156-115.80 Exam Questions

Which database domain stores URL filtering updates?

John works for ABC Corporation. They have enabled CoreXL on their firewall. John would like to identify should John run to view the CPU role allocation?

How can you force a manual failover?

What ClusterXL mechanism is used to verify that the interfaces of other cluster members are UP and communicates the status of cluster members?

Which of the following commands can be used to see the list of processes monitored by the Watch Dog process?

When dealing with monolithic operating systems such as Gaia, where are system calls initiated from to achieve a required system level function?

Which Check Point utility should be used to assist in analyzing the output of vpn and ike debug?

Which of the following statements is TRUE about R80 management plug-ins?

What is the default setting and minimum value of the Sync tick timer?

What effect would change the parameter of fwha_timer_cpha_res to 5 have on a cluster?

Your customer is experiencing problems connecting to the Security Management Server via SmartConsole. You suggest testing the connection to the SMS with GuiBedit from the client ma...

If cluster members are geographically separated and the time to detect a failover needs to be longer, what timer needs to be adjusted?

Which command should be used to insert fw monitor before secxl_sync module?

What is the difference between Client-Side and Server-Side NAT?

If certain services should not use the Cluster Object IP Address, but requires the use of the individual Cluster Member IPs, what steps would be required for configuration?

The maximum number of critical devices or pnotes on a cluster member is what?

A Firewall administrator is attempting to push a policy to a new Security Gateway for a remote office but the installation fails. The Management Server IP is 10.1.1.101. Initial tr...

Where will the command, "fw monitor -pi -vpn", be inserted into the ctl chain?

Which "fwm" command syntax will instruct the gateway to load its most recent policy?

Which Check Point daemon, if it stops responding or goes down, results in connections from the SmartConsole to the Management Server failing?

How can you ensure that a particular service does not use the cluster IP address?

URL Filtering is an essential part of Web Security in the Gateway. For the Security Gateway to perform a URL lookup when a client makes a URL request, where is the sync-request for...

Which templates for SecureXL are not enabled by default?

While using IPS, the network performance is being impacted on a load sharing cluster with asymmetric routes. What is most likely causing the degradation?

Which kernel table stores information about NAT connections?

How can you print the session UUID and the UUID of a connection together in fw monitor?

The pepd and pdpd daemons are used by which Software blade?

For organizations with existing IPv4 networks who wish to move to IPv6, which of the following is a Transition Mechanism that can be used?

Which command query will search the database for instances of the following FW-Corporate object:

When running a debug with fw monitor, which parameter will create a more verbose output?

Which daemon is responsible for anti-spam?

IPS detection incorporates 4 layers. Which of the following is NOT a layer in IPS detection?

When troubleshooting acceleration issues on a Security Gateway, you notice that the fw_worker_x process is consuming about 100% processing power. What can be done to stop this from...

Which of the following is NOT a feature of ClusterXL?

Static NAT has been configured and NAT rules were created automatically. The global properties option "Translate destination on client side" is not checked. Clients are complaining...

Consider an IKE debug file that has been generated when debugging an issue with site to site VPN. What is the purpose of a NONCE?

Fill in the blank: The command ______________________ provides the most complete restoration of a R80 configuration.

In order to review the IPS statistics to determine if adjustments can be made to improve performance, which command would you use to get the appropriate information?

The CPM process uses what ports?

You need to investigate issues with policy installation on the Security Gateway side. Which process will you debug and how?

What is the proper syntax to enter the "central database" that contains all objects within the Postgres database?

Which feature is not supported with unnumbered VTI?

In the gateway object, under topology you select the "Get All Members Interfaces with Topology" option and your newly configured unnumbered VTIs are not populated. Why is this info...

What operating systems support unnumbered VTIs?

You would like to configure unnumbered VTIs and your environment uses load sharing clustering. Would this clustering technology be supported by your unnumbered VTI's?

You are configuring dynamic routing on Secure Platform, as the administrator you run the command pro enable and reboot. You are confident that your configuration has been done corr...

What is the prefix name for the interface when creating an unnumbered VTI in GAIA?

Your customer receives an alert from their network operation center, they are seeing ARP and Ping scans of their network originating from the firewall. What could be the reason for...

Your cluster member is showing a state of "Ready". Which of the following is NOT a reason one would expect for this behaviour?

Which of the following is NOT a cphaprob status?