156-915.80 Exam Questions

Which command would provide the most comprehensive diagnostic information to Check Point Technical Support?

Which of the following are authentication methods that Security Gateway R80 uses to validate connection attempts? Select the response below that includes the MOST complete list of...

Which Check Point tool allows you to open a debug file and see the VPN packet exchange details.

Which CLI tool helps on verifying proper ClusterXL sync?

Which of the following items should be configured for the Security Management Server to authenticate via LDAP?

You intend to upgrade a Check Point Gateway from R71 to R80. Prior to upgrading, you want to back up the Gateway should there be any problems with the upgrade. Which of the followi...

What is the command to show SecureXL status?

In the following cluster configuration; if you reboot sglondon_1 which device will be active when sglondon_1 is back up and running? Why?

Which of the following CLISH commands would you use to set the admin user's shell to bash?

The connection to the ClusterXL member `A' breaks. The ClusterXL member `A' status is now `down'. Afterwards the switch admin set a port to ClusterXL member `B' to `down'. What wil...

You enable Hide NAT on the network object, 10.1.1.0 behind the Security Gateway's external interface. You browse to the Google Website from host, 10.1.1.10 successfully. You enable...

John Adams is an HR partner in the ACME organization. ACME IT wants to limit access to HR servers to designated IP addresses to minimize malware infection and unauthorized access r...

Users with Identity Awareness Agent installed on their machines login with __________, so that when the user logs into the domain, that information is also used to meet Identity Aw...

You cannot use SmartDashboard's User Directory features to connect to the LDAP server. What should you investigate? 1) Verify you have read-only permissions as administrator for th...

Which of the following tools is used to generate a Security Gateway R80 configuration report?

Looking at the SYN packets in the Wireshark output, select the statement that is true about NAT.

Which of the following options is available with the GAiA cpconfig utility on a Management Server?

To qualify as an Identity Awareness enabled rule, which column MAY include an Access Role?

John Adams is an HR partner in the ACME organization. ACME IT wants to limit access to HR servers to designated IP addresses to minimize malware infection and unauthorized access r...

The third-shift Administrator was updating Security Management Server access settings in Global Properties. He managed to lock all administrators out of their accounts. How should...

You have installed a R77 Security Gateway on GAiA. To manage the Gateway from the enterprise Security Management Server, you create a new Gateway object and Security Policy. When y...

Which of the following describes the default behavior of an R77 Security Gateway?

When you use the Global Properties' default settings on R77, which type of traffic will be dropped if NO explicit rule allows the traffic?

What is the supported ClusterXL configuration when configuring a cluster synchronization network on a VLAN interface?

Which SmartConsole component can Administrators use to track changes to the Rule Base?

UDP packets are delivered if they are ___________.

When, during policy installation, does the atomic load task run?

What process is responsible for transferring the policy file from Smart Center to the Gateway?

What firewall kernel table stores information about port allocations for Hide NAT connections?

Where do you define NAT properties so that NAT is performed either client side or server side?

The process ___________ is responsible for all other security server processes run on the Gateway.

The process ________ is responsible for GUI Client communication with the Smart Center.

Which is the correct order of a log flow processed by SmartEvents components:

In SmartEvent, what are the different types of automatic reactions that the administrator can configure?

Which components allow you to reset a VPN tunnel?

When synchronizing clusters, which of the following statements is FALSE?

Which of the following is a new R80.10 Gateway feature that had not been available in R77.X and older?

In R80.10, how do you manage your Mobile Access Policy?

You find one of your cluster gateways showing "Down" when you run the "cphaprob stat" command. You then run the "clusterXL_admin up" on the down member but unfortunately the member...

SandBlast offers flexibility in implementation based on their individual business needs. What is an option for deployment of Check Point SandBlast Zero-Day Protection?

Which of the following is NOT a valid way to view interface's IP address settings in Gaia?

Check Point recommends configuring Disk Space Management parameters to delete old log entities when available disk space is less than or equal to?

What API command below creates a new host with the name "New Host" and IP address of "192.168.0.10"?

What are types of Check Point APIs available currently as part of R80.10 code?

Which of the following is NOT an internal/native Check Point command?

What is the SandBlast Agent designed to do?

The SmartEvent R80 Web application for real-time event monitoring is called:

What Shell is required in Gaia to use WinSCP?

Which one of the following is true about Threat Emulation?

What are the minimum open server hardware requirements for a Security Management Server/Standalone in R80.10?