156-915.80 Exam Questions

Which of the following statements accurately describes the command snapshot?

Which file defines the fields for each object used in the file objects.C (color, num/string, default value...)?

In SmartDashboard, Translate destination on client side is checked in Global Properties. When Network Address Translation is used:

Which is a suitable command to check whether Drop Templates are activated or not?

Which of the following statements accurately describes the command upgrade_export?

Your customer, Mr. Smith needs access to other networks and should be able to use all services. Session authentication is not suitable. You select Client Authentication with HTTP....

You want to establish a VPN, using certificates. Your VPN will exchange certificates with an external partner. Which of the following activities should you do first?

A Web server behind the Security Gateway is set to Automatic Static NAT. Client side NAT is not checked in the Global Properties. A client on the Internet initiates a session to th...

MultiCorp has bought company OmniCorp and now has two active AD domains. How would you deploy Identity Awareness in this environment?

MultiCorp is running Smartcenter R71 on an IPSO platform and wants to upgrade to a new Appliance with R80. Which migration tool is recommended?

Check Point APIs allow system engineers and developers to make changes to their organization's security policy with CLI tools and Web Services for all of the following except?

Can you implement a complete IPv6 deployment without IPv4 addresses?

Paul has just joined the MegaCorp security administration team. Natalie, the administrator, creates a new administrator account for Paul in SmartDashboard and installs the policy....

MegaCorps' disaster recovery plan is past due for an update to the backup and restore section to enjoy the benefits of the new distributed R80 installation. You must propose a plan...

Where is it necessary to configure historical records in SmartView Monitor to generate Express reports in SmartReporter?

Your perimeter Security Gateway's external IP is 200.200.200.3. Your network diagram shows: Required: Allow only network 192.168.10.0 and 192.168.20.0 to go out to the Internet, us...

Where does the security administrator activate Identity Awareness within SmartDashboard?

After filtering a fw monitor trace by port and IP, a packet is displayed three times; in the i, I, and o inspection points, but not in the O inspection point. Which is the likely s...

Your main internal network 10.10.10.0/24 allows all traffic to the Internet using Hide NAT. You also have a small network 10.10.20.0/24 behind the internal router. You want to conf...

To qualify as an Identity Awareness enabled rule, which column MAY include an Access Role?

For best practices, what is the recommended time for automatic unlocking of locked admin accounts?

In the Rule Base displayed, user authentication in Rule 4 is configured as fully automatic. Eric is a member of the LDAP group, MSD_Group. What happens when Eric tries to connect t...

You have three servers located in a DMZ, using private IP addresses. You want internal users from 10.10.10.x to access the DMZ servers by public IP addresses. Internal_net 10.10.10...

You are responsible for the configuration of MegaCorp's Check Point Firewall. You need to allow two NAT rules to match a connection. Is it possible? Give the BEST answer.

What happens if the identity of a user is known?

MicroCorp experienced a security appliance failure. (LEDs of all NICs are off.) The age of the unit required that the RMA-unit be a different model. Will a revert to an existing sn...

Which is the lowest Gateway version manageable by SmartCenter R80?

What makes Anti-Bot unique compared to other Threat Prevention mechanisms, such as URL Filtering, Anti-Virus, IPS, and Threat Emulation?

How can you check whether IP forwarding is enabled on an IP Security Appliance?

Where can you find the Check Point's SNMP MIB file?

When deploying multiple clustered firewalls on the same subnet, what does the firewall administrator need to configure to prevent CCP broadcasts being sent to the wrong cluster?

Review the rules. Assume domain UDP is enabled in the impled rules. What happens when a user from the internal network tries to browse to the internet using HTTP? The user:

You want VPN traffic to match packets from internal interfaces. You also want the traffic to exit the Security Gateway bound for all site-to-site VPN Communities, including Remote...

Which command will only show the number of entries in the connection table?

Which command line interface utility allows the administrator to verify the Security Policy name and timestamp currently installed on a firewall module?

Your company's Security Policy forces users to authenticate to the Gateway explicitly, before they can use any services. The Gateway does not allow the Telnet service to itself fro...

What is Check Point's CoreXL?

Which Security Gateway R80 configuration setting forces the Client Authentication authorization time-out to refresh, each time a new user is authenticated? The:

Which command displays the installed Security Gateway version?

Complete this statement from the options provided. Using Captive Portal, unidentified users may be either; blocked, allowed to enter required credentials, or required to download t...

The CDT utility supports which of the following?

Which of these options is an implicit MEP option?

What command with appropriate switches would you use to test Identity Awareness connectivity?

Your internal network is configured to be 10.1.1.0/24. This network is behind your perimeter R80 Gateway, which connects to your ISP provider. How do you configure the Gateway to a...

You have a diskless appliance platform. How do you keep swap file wear to a minimum?

What is the syntax for uninstalling a package using newpkg?

Which Check Point address translation method is necessary if you want to connect from a host on the Internet via HTTP to a server with a reserved (RFC 1918) IP address on your DMZ?

What scenario indicates that SecureXL is enabled?

Which command allows you to view the contents of an R80 table?

Match the following commands to their correct function. Each command has one function only listed.