156-915.80 Exam Questions

The concept of layers was introduced in R80. What is the biggest benefit of layers?

What Factors preclude Secure XL Templating?

Automation and Orchestration differ in that:

You have a Gateway is running with 2 cores. You plan to add a second gateway to build a cluster and used a device with 4 cores. How many cores can be used in a Cluster for Firewall...

If an administrator wants to add manual NAT for addresses not owned by the Check Point firewall, what else is necessary to be completed for it to function properly?

Which of the following commands shows the status of processes?

The Regulatory Compliance pane shows compliance statistics for selected regulatory standards, based on the Security Best Practice scan. Which of the following does NOT show in this...

In Threat Prevention, you can create new or clone profiles but you CANNOT change the out-of- the- box profiles of:

Advanced Security Checkups can be easily conducted within:

The Firewall Administrator is required to create 100 new host objects with different IP addresses. What API command can he use in the script to achieve the requirement?

Which Check Point ClusterXL mode is used to synchronize the physical interface IP and MAC addresses on all clustered interfaces?

Return oriented programming (ROP) exploits are detected by which security blade?

What is the protocol and port used for Health Check and State Synchronization in ClusterXL?

If the first packet of an UDP session is rejected by a security policy, what does the firewall send to the client?

What has to be taken into consideration when configuring Management HA?

You plan to automate creating new objects using new R80 Management API. You decide to use GAIA CLI for this task. What is the first step to run management API commands on GAIA's sh...

Which is NOT a SmartEvent component?

To ensure that VMAC mode is enabled, which CLI command you should run on all cluster members?

Which method below is NOT one of the ways to communicate using the Management API's?

Due to high CPU workload on the Security Gateway, the security administrator decided to purchase a new multicore CPU to replace the existing single core CPU. After installation, is...

When an encrypted packet is decrypted, where does this happen?

Jack has finished building his new SMS server, Red, on new hardware. He used SCP to move over the Redold.tgz export of his old SMS server. What is the command he will use to import...

What are the methods of SandBlast Threat Emulation deployment?

What is the difference between an event and a log?

SandBlast agent extends 0 day prevention to what part of the network?

In a Client to Server scenario, which represents that the packet has already been checked against the tables and the Rule Base?

When using Monitored circuit VRRP, what is a priority delta?

Which of the following is NOT an option to calculate the traffic direction?

During inspection of your Threat Prevention logs you find four different computers having one event each with a Critical Severity. Which of those hosts should you try to remediate...

What command lists all interfaces using Multi-Queue?

From SecureXL perspective, what are the tree paths of traffic flow:

Joey and Vanessa are firewall administrators in their company. Joey wants to run Management API server on his Security Management server. He is logging in to a Smart Console and go...

The system administrator of a company is trying to find out why acceleration is not working for the traffic. The traffic is allowed according to the rule base and checked for virus...

Select the right answer to export IPS profiles to copy to another management server?

SandBlast has several functional components that work together to ensure that attacks are prevented in realtime. Which the following is NOT part of the SandBlast component?

You want to gather data and analyze threats to your mobile device. It has to be a lightweight app. Which application would you use?

After making modifications to the $CVPNDIR/conf/cvpnd.C file, how would you restart the daemon?

In the Check Point Firewall Kernel Module, each Kernel is associated with a key, which specifies the type of traffic applicable to the chain module. For Stateful Mode configuration...

Joey is preparing a plan for Security management upgrade. He wants to upgrade management to R80.x. What is the lowest supported version of the Security Management he can upgrade fr...

CPM process stores objects, policies, users, administrators, licenses and management data in a database. This database is:

In what way in Secure Network Distributor (SND) a relevant feature of the Security Gateway?

There are 4 ways to use the Management API for creating host object with R80 Management API. Which one is NOT correct?

By default, the R80 web API uses which content-type in its response?

What information is NOT collected from a Security Gateway in a Cpinfo?

What is the command to check the status of the SmartEvent Correlation Unit?

R80.10 management server can manage gateways with which versions installed?

Which statement is most correct regarding about "CorrectXL Dynamic Dispatcher"?

Fred is troubleshooting a NAT issue and wants to check to see if the inbound connection from his internal network is being translated across the interface in the firewall correctly...

Which process is available on any management product and on products that require direct GUI access, such as SmartEvent and provides GUI client communications, database manipulatio...

UserCheck objects in the Application Control and URL Filtering rules allow the gateway to communicate with the users. Which action is not supported in UserCheck objects?