Free Download 156-115.80 Examp Dump: Checkpoint.156-115.80.Prep4Sure.2018-12-05.44q.vcex

File Info

Exam	Check Point Certified Security Master R80
Number	156-115.80
File Name	Checkpoint.156-115.80.Prep4Sure.2018-12-05.44q.vcex
Size	25 KB
Posted	Dec 05, 2018
Download	Checkpoint.156-115.80.Prep4Sure.2018-12-05.44q.vcex

How to open VCEX & EXAM Files?

Files with VCEX & EXAM extensions can be opened by ProfExam Simulator.

Download
ProfExam Simulator

Purchase

Coupon: MASTEREXAM
With discount: 20%

Demo Questions

Question 1

Consider a Check Point Security Gateway under high load. What mechanism can be used to confirm that important traffic such as control connections are not dropped?

fw debug fgd50 on OPSEC_DEBUG_LEVEL=3
fw ctl multik prioq
fgate –d load
fw ctl debug –m fg all

Correct answer: A

Question 2

What is the default and maximum number of entries in the ARP Cache Table in a Check Point appliance?

1,024 and 4,096
4,096 and 16,384
4,096 and 65,536
1,024 and 16,384

Correct answer: D

Explanation:

Reference: https://sc1.checkpoint.com/documents/R76/CP_R76_Gaia_WebAdmin/73181.htm

Question 3

You are working with multiple Security Gateways enforcing an extensive number of rules. To simplify security administration, which action would you choose?

Eliminate all possible contradictory rules such as the Stealth or Cleanup rules
Create a separate Security Policy package for each remote Security Gateway
Create network objects that restrict all applicable rules to only certain networks
Run separate SmartConsole instances to login and configure each Security Gateway directly

Correct answer: B

Question 4

Which type of SecureXL templates is enabled by default on Security Gateways?

Accept
Drop
NAT
VPN

Correct answer: A

Question 5

Where does the translation occur with Hide NAT?

The destination translation occurs at the client side
The source translation occurs at the server side
The source translation occurs at the client side
The destination translation occurs at the server side

Correct answer: B

Question 6

Fill in the blank. The tool ____________________ generates a R80 Security Gateway configuration report.

infoCP
infoview
cpinfo
fw cpinfo

Correct answer: C

Question 7

How many layers are incorporated in IPS detection and what are they called?

4 layers – Passive Streaming Library (PSL), Protocol Parsers, Context Management, Protections
3 layers – Active Streaming Library (ASL), CMI, Protections
4 layers – Active Streaming Library (ASL), Protocol Parsers, Context Management, Protections
3 layers – Protocol Parsers, CMI, Protections

Correct answer: A

Question 8

What is the command to check the current status of hyper-threading?

fw ctl get int cphwd_hyper_status
fw ctl multik stat
cat/proc/hyperstats
cat/proc/smt_status

Correct answer: D

Explanation:

Reference: https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk93000#To%20check%20SMT%20current%20status

Question 9

What occurs when Bypass Under Load activated?

Packets are forwarded to the destination without checking the packets against the firewall rule base
Packets are forwarded to the destination without performing IPS analysis
To still ensure a minimum level of data integrity, the system revert to the use of MD5 instead of SHA-1, since former produces an output smaller than the latter
The amount of the state table entries is decreased according to the LRU (least recently used) algorithm

Correct answer: B

Explanation:

Reference: https://sc1.checkpoint.com/documents/R76/CP_R76_IPS_AdminGuide/12750.htm

Question 10

Having a look at the output of the “fwaccel conns” command, the F flag is the indicator for a packet ______________.

getting the routing information according to the Forwarding Information Base (FIB)
being processed by the firewall kernel module
going through the slow path
being forced of using the accelerated path

Correct answer: B