156-915.80 Exam Questions
482 real 156-915.80 exam questions with expert-verified answers and explanations. Page 1 of 10.
- Question #1
Which of the following statements accurately describes the command snapshot?
- Question #2
Which file defines the fields for each object used in the file objects.C (color, num/string, default value...)?
- Question #3
In SmartDashboard, Translate destination on client side is checked in Global Properties. When Network Address Translation is used:
- Question #4
Which is a suitable command to check whether Drop Templates are activated or not?
- Question #5
Which of the following statements accurately describes the command upgrade_export?
- Question #6
Your customer, Mr. Smith needs access to other networks and should be able to use all services. Session authentication is not suitable. You select Client Authentication with HTTP....
- Question #7
You want to establish a VPN, using certificates. Your VPN will exchange certificates with an external partner. Which of the following activities should you do first?
- Question #8
A Web server behind the Security Gateway is set to Automatic Static NAT. Client side NAT is not checked in the Global Properties. A client on the Internet initiates a session to th...
- Question #9
MultiCorp has bought company OmniCorp and now has two active AD domains. How would you deploy Identity Awareness in this environment?
- Question #10
MultiCorp is running Smartcenter R71 on an IPSO platform and wants to upgrade to a new Appliance with R80. Which migration tool is recommended?
- Question #11
Check Point APIs allow system engineers and developers to make changes to their organization's security policy with CLI tools and Web Services for all of the following except?
- Question #12
Can you implement a complete IPv6 deployment without IPv4 addresses?
- Question #13
Paul has just joined the MegaCorp security administration team. Natalie, the administrator, creates a new administrator account for Paul in SmartDashboard and installs the policy....
- Question #14
MegaCorps' disaster recovery plan is past due for an update to the backup and restore section to enjoy the benefits of the new distributed R80 installation. You must propose a plan...
- Question #15
Where is it necessary to configure historical records in SmartView Monitor to generate Express reports in SmartReporter?
- Question #16
Your perimeter Security Gateway's external IP is 200.200.200.3. Your network diagram shows: Required: Allow only network 192.168.10.0 and 192.168.20.0 to go out to the Internet, us...
- Question #17
Where does the security administrator activate Identity Awareness within SmartDashboard?
- Question #18
After filtering a fw monitor trace by port and IP, a packet is displayed three times; in the i, I, and o inspection points, but not in the O inspection point. Which is the likely s...
- Question #19
Your main internal network 10.10.10.0/24 allows all traffic to the Internet using Hide NAT. You also have a small network 10.10.20.0/24 behind the internal router. You want to conf...
- Question #20
To qualify as an Identity Awareness enabled rule, which column MAY include an Access Role?
- Question #21
For best practices, what is the recommended time for automatic unlocking of locked admin accounts?
- Question #22
In the Rule Base displayed, user authentication in Rule 4 is configured as fully automatic. Eric is a member of the LDAP group, MSD_Group. What happens when Eric tries to connect t...
- Question #23
You have three servers located in a DMZ, using private IP addresses. You want internal users from 10.10.10.x to access the DMZ servers by public IP addresses. Internal_net 10.10.10...
- Question #24
You are responsible for the configuration of MegaCorp's Check Point Firewall. You need to allow two NAT rules to match a connection. Is it possible? Give the BEST answer.
- Question #25
What happens if the identity of a user is known?
- Question #26
MicroCorp experienced a security appliance failure. (LEDs of all NICs are off.) The age of the unit required that the RMA-unit be a different model. Will a revert to an existing sn...
- Question #27
Which is the lowest Gateway version manageable by SmartCenter R80?
- Question #28
What makes Anti-Bot unique compared to other Threat Prevention mechanisms, such as URL Filtering, Anti-Virus, IPS, and Threat Emulation?
- Question #29
How can you check whether IP forwarding is enabled on an IP Security Appliance?
- Question #30
Where can you find the Check Point's SNMP MIB file?
- Question #31
When deploying multiple clustered firewalls on the same subnet, what does the firewall administrator need to configure to prevent CCP broadcasts being sent to the wrong cluster?
- Question #32
Review the rules. Assume domain UDP is enabled in the impled rules. What happens when a user from the internal network tries to browse to the internet using HTTP? The user:
- Question #33
You want VPN traffic to match packets from internal interfaces. You also want the traffic to exit the Security Gateway bound for all site-to-site VPN Communities, including Remote...
- Question #34
Which command will only show the number of entries in the connection table?
- Question #35
Which command line interface utility allows the administrator to verify the Security Policy name and timestamp currently installed on a firewall module?
- Question #36
Your company's Security Policy forces users to authenticate to the Gateway explicitly, before they can use any services. The Gateway does not allow the Telnet service to itself fro...
- Question #37
What is Check Point's CoreXL?
- Question #38
Which Security Gateway R80 configuration setting forces the Client Authentication authorization time-out to refresh, each time a new user is authenticated? The:
- Question #39
Which command displays the installed Security Gateway version?
- Question #40
Complete this statement from the options provided. Using Captive Portal, unidentified users may be either; blocked, allowed to enter required credentials, or required to download t...
- Question #41
The CDT utility supports which of the following?
- Question #42
Which of these options is an implicit MEP option?
- Question #43
What command with appropriate switches would you use to test Identity Awareness connectivity?
- Question #44
Your internal network is configured to be 10.1.1.0/24. This network is behind your perimeter R80 Gateway, which connects to your ISP provider. How do you configure the Gateway to a...
- Question #45
You have a diskless appliance platform. How do you keep swap file wear to a minimum?
- Question #46
What is the syntax for uninstalling a package using newpkg?
- Question #47
Which Check Point address translation method is necessary if you want to connect from a host on the Internet via HTTP to a server with a reserved (RFC 1918) IP address on your DMZ?
- Question #48
What scenario indicates that SecureXL is enabled?
- Question #49
Which command allows you to view the contents of an R80 table?
- Question #50
Match the following commands to their correct function. Each command has one function only listed.