[2021] Pass CheckPoint 156-915.80 Test Practice Test Questions Exam Dumps
Verified 156-915.80 dumps Q&As - 156-915.80 dumps with Correct Answers
What is the duration of the 156-915.80 Exam
- Passing Score: 70%
- Length of Examination: 90 minutes
- Number of Questions: 100
- Format: Multiple choices, multiple answers
How to study the 156-915.80 Exam
ActualCollection expert team recommends you to prepare some notes on these topics along with it don’t forget to practice Check Point Certified Security Expert Update - R80 (CCSE) 156-915.80 Exam which been written by our expert team, Both these will help you a lot to clear this exam with good marks.
NEW QUESTION 167
Which command shows the current connections distributed by CoreXL FW instances?
- A. fw ctl multik stat
- B. fw ctl affinity -l
- C. fw ctl instances -v
- D. fw ctl iflist
Answer: A
Explanation:
The fw ctl multik stat and fw6ctl multik stat (multi-kernel statistics) commands show information for each kernel instance. The state and processing core number of each instance is displayed, along with:
The number of connections currently being handled.
The peak number of concurrent connections the instance has handled since its inception.
NEW QUESTION 168
Fill in the blank. To save your OSPF configuration in GAiA, enter the command ___________ .
Answer:
Explanation:
save config
NEW QUESTION 169
Which packet info is ignored with Session Rate Acceleration?
- A. same info from Packet Acceleration is used
- B. source port ranges
- C. source port
- D. source ip
Answer: C
Explanation:
Reference: http://trlj.blogspot.com/2015/10/check-point-acceleration.html
NEW QUESTION 170
Aaron is a Cyber Security Engineer working for Global Law Firm with large scale deployment of Check Point Enterprise Appliances using GAiA/R80.10. Company's Network Security Developer Team is having issue testing new API with newly deployed R80.10 Security Management Server and blames Check Point Security Management Server as root cause. The ticket has been created and issue is at Aaron's desk for an investigation. What do you recommend as the best suggestion for Aaron to make sure API testing works as expected?
- A. Aaron should check API Server status from expert CLI by "api status" and if it's stopped he should start using command "api start" on Security Management Server.
- B. Aaron should check API Server5 status from expert CLI by "cpapi status" and if it's stopped he should start using command "cpapi start" on Security Management Server.
- C. Aaron should check API Server status from expert CLI by "cpm api status" and if it's stopped he should start using command "cpm api start" on Security Management Server.
- D. Aaron should check API Server status from expert CLI by "fwm api status" and if it's stopped he should start using command "fwm api start" on Security Management Server.
Answer: A
NEW QUESTION 171
What information is NOT collected from a Security Gateway in a Cpinfo?
- A. OS and network statistics
- B. System message logs
- C. Firewall logs
- D. Configuration and database files
Answer: C
Explanation:
Reference: https://supportcenter.checkpoint.com/supportcenter/portal?
eventSubmit_doGoviewsolutiondetails=&solutionid=sk92739
NEW QUESTION 172
What is the responsibility of SOLR process on R80.10 management server?
- A. Writing all information into the database
- B. Validating all data before it's written into the database
- C. It generates indexes of data written to the database
- D. Communication between SmartConsole applications and the Security Management Server
Answer: C
Explanation:
Section: (none)
NEW QUESTION 173
Use the table to match the BEST Management High Availability synchronication-status descriptions for your Security Management Server (SMS).
Exhibit:
- A. A-3, B-5, C-2, D-4
- B. A-3, B-1, C-4, D-2
- C. A-5, B-3, C-1, D-2
- D. A-3, B-1, C-5, D-4
Answer: D
NEW QUESTION 174
For best practices, what is the recommended time for automatic unlocking of locked admin accounts?
- A. 15 minutes
- B. 20 minutes
- C. 30 minutes at least
- D. Admin account cannot be unlocked automatically
Answer: C
NEW QUESTION 175
In SmartEvent, what are the different types of automatic reactions that the administrator can configure?
- A. Mail, Block Source, Block Destination, External Script, SNMP Trap
- B. Mail, Block Source, Block Event Activity, External Script, SNMP Trap
- C. Mail, Block Source, Block Event Activity, Packet Capture, SNMP Trap
- D. Mail, Block Source, Block Destination, Block Services, SNMP Trap
Answer: B
Explanation:
Explanation
These are the types of Automatic Reactions:
* Mail - tell an administrator by email that the event occurred. See Create a Mail Reaction.
* Block Source - instruct the Security Gateway to block the source IP address from which this event was detected for a configurable period of time . Select a period of time from one minute to more than three weeks. See Create a Block Source Reaction
* Block Event activity - instruct the Security Gateway to block a distributed attack that emanates from multiple sources, or attacks multiple destinations for a configurable period of time. Select a period of time from one minute to more than three weeks). See Create a Block Event Activity Reaction.
* External Script - run a script that you provide. See Creating an External Script Automatic Reaction to write a script that can exploit SmartEvent data.
* SNMP Trap - generate an SNMP Trap. See Create an SNMP Trap Reaction.
NEW QUESTION 176
What are you required to do before running the command upgrade_export?
- A. Close all GUI clients.
- B. Run a cpstop on the Security Gateway.
- C. Run cpconfig and set yourself up as a GUI client.
- D. Run a cpstop on the Security Management Server.
Answer: A
NEW QUESTION 177
Which of the following is NOT an attribute of packet acceleration?
- A. Application Awareness
- B. Source address
- C. Protocol
- D. Destination port
Answer: A
Explanation:
Reference: https://sc1.checkpoint.com/documents/R76/CP_R76_Firewall_WebAdmin/92711.htm
NEW QUESTION 178
Which statement is true regarding redundancy?
- A. Both Cluster XL and VRRP are fully supported by Gaia and available to all Check Point appliances, open servers, and virtualized environments.
- B. System Administrator know when their cluster has failed over and can also see why it failed over by using the cphaprob f it command.
- C. ClusterXL offers three different Load Sharing solutions: Unicast, Broadcast, and Multicast.
- D. Machines in a Cluster XL High Availability configuration must be synchronized.
Answer: A
Explanation:
Explanation/Reference:
Reference: https://www.checkpoint.com/download/public-files/gaia-technical-brief.pdf page 5
NEW QUESTION 179
Which process should you debug if SmartDashboard login fails?
- A. sdm
- B. cpd
- C. fwm
- D. fwd
Answer: C
NEW QUESTION 180 
In New Mode HA, the internal cluster IP VIP address is 10.4.8.3. The internal interfaces on two members are 10.4.8.1 and 10.4.8.2 Internal host 10.4.8.108 pings 10.4.8.3, and receives replies. Review the ARP table from the internal Windows host 10.4.8.108. According to the output, which member is the standby machine?
Answer:
Explanation:
10.4.8.1
NEW QUESTION 181
CORRECT TEXT
In a zero downtime scenario, which command do you run manually after all cluster members are upgraded?
Answer:
Explanation:
cphaconf set_ccp multicast
NEW QUESTION 182
The Check Point installation history feature in R80 provides the following:
- A. View install changes and install specific version.
- B. Policy Installation Date only
- C. View install changes
- D. Policy Installation Date, view install changes and install specific version
Answer: D
NEW QUESTION 183
......
156-915.80 certification guide Q&A from Training Expert ActualCollection: https://www.actualcollection.com/156-915.80-exam-questions.html