkpoint.com/documents/R80.10/WebAdminGuides/EN/CP_R80.10_ClusterXL_AdminGuide/html_frameset.htm?topic=documents/
R80.10/WebAdminGuides/EN/CP_R80.10_ClusterXL_AdminGuide/7288

Question #37
Fill in the blank: The command ___________ provides the most complete restoration of a R80 configuration.
  1. A
    upgrade_import
  2. B
    cpconfig
  3. C
    fwm dbimport -p <export file>
  4. D
    cpinfo ג€"recover

Correct Answer:
A

Question #38
Check Point Management (cpm) is the main management process in that it provides the architecture for a consolidated management console. It empowers the migration from legacy Client-side logic to Server-side logic. The cpm process:
  1. A
    Allow GUI Client and management server to communicate via TCP Port 19001
  2. B
    Allow GUI Client and management server to communicate via TCP Port 18191
  3. C
    Performs database tasks such as creating, deleting, and modifying objects and compiling policy.
  4. D
    Performs database tasks such as creating, deleting, and modifying objects and compiling as well as policy code generation.

Correct Answer:
C

Question #39
Which of the following type of authentication on Mobile Access can NOT be used as the first authentication method?
  1. A
    Dynamic ID
  2. B
    RADIUS
  3. C
    Username and Password
  4. D
    Certificate

Correct Answer:
A
Reference:
https://sc1.checkpoint.com/documents/R80.10/WebAdminGuides/EN/CP_R80.10_MobileAccess_AdminGuide/html_frameset.htm?topic=documents/
R80.10/WebAdminGuides/EN/CP_R80.10_MobileAccess_AdminGuide/41587

Question #40
Which of the SecureXL templates are enabled by default on Security Gateway?
  1. A
    Accept
  2. B
    Drop
  3. C
    NAT
  4. D
    None

Correct Answer:
D

Previous Questions Next Questions

All Pages