CheckPoint 156-915.80 Exam Questions (Updated 2021) 100% Real Question Answers
Pass CheckPoint 156-915.80 Exam Quickly With DumpsActual
For more info visit:
Who should take the 156-915.80 exam
The Check Point Certified Security Expert certification is an internationally-recognized validation that identifies persons who earn it as possessing skilled in System Security Consultant and Server Managers. If a candidate wants significant improvement in career growth needs enhanced knowledge, skills, and talents. The Check Point Certified Security Expert Update - R80 (CCSE) 156-915.80 Exam certification provides proof of this advanced knowledge and skill. If a person has the prerequisite CCSE certification and skills required of a Check Point Certified Security Expert Update - R80 (CCSE) 156-915.80 Exam then he should take this exam.
NEW QUESTION 150
Fill in the blank: The R80 feature ________ permits blocking specific IP addresses for a specified time period.
- A. Suspicious Activity Monitoring
- B. Local Interface Spoofing
- C. Adaptive Threat Prevention
- D. Block Port Overflow
Answer: A
NEW QUESTION 151
Which is not a blade option when configuring SmartEvent?
- A. SmartEvent Server
- B. Correlation Unit
- C. Log Server
- D. SmartEvent Unit
Answer: D
Explanation:
On the Management tab, enable these Software Blades:
Logging & Status
SmartEvent Server
SmartEvent Correlation Unit
NEW QUESTION 152
What is the SandBlast Agent designed to do?
- A. If malware enters an end user's system, the SandBlast Agent prevents the malware form spreading with the network
- B. Ensure the Check Point SandBlast services is running on the end user's system
- C. Clean up email sent with malicious attachments.
- D. Performs OS-level sandboxing for SandBlast Cloud architecture
Answer: A
NEW QUESTION 153
Fill in the blank: The command _______________ provides the most complete restoration of a R80 configuration.
- A. fwn dbimport -p <export file>
- B. upgrade_import
- C. cpinfo -recover
- D. cpconfig
Answer: B
NEW QUESTION 154
What command would show the API server status?
- A. api status
- B. cpm status
- C. show api status
- D. api restart
Answer: A
Explanation:
Explanation/Reference:
Reference: https://www.hurricanelabs.com/blog/check-point-api-merging-management-servers-with-r80-10
NEW QUESTION 155
CORRECT TEXT
Write the full fw command and syntax that you would use to troubleshoot ClusterXL sync issues.
Answer:
Explanation:
fw tab -s -t connections
NEW QUESTION 156
Paul has just joined the MegaCorp security administration team. Natalie, the administrator, creates a new administrator account for Paul in SmartDashboard and installs the policy.
When Paul tries to login it fails. How can Natalie verify whether Paul's IP address is predefined on the security management server?
- A. Login in to Smart Dashboard, access Global Properties, and select Security Management, to verify whether Paul's IP address is listed.
- B. Access the WEBUI on the Security Gateway, and verify whether Paul's IP address is listed as a GUI client.
- C. Type cpconfig on the Management Server and select the option "GUI client List" to see if Paul's IP address is listed.
- D. Login to Smart Dashboard, access Properties of the SMS, and verify whether Paul's IP address is listed.
Answer: C
NEW QUESTION 157
Looking at the SYN packets in the Wireshark output, select the statement that is true about NAT.
- A. This is an example of Hide NAT.
- B. This is an example of Static NAT and Translate destination on client side unchecked in Global Properties.
- C. This is an example of Static NAT and Translate destination on client side checked in Global Properties.
- D. There is not enough information provided in the Wireshark capture to determine the NAT settings.
Answer: C
NEW QUESTION 158
Because of pre-existing design constraints, you set up manual NAT rules for your HTTP server. However, your FTP server and SMTP server are both using automatic NAT rules.
All traffic from your FTP and SMTP servers are passing through the Security Gateway without a problem, but traffic from the Web server is dropped on rule 0 because of anti- spoofing settings. What is causing this?
- A. Allow bi-directional NAT is not checked in Global Properties.
- B. Manual NAT rules are not configured correctly.
- C. Translate destination on client side is not checked in Global Properties under Manual NAT Rules.
- D. Routing is not configured correctly.
Answer: C
NEW QUESTION 159
In the Check Point Firewall Kernel Module, each Kernel is associated with a key, which specifies the type of traffic applicable to the chain module. For Stateful Mode configuration, chain modules marked with ___________ will not apply.
- A. ffff
- B. 0
- C. 1
- D. 2
Answer: C
NEW QUESTION 160
Events can be categorized and assigned to System Administrators to track their path through the workflow.
Which of the following is NOT an option?
- A. False Positive
- B. Under Investigation
- C. Pending Investigation
- D. Open
Answer: D
NEW QUESTION 161
You need to change the number of firewall instances used by CoreXL. How can you achieve this goal?
- A. edit fwaffinity.conf; reboot not required
- B. cpconfig; reboot required
- C. cpconfig: reboot not required
- D. edit fwaffinity.conf; reboot required
Answer: B
Explanation:
Explanation/Reference:
Reference: https://sc1.checkpoint.com/documents/R76/
CP_R76_PerformanceTuning_WebAdmin/6731.htm#o94530
NEW QUESTION 162
To bind a NIC to a single processor when using CoreXL on GAiA, you would use the command
Answer:
Explanation:
sim affinity
NEW QUESTION 163
Which of the SecureXL templates are enabled by default on Security Gateway?
- A. NAT
- B. None
- C. Accept
- D. Drop
Answer: C
NEW QUESTION 164
SandBlast agent extends 0 day prevention to what part of the network?
- A. Email servers
- B. Cloud
- C. Web Browsers and user devices
- D. DMZ server
Answer: C
NEW QUESTION 165
CORRECT TEXT
In a zero downtime scenario, which command do you run manually after all cluster members are upgraded?
Answer:
Explanation:
cphaconf
set_ccp multicast
NEW QUESTION 166
Your expanding network currently includes ClusterXL running Multicast mode on two members, as shown in this topology:
Exhibit:
You need to add interfaces: 10.10.10.1/24 on Member A, and 10.10.10.2/24 on Member B.
The virtual IP address for these interfaces is 10.10.10.3/24. Both cluster gateways have a Quad card with an available eth3 interface. What is the correct procedure to add these interfaces?
- A. 1. Disable "Cluster membership" from one Gateway via cpconfig.2. Configure the new interface via sysconfig from the "non-member" Gateway.3. Re-enable "Cluster membership" on the Gateway.4. Perform the same steps on the other Gateway.5. Update the topology in the cluster object.6. Install the Security Policy.
- B. 1. Use the command ifconfig to configure and enable the new interface on both members.2. Update the topology in the cluster object for the cluster and both members.3. Install the Security Policy.4. Reboot the gateway.
- C. 1. Use WebUI to configure the new interfaces on both member.2. Update the topology in the cluster object.3. Reboot both gateways.4. Install the Security Policy.
- D. 1. Configure the new interface on both members using WebUI.2. Update the new topology in the cluster object from SmartDashboard.3. Define virtual IP in the Dashboard4. Install the Security Policy.
Answer: D
NEW QUESTION 167
To verify that a VPN Tunnel is properly established, use the command _________
Answer:
Explanation:
vpn tunnelutil
NEW QUESTION 168
Which statement is most correct regarding about "CorrectXL Dynamic Dispatcher"?
- A. The CoreXL FW instances assignment mechanism is based on Source IP addresses, Destination IP addresses, and the IP 'Protocol' type.
- B. The CoreXL FW instances assignment mechanism is based on the utilization of CPU cores.
- C. The CoreXL FW instances assignment mechanism is based on Source MAC addresses, Destination MAC addresses.
- D. The CoreXL FW instances assignment mechanism is based on IP Protocol type.
Answer: B
Explanation:
Explanation/Reference:
Reference: https://supportcenter.checkpoint.com/supportcenter/portal?
eventSubmit_doGoviewsolutiondetails=&solutionid=sk105261
NEW QUESTION 169
What is the least ideal Synchronization Status for Security Management Server High Availability deployment?
