156-115.80 시험 - Check Point실제시험문제와 답 - 159문항

Question No : 1

What is the role of FWM process in Check Point R80.10 Security Management architecture?

A.It is called by CPM process to perform verification and conversion of the database
B.FWM is used to transfer CPsets from management to the gateway
C.FWM prepares and loads commit functions to execute the policy
D.Policy installation command initiated from SmartConsole is sent to FWM

정답:
Explanation:
Reference: https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk101226

Question No : 2

What is the difference between disabling SecureXL by running “fwaccel off” and disabling it via cpconfig?

A.Disabling SecureXL in cpconfig survives reboot
B.cpconfig option is available only on the security manager
C.There is no difference. These are two different ways of accomplishing the same task
D.“fwaccel off” will survive the reboot but cpconfig will not

정답:
Explanation:
Reference: https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk41397

Question No : 3

Which daemon would you debug if you have issues acquiring identities via identity sharing and identities with other gateways?

A.pdpd
B.wstlsd
C.iad
D.pepd

정답:
Explanation:
Reference: https://sc1.checkpoint.com/documents/R76/CP_R76_IdentityAwareness_AdminGuide/66477.htm

Question No : 4

Fill in the blank: The R80 utility fw monitoris used to troubleshoot ___________________.

A.User data base corruption
B.LDAP conflicts
C.Traffic issues
D.Phase two key negotiation

정답:

Question No : 5

What is enabled by the command “vpn debug mon”?

A.statistics monitoring for vpn encrypted packets
B.vpn daemon monitor mode
C.ike monitor
D.vpn debug mode

정답:

Question No : 6

The Security Gateway is installed on GAiA R80. The default port for the Web User Interface is _____________.

A.TCP 18211
B.TCP 257
C.TCP 4433
D.TCP 443

정답:

Question No : 7

Fill in the blank: The R80 feature _________________ permits blocking specific IP addresses for a specified time period.

A.Block Port Overflow
B.Local Interface Spoofing
C.Suspicious Activity Monitoring
D.Adaptive Threat Prevention

정답:

Question No : 8

Which one of the following does not belong to an initial status of a critical device?

A.restart
B.problem
C.init
D.ok

정답:
Explanation:
Reference: https://sc1.checkpoint.com/documents/R76/CP_R76_ClusterXL_AdminGuide/7298.htm

Question No : 9

Which process is responsible for the generation of certificates?

A.cpm
B.cpca
C.dbsync
D.fwm

정답:
Explanation:
Reference: https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk97638#Security%20Management%20Software%20Blades%20and%20Features%20-%20SmartLog

Question No : 10

After determining that the IPS Blade is causing high resource utilization in the gateway, which would be an appropriate strategy to improve IPS performance?

A.Enabling CoreXL
B.Enable Bypass mode
C.Disabling SecureXL
D.Enabling SecureXL

정답:

Question No : 11

What is the name of the table that an administrator would review to investigate a port exhaustion error when using Hide NAT?

A.dyn_nat_table
B.connection
C.nat_dyn_table
D.fwx_alloc

정답:
Explanation:
Reference: https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk32224

Question No : 12

Which file would you need to make sure you collect when debugging a VPN that fails to establish that is configured to use IKEv2?

A.$FWDIR/log/ike2.elg
B.$FWDIR/log/vpnd.xml.v2
C.$FWDIR/log/ikev2.xml
D.$CPDIR/log/ike.elg

정답:

Question No : 13

Joey’s implementing a new R80.10 firewall cluster into the network. During the implementation he notices that the cluster object is in error state in SmartConsole. He tries to figure out the cause of the problem and runs a ClusterXL kernel debug with command: ‘fw ctl debug Cm cluster + stat pnote conf ccp’ ClusterXL kernel debug shows him following info: fwha_set_new_local_state: Old version HA machines exist around so prevent state change to READY.
How can he solve the problem?

A.cphaconf cluster_id set <NEW_CLUSTER_ID_VALUE>
B.cphaprob mmagic
C.Connect with GuiDBedit Tool to Security Management Server. Go to Table C Network Objects C network_objects. Select the relevant R80.10 Cluster object. Go to Search menu C Find C paste mac_magic. Right-click on the mac_magic the object C select Edit… and change the value to 254. Save changes and install policy.
D.Connect with GuiDBedit Tool to Security Management Server. Go to Table C Network Objects C network_objects. Select the relevant R80.10 Cluster object. Go to Search menu C Find C paste cluster_magic. Right-click on the cluster_magic the object C select Edit… and change the value between 1 and 253. Save changes and install policy.

정답:
Explanation:
Reference: https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk25977

Question No : 14

Which of the following ports are used for SIC?

A.18355 and 18356
B.18210 and 18211
C.257 and 258
D.18192 and 18193

정답:
Explanation:
Reference: http://digitalcrunch.com/check-point-firewall/list-of-check-point-ports/

Question No : 15

Which of the connections cannot be accelerated with SecureXL?

A.Every NAT’ed connection
B.Every encrypted connection, such as HTTPS or SSH connections
C.Every connection destined to the Security Gateways
D.Every connection through a rule using a time object

정답:

Check Point 156-115.80 시험