2021 Easily pass 156-915.80 Exam with our Dumps & PDF Test Engine
156-915.80 PDF Pass Leader, 156-915.80 Latest Real Test
The benefit in Obtaining the 156-915.80 Exam Certification
- Score CP job opportunities
- Gain employer recognition for promotions and raises
- Capture the attention of recruiters
- This 156-215.80 exam covers a different technology to meet the needs of varying job roles
NEW QUESTION 174
Which of the following allows administrators to allow or deny traffic to or from a specific network based on the user's credentials?
- A. Access Rule
- B. Access Policy
- C. Access Role
- D. Access Certificate
Answer: C
NEW QUESTION 175
What does the command vpn crl_zap do?
- A. Erases all CRL's from the gateway cache
- B. Nothing, it is not a valid command
- C. Erases CRL's from the management server cache
- D. Erases VPN certificates from cache
Answer: A
Explanation:
Reference: https://sc1.checkpoint.com/documents/R76/CP_R76_Gaia_WebAdmin/12467.htm#o12618
NEW QUESTION 176
You want to store the GAiA configuration in a file for later reference. What command should you use?
- A. save config -o <filename>
- B. show config -f <filename>
- C. write mem <filename>
- D. save configuration <filename>
Answer: D
NEW QUESTION 177
After making modifications to the $CVPNDIR/conf/cvpnd.C file, how would you restart the daemon?
- A. cvpnrestart
- B. cvpnd_restart
- C. cvpnd restart
- D. cvpnd_restart
Answer: A
NEW QUESTION 178
Which of the following is NOT an attribute of packet acceleration?
- A. Source address
- B. Protocol
- C. Application Awareness
- D. Destination port
Answer: C
Explanation:
Reference: https://sc1.checkpoint.com/documents/R76/CP_R76_Firewall_WebAdmin/92711.htm
NEW QUESTION 179
In a Client to Server scenario, which represents that the packet has already been checked against the tables and the Rule Base?
- A. Little o
- B. Little i
- C. Big O
- D. Big I
Answer: C
NEW QUESTION 180
Suppose the Security Gateway hard drive fails and you are forced to rebuild it. You have a snapshot file stored to a TFTP server and backups of your Security Management Server. What is the correct procedure for rebuilding the Gateway quickly?
- A. Reinstall the base operating system (i.e., GAia). Configure the Gateway interface so that the Gateway can communicate with the TFTP server. Reinstall any necessary Check Point products and previously applied hotfixes. Revert to the stored snapshot image, and install the Policy.
- B. Run the command revert to restore the snapshot. Reinstall any necessary Check Point products. Establish SIC and install the Policy.
- C. Run the command revert to restore the snapshot, establish SIC, and install the Policy.
- D. Reinstall the base operating system (i.e., GAiA). Configure the Gateway interface so that the Gateway can communicate with the TFTP server. Revert to the stored snapshot image, and install the Security Policy.
Answer: D
NEW QUESTION 181
CPD is a core Check Point process that does all of the following EXCEPT:
- A. Policy installation
- B. SIC (Secure Internal Communication) functions
- C. AMON status pull from the Gateway
- D. Management High Availability (HA) sync
Answer: D
Explanation:
Reference:
https://downloads.checkpoint.com/fileserver/SOURCE/direct/ID/11880/FILE/How-To-Troubleshoot- SIC-related-Issues.pdf
NEW QUESTION 182
Complete this statement. To save interface information before upgrading a Windows Gateway, use command: _______ ?
Answer:
Explanation:
ipconfig -a > [filename].txt
NEW QUESTION 183
Which is a suitable command to check whether Drop Templates are activated or not?
- A. fw ctl templates -d
- B. fwaccel stat
- C. fw ctl get int activate _drop_ templates
- D. fwaccel stats
Answer: B
NEW QUESTION 184
Fill in the blank.
In Load Sharing Unicast mode, the internal cluster IP address is 10.4.8.3. The internal interfaces on two members are 10.4.8.1 and 10.4.8.2. Internal host 10.4.8.108 Pings 10.4.8.3, and receives replies. The following is the ARP table from the internal Windows host 10.4.8.108. Review the exhibit and type the IP address of the member serving as the pivot machine in the space below.
Answer:
Explanation:
10.4.8.2
NEW QUESTION 185
CORRECT TEXT
Fill in the blanks. To view the number of concurrent connections going through core 0 on the firewall, you would use the command and syntax __ __ _ ___ __ ___________ __ .
Answer:
Explanation:
fw -i 0 tab -t connections -s
NEW QUESTION 186
CORRECT TEXT
To stop acceleration on a GAiA Security Gateway, enter command:
Answer:
Explanation:
fwaccel off
NEW QUESTION 187
Which one of the following is true about Threat Extraction?
- A. Works on all MS Office, Executables, and PDF files
- B. Can take up to 3 minutes to complete
- C. Delivers file only if no threats found
- D. Always delivers a file to user
Answer: C
NEW QUESTION 188
You want to store the GAiA configuration in a file for later reference. What command should you use?
- A. save config -o <filename>
- B. show config -f <filename>
- C. write mem <filename>
- D. save configuration <filename>
Answer: D
Explanation:
Section: (none)
Explanation/Reference:
Reference: https://supportcenter.checkpoint.com/supportcenter/portal?
eventSubmit_doGoviewsolutiondetails=&solutionid=sk102234
NEW QUESTION 189
You cannot use SmartDashboard's User Directory features to connect to the LDAP server.
What should you investigate?
1 ) Verify you have read-only permissions as administrator for the operating system.
2 ) Verify there are no restrictions blocking SmartDashboard's User Manager from connecting to the LDAP server.
3) Check that the login Distinguished Name configured has root permission (or at least write permission Administrative access) in the LDAP Server's access control configuration.
- A. 1 and 2
- B. 1, 2, and 3
- C. 1 and 3
- D. 2 and 3
Answer: D
NEW QUESTION 190
What is the valid range for VRID value in VRRP configuration?
- A. 0 - 255
- B. 0 - 254
- C. 1 - 255
- D. 1 - 254
Answer: C
Explanation:
Explanation
Virtual Router ID - Enter a unique ID number for this virtual router. The range of valid values is 1 to 255.
References:
NEW QUESTION 191
Full synchronization between cluster members is handled by Firewall Kernel. Which port is used for this?
- A. TCP port 256
- B. UDP port 265
- C. UDP port 256
- D. TCP port 265
Answer: A
Explanation:
Section: (none)
Explanation/Reference:
Explanation:
Synchronization works in two modes:
Full Sync transfers all Security Gateway kernel table information from one cluster member to another. It
is handled by the fwd daemon using an encrypted TCP connection on port 256.
Delta Sync transfers changes in the kernel tables between cluster members. Delta sync is handled by
the Security Gateway kernel using UDP connections on port 8116.
Reference: https://sc1.checkpoint.com/documents/R80.10/WebAdminGuides/EN/ CP_R80.10_ClusterXL_AdminGuide/html_frameset.htm?topic=documents/R80.10/WebAdminGuides/EN/ CP_R80.10_ClusterXL_AdminGuide/7288
NEW QUESTION 192
What can you do to see the current number of kernel instances in a system with CoreXL enabled?
- A. Execute command cpconfig
- B. Browse to Secure Platform Web GUI
- C. Only Check Point support personnel can access that information
- D. Execute SmarDashboard client
Answer: A
Explanation:
Reference:
https://sc1.checkpoint.com/documents/R76/CP_R76_PerformanceTuning_WebAdmin/6731
.htm
NEW QUESTION 193
......
156-915.80 Dumps Ensure Your Passing: https://www.exam4pdf.com/156-915.80-dumps-torrent.html