- A. Never been synchronized
- B. Synchronized
- C. Collision
- D. Lagging
Answer: D
Explanation:
The possible synchronization statuses are:
* Never been synchronized - immediately after the Secondary Security Management server has been installed, it has not yet undergone the first manual synchronization that brings it up to date with the Primary Security Management server.
* Synchronized - the peer is properly synchronized and has the same database information and installed Security Policy.
* Lagging - the peer SMS has not been synchronized properly.
For instance, on account of the fact that the Active SMS has undergone changes since the previous synchronization (objects have been edited, or the Security Policy has been newly installed), the information on the Standby SMS is lagging.
* Advanced - the peer SMS is more up-to-date.
For instance, in the above figure, if a system administrators logs into Security Management server B before it has been synchronized with the Security Management server A, the status of the Security Management server A is Advanced, since it contains more up-to-date information which the former does not have.
In this case, manual synchronization must be initiated by the system administrator by changing the Active SMS to a Standby SMS. Perform a synch me operation from the more advanced server to the Standby SMS.
Change the Standby SMS to the Active SMS.
* Collision - the Active SMS and its peer have different installed policies and databases. The administrator must perform manual synchronization and decide which of the SMSs to overwrite.
Reference: https://sc1.checkpoint.com/documents/R76/CP_R76_SecMan_WebAdmin/html_frameset.htm?
topic=documents/R76/CP_R76_SecMan_WebAdmin/13132
NEW QUESTION 170
How many interfaces can you configure to use the Multi-Queue feature?
- A. 4 interfaces
- B. 10 interfaces
- C. 3 interfaces
- D. 5 interfaces
Answer: D
Explanation:
References:
https://community.checkpoint.com/t5/Enterprise-Appliances-and-Gaia/R80-x-Performance-Tuning-Tip-Multi-Queue/td-p/41608
NEW QUESTION 171
After implementing Static Address Translation to allow Internet traffic to an internal Web Server on your DMZ, you notice that any NATed connections to that machine are being dropped by anti-spoofing protections. Which of the following is the MOST LIKELY cause?
- A. The Global Properties setting Translate destination on client side is unchecked. But the topology on the external interface is set to Others +. Change topology to External.
- B. The Global Properties setting Translate destination on client side is checked. But the topology on the external interface is set to External. Change topology to Others +.
- C. The Global Properties setting Translate destination on client side is unchecked. But the topology on the DMZ interface is set to Internal - Network defined by IP and Mask. Check the Global Properties setting Translate destination on client side.
- D. The Global Properties setting Translate destination on client side is checked. But the topology on the DMZ interface is set to Internal - Network defined by IP and Mask. Uncheck the Global Properties setting Translate destination on client side.
Answer: C
NEW QUESTION 172
All R80 Security Servers can perform authentication with the exception of one. Which of the Security Servers can NOT perform authentication?
- A. RLOGIN
- B. HTTP
- C. SMTP
- D. FTP
Answer: C
NEW QUESTION 173
Which Check Point software blades could be enforced under Threat Prevention profile using Check Point R80.10 SmartConsole application?
- A. Firewall, IPS, Anti-Bot, Anti-Virus, Threat Emulation
- B. IPS, Anti-Bot, Anti-Virus, Threat Emulation, Threat Extraction
- C. Firewall, IPS, Threat Emulation, Application Control
- D. IPS, Anti-Bot, URL Filtering, Application Control, Threat Emulation
Answer: B
Explanation:
Reference: https://sc1.checkpoint.com/documents/R80.10/WebAdminGuides/EN/ CP_R80.10_ThreatPrevention_AdminGuide/html_frameset.htm?topic=documents/R80.10/WebAdminGuides/ EN/CP_R80.10_ThreatPrevention_AdminGuide/138383
NEW QUESTION 174
......
156-915.80 Exam topics
Candidates must know the exam topics before they start of preparation. Because it will really help them in hitting the core. Our 156-915.80 dumps will include the following topics:
- Understand Automation and Orchestration
- Understand Acceleration
- Understand Threat Prevention
- Understand Mobile and Remote Access
- Understand Redundancy
- Understand SmartEvent
- Understand System Management
Real CheckPoint 156-915.80 Exam Questions [Updated 2021]: https://www.dumpsactual.com/156-915.80-actualtests-dumps.html
