156-915.80 Exam Questions
482 real 156-915.80 exam questions with expert-verified answers and explanations. Page 3 of 10.
- Question #101
You want to implement Static Destination NAT in order to provide external, Internet users access to an internal Web Server that has a reserved (RFC 1918) IP address. You have an un...
- Question #102
Which web services protocol is used to communicate to the Check Point R80 identity Awareness Web APi?
- Question #103
When using AD Query to authenticate users for Identity Awareness, identity data is received seamlessly from the Microsoft Active Directory (AD). What is NOT a recommended usage of...
- Question #104
You have existing dbedit scripts from R77. Can you use them with R80.10?
- Question #105
Study the Rule base and Client Authentication Action properties screen - After being authenticated by the Security Gateway, when a user starts an HTTP connection to a Web site, the...
- Question #106
Because of pre-existing design constraints, you set up manual NAT rules for your HTTP server. However, your FTP server and SMTP server are both using automatic NAT rules. All traff...
- Question #107
Full synchronization between cluster members is handled by Firewall Kernel. Which port is used for this?
- Question #108
Which command will erase all CRL's?
- Question #109
Which of the following statements is TRUE about R80 management plug-ins?
- Question #110
SecureXL improves non-encrypted firewall traffic throughput and encrypted VPN traffic throughput.
- Question #111
What is the SOLR database for?
- Question #112
Which of the following items should be configured for the Security Management Server to authenticate using LDAP?
- Question #113
What command syntax would you use to see accounts the gateway suspects are service accounts?
- Question #114
Peter is your new Security Administrator. On his first working day, he is very nervous and enters the wrong password three times. His account is locked. What can be done to unlock...
- Question #115
What command syntax would you use to turn on PDP logging in a distributed environment?
- Question #116
VPN Tunnel Sharing can be configured with any of the options below, EXCEPT One:
- Question #117
What is the problem and how do you make the VPN use the VTI tunnels?
- Question #118
Your company has the requirement that SmartEvent reports should show a detailed and accurate view of network activity but also performance should be guaranteed. Which actions shoul...
- Question #119
Your expanding network currently includes ClusterXL running Multicast mode on two members, as shown in this topology: You need to add interfaces: 10.10.10.1/24 on Member A, and 10....
- Question #120
Which three of the following are ClusterXL member requirements? 1) same operating systems 2) same Check Point version 3) same appliance model 4) same policy
- Question #121
GAiA greatly increases operational efficiency by offering an advanced and intuitive software update agent, commonly referred to as the:
- Question #122
Security Gateway R80 supports User Authentication for which of the following services? Select the response below that contains the MOST correct list of supported services.
- Question #123
Which of the following authentication methods can be configured in the Identity Awareness setup wizard?
- Question #124
MegaCorp is running Smartcenter R70, some Gateways at R65 and some other Gateways with R60. Management wants to upgrade to the most comprehensive IPv6 support. What should the admi...
- Question #125
Which of the following commands can provide the most complete restoration of a R80 configuration?
- Question #126
Assume you are a Security Administrator for ABCTech. You have allowed authenticated access to users from Mkting_net to Finance_net. But in the user's properties, connections are on...
- Question #127
Many companies have defined more than one administrator. To increase security, only one administrator should be able to install a Rule Base on a specific Firewall. How do you confi...
- Question #128
If your firewall is performing a lot of IPS inspection and the CPUs assigned to fw_worker_thread are at or near 100%, which of the following could you do to improve performance?
- Question #129
You run cphaprob -a if. When you review the output, you find the word DOWN. What does DOWN mean?
- Question #130
Which is not a blade option when configuring SmartEvent?
- Question #131
You are running a R80 Security Gateway on GAiA. In case of a hardware failure, you have a server with the exact same hardware and firewall version installed. What back up method co...
- Question #132
You want to generate a cpinfo file via CLI on a system running GAiA. This will take about 40 minutes since the log files are also needed. What action do you need to take regarding...
- Question #133
Why would you not see a CoreXL configuration option in cpconfig?
- Question #134
What happen when IPS profile is set in Detect-Only Mode for troubleshooting?
- Question #135
You find that Gateway fw2 can NOT be added to the cluster object. What are possible reasons for that?
- Question #136
You are troubleshooting a HTTP connection problem. You've started fw monitor -o http.pcap. When you open http.pcap with Wireshark there is only one line. What is the most likely re...
- Question #137
After implementing Static Address Translation to allow Internet traffic to an internal Web Server on your DMZ, you notice that any NATed connections to that machine are being dropp...
- Question #138
You are the Security Administrator for MegaCorp. A Check Point firewall is installed and in use on a platform using GAiA. You have trouble configuring the speed and duplex settings...
- Question #139
Which process should you debug if SmartDashboard login fails?
- Question #140
What are you required to do before running the command upgrade_export?
- Question #141
When migrating the SmartEvent data base from one server to another, the first step is to back up the files on the original server. Which of the following commands should you run to...
- Question #142
Which features are only supported with R80.10 Gateways but not R77.x?
- Question #143
Review the Rule Base displayed. For which rules will the connection templates be generated in SecureXL?
- Question #144
How granular may an administrator filter an Access Role with identity awareness? Per:
- Question #145
Which operating systems are supported by a Check Point Security Gateway on an open server? Select MOST complete list.
- Question #146
Which two processes are responsible on handling Identity Awareness?
- Question #147
Which of the following allows administrators to allow or deny traffic to or from a specific network based on the user's credentials?
- Question #148
Which of the following is NOT defined by an Access Role object?
- Question #149
You want to store the GAiA configuration in a file for later reference. What command should you use?
- Question #150
When do modifications to the Event Policy take effect?