Check Point 156-915.80 Free Practice Questions 2021

NEW QUESTION 1
What happens if the identity of a user is known?

• A. If the user credentials do not match an Access Role, the traffic is automatically dropped.
• B. If the user credentials do not match an Access Role, the system displays a sandbox.
• C. If the user credentials do not match an Access Role, the gateway moves onto the next rule.
• D. If the user credentials do not match an Access Role, the system displays the Captive Portal.

Answer: C

NEW QUESTION 2
Your organization maintains several IKE VPN’s. Executives in your organization want to know which mechanism Security Gateway R80 uses to guarantee the authenticity and integrity of messages. Which technology should you explain to the executives?

• A. Certificate Revocation Lists
• B. Application Intelligence
• C. Key-exchange protocols
• D. Digital signatures

Answer: D

NEW QUESTION 3
What is the SandBlast Agent designed to do?

• A. Performs OS-level sandboxing for SandBlast Cloud architecture
• B. Ensure the Check Point SandBlast services is running on the end user’s system
• C. If malware enters an end user’s system, the SandBlast Agent prevents the malware form spreading with the network
• D. Clean up email sent with malicious attachments.

Answer: C

NEW QUESTION 4
Which features are only supported with R80.10 Gateways but not R77.x?

• A. Access Control policy unifies the Firewall, Application Control & URL Filtering, Data Awareness, and Mobile Access Software Blade policies.
• B. Limits the upload and download throughput for streaming media in the company to 1 Gbps.
• C. The rule base can be built of layers, each containing a set of the security rule
• D. Layers are inspected in the order in which they are defined, allowing control over the rule base flow and which security functionalities take precedence.
• E. Time object to a rule to make the rule active only during specified times.

Answer: C

NEW QUESTION 5
Fill in the blank. To save your OSPF configuration in GAiA, enter the command .

Answer:

Explanation: save config

NEW QUESTION 6
Which of these options is an implicit MEP option?

• A. Primary-backup
• B. Source address based
• C. Round robin
• D. Load Sharing

Answer: A

Explanation: There are three methods to implement implicit MEP: References:

NEW QUESTION 7
Vanessa is expecting a very important Security Report. The Document should be sent as an attachment via
e-m ail. An e-mail with Security_ report.pdf file was delivered to her e-mail inbox. When she opened the PDF file, she noticed that the file is basically empty and only few lines of text are in it. The report is missing some graphs, tables and links. Which component of SandBlast protection is her company using on a Gateway?

• A. SandBlast Threat Emulation
• B. SandBlast Agent
• C. Check Point Protect
• D. SandBlast Threat Extraction

Answer: D

NEW QUESTION 8
When simulating a problem on CLusterXL cluster with cphaprob –d STOP –s problem –t 0 register, to initiate a failover on an active cluster member, what command allows you remove the problematic state?

• A. cphaprob –d STOP unregister
• B. cphaprob STOP unregister
• C. cphaprob unregister STOP
• D. cphaprob –d unregister STOP

Answer: A

Explanation: esting a failover in a controlled manner using following command;
# cphaprob -d STOP -s problem -t 0 register
This will register a problem state on the cluster member this was entered on;If you then run;
# cphaprob list
this will show an entry named STOP.
to remove this problematic register run following;
# cphaprob -d STOP unregister References:

NEW QUESTION 9
GAiA Software update packages can be imported and installed offline in situation where:

• A. Security Gateway with GAiA does NOT have SFTP access to Internet
• B. Security Gateway with GAiA does NOT have access to Internet.
• C. Security Gateway with GAiA does NOT have SSH access to internet.
• D. The desired CPUSE package is ONLY available in the Check Point CLOUD.

Answer: B

NEW QUESTION 10
Which command will reset the kernel debug options to default settings?

• A. fw ctl dbg –a 0
• B. fw ctl dbg resetall
• C. fw ctl debug 0
• D. fw ctl debug set 0

Answer: C

Explanation: Reset the debugs to the default.
In case someone changed the setting in the past and since then the firewall was not rebooted we should set all back to the defaults.
# fw ctl debug 0Defaulting all kernel debugging options

NEW QUESTION 11
MegaCorp is using SmartCenter Server with several gateways. Their requirements result in a heavy log load. Would it be feasible to add the SmartEvent Correlation Unit and SmartEvent Server to their SmartCenter Server?

• A. N
• B. SmartCenter SIC will interfere with the function of SmartEvent.
• C. N
• D. If SmartCenter is already under stress, the use of a separate server for SmartEvent is recommended.
• E. No, SmartEvent and Smartcenter cannot be installed on the same machine at the same time.
• F. Ye
• G. SmartEvent must be installed on your SmartCenter Server.

Answer: B

NEW QUESTION 12
When restoring R80 using the command upgrade_import, which of the following items are NOT restored?

• A. SIC Certificates
• B. Licenses
• C. Route tables
• D. Global properties

Answer: C

NEW QUESTION 13
Many companies have defined more than one administrator. To increase security, only one administrator should be able to install a Rule Base on a specific Firewall. How do you configure this?

• A. Define a permission profile in SmartDashboard with read/write privileges, but restrict it to all other firewalls by placing them in the Policy Targets fiel
• B. Then, an administrator with this permission profile cannot install a policy on any Firewall not listed here.
• C. Put the one administrator in an Administrator group and configure this group in the specific Firewall object in Advanced > Permission to Install.
• D. In the object General Properties representing the specific Firewall, go to the Software Blades product list and select Firewal
• E. Right-click in the menu, select Administrator to Install to define only this administrator.
• F. Right-click on the object representing the specific administrator, and select that Firewall in Policy Targets.

Answer: B

NEW QUESTION 14
When using AD Query to authenticate users for Identity Awareness, identity data is received seamlessly from the Microsoft Active Directory (AD). What is NOT a recommended usage of this method?

• A. Leveraging identity in the application control blade
• B. Basic identity enforcement in the internal network
• C. Identity-based auditing and logging
• D. Identity-based enforcement for non-AD users (non-Windows and guest users)

Answer: D

NEW QUESTION 15
Your main internal network 10.10.10.0/24 allows all traffic to the Internet using Hide NAT. You also have a small network 10.10.20.0/24 behind the internal router. You want to configure the kernel to translate the source address only when network 10.10.20.0 tries to access the Internet for HTTP, SMTP, and FTP services. Which of the following configurations will allow this network to access the Internet?

• A. Configure three Manual Static NAT rules for network 10.10.20.0/24, one for each service.
• B. Configure Automatic Static NAT on network 10.10.20.0/24.
• C. Configure one Manual Hide NAT rule for HTTP, FTP, and SMTP services for network 10.10.20.0/24.
• D. Configure Automatic Hide NAT on network 10.10.20.0/24 and then edit the Service column in the NAT Rule Base on the automatic rule.

Answer: C

NEW QUESTION 16
Assume you are a Security Administrator for ABCTech. You have allowed authenticated access to users from Mkting_net to Finance_net. But in the user’s properties, connections are only permitted within Mkting_net. What is the BEST way to resolve this conflict?

• A. Select Ignore Database in the Action Properties window.
• B. Permit access to Finance_net.
• C. Select Intersect with user database in the Action Properties window.
• D. Select Intersect with user database or Ignore Database in the Action Properties window.

Answer: D

NEW QUESTION 17
In a zero downtime scenario, which command do you run manually after all cluster members are upgraded? Answer:
cphaconf set_ccp multicast

Answer:

NEW QUESTION 18
Which command will erase all CRL’s?

• A. vpn crladmin
• B. cpstop/cpstart
• C. vpn crl_zap
• D. vpn flush

Answer: C

NEW QUESTION 19
What API command below creates a new host with the name “New Host” and IP address of “192.168.0.10”?

• A. new host name “New Host” ip-address “192.168.0.10”
• B. set host name “New Host” ip-address “192.168.0.10”
• C. create host name “New Host” ip-address “192.168.0.10”
• D. add host name “New Host” ip-address “192.168.0.10”

Answer: D

Explanation: Sample Command with SmartConsole CLI You can use the add host command to create a new host and then publish the changes. > add host name "Sample_Host" ip-address "192.0.2.3" > publish
References: