2023 Updated Verified Pass 156-315.80 Exam - Real Questions and Answers
Dumps Moneyack Guarantee - 156-315.80 Dumps Approved Dumps
NEW QUESTION 185
Which command can you use to enable or disable multi-queue per interface?
- A. cpmq set
- B. St cpmq enable
- C. Cpmqueue set
- D. Cpmq config
Answer: A
Explanation:
References:
NEW QUESTION 186
When setting up an externally managed log server, what is one item that will not be configured on the R80
Security Management Server?
- A. NAT
- B. IP
- C. SIC
- D. FQDN
Answer: A
NEW QUESTION 187
Fill in the blank: Authentication rules are defined for ________ .
- A. All users in the database
- B. User groups
- C. Individual users
- D. Users using UserCheck
Answer: B
NEW QUESTION 188
Which command can you use to verify the number of active concurrent connections?
- A. fw ctl pstat
- B. show connections
- C. show all connections
- D. fw conn all
Answer: A
Explanation:
Explanation/Reference:
Reference: https://supportcenter.checkpoint.com/supportcenter/portal?
eventSubmit_doGoviewsolutiondetails=&solutionid=sk103496
NEW QUESTION 189
To fully enable Dynamic Dispatcher with Firewall Priority Queues on a Security Gateway, run the following command in Expert mode then reboot:
- A. fw ctl Dynamic_Priority_Queue enable
- B. fw ctl Dynamic_Priority_Queue on
- C. fw ctl multik set_mode 9
- D. fw ctl multik set_mode 1
Answer: C
Explanation:
Reference: https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk105762
NEW QUESTION 190
In SmartEvent, what are the different types of automatic reactions that the administrator can configure?
- A. Mail, Block Source, Block Destination, Block Services, SNMP Trap
- B. Mail, Block Source, Block Event Activity, Packet Capture, SNMP Trap
- C. Mail, Block Source, Block Destination, External Script, SNMP Trap
- D. Mail, Block Source, Block Event Activity, External Script, SNMP Trap
Answer: D
Explanation:
Explanation/Reference: https://sc1.checkpoint.com/documents/R76/CP_R76_SmartEvent_AdminGuide/17401.htm
NEW QUESTION 191
In R80 spoofing is defined as a method of :
- A. Disguising an illegal IP address behind an authorized IP address through port address Translation.
- B. Making packets appears as if they come from an authorized IP address.
- C. Hiding your firewall from unauthorized users.
- D. Detecting people using false or wrong authentication logins.
Answer: B
NEW QUESTION 192
Which of the following is NOT a VPN routing option available in a star community?
- A. To center only.
- B. To center and to other satellites through center.
- C. To center, or through the center to other satellites, to Internet and other VPN targets.
- D. To satellites through center only.
Answer: A,D
Explanation:
References:
NEW QUESTION 193
What is the least amount of CPU cores required to enable CoreXL?
- A. 0
- B. 1
- C. 2
- D. 3
Answer: A
Explanation:
Explanation/Reference: https://sc1.checkpoint.com/documents/R76/CP_R76_PerformanceTuning_WebAdmin/6731.htm
NEW QUESTION 194
Fill in the blanks: In the Network policy layer, the default action for the Implied last rule is ____ all traffic. However, in the Application Control policy layer, the default action is ______ all traffic.
- A. Redirect; drop
- B. Accept; redirect
- C. Accept; drop
- D. Drop; accept
Answer: D
NEW QUESTION 195
Which command to used set the CCP protocol to Multicast?
- A. cphaconf set_ccp multicast
- B. cphaconf set_ccp no broardcast
- C. cphaprob set_ccp no_broadcast
- D. cphaprob set_ccp multicast
Answer: A
Explanation:
Explanation
https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid
NEW QUESTION 196
What is the minimum amount of RAM needed for a Threat Prevention Appliance?
- A. 4 GB
- B. It depends on the number of software blades enabled
- C. 8GB with Gaia in 64-bit mode
- D. 6 GB
Answer: A
NEW QUESTION 197
Which process handles connection from SmartConsole R80?
- A. cpm
- B. fwd
- C. cpd
- D. cpmd
Answer: A
NEW QUESTION 198
What happen when IPS profile is set in Detect Only Mode for troubleshooting?
- A. Automatically uploads debugging logs to Check Point Support Center
- B. It will not block malicious traffic
- C. It will generate Geo-Protection traffic
- D. Bypass licenses requirement for Geo-Protection control
Answer: B
Explanation:
It is recommended to enable Detect-Only for Troubleshooting on the profile during the initial installation of IPS. This option overrides any protections that are set to Prevent so that they will not block any traffic.
During this time you can analyze the alerts that IPS generates to see how IPS will handle network traffic, while avoiding any impact on the flow of traffic.
References:
NEW QUESTION 199
Which command is used to set the CCP protocol to Multicast?
- A. cphaconf set_ccp multicast
- B. cphaconf set_ccp no_broadcast
- C. cphaprob set_ccp no_broadcast
- D. cphaprob set_ccp multicast
Answer: A
Explanation:
Explanation/Reference:
Reference: https://supportcenter.checkpoint.com/supportcenter/portal?
eventSubmit_doGoviewsolutiondetails=&solutionid=sk20576
NEW QUESTION 200
Which of the following blades is NOT subscription-based and therefore does not have to be renewed on a regular basis?
- A. Advanced Networking Blade
- B. Threat Emulation
- C. Application Control
- D. Anti-Virus
Answer: B
Explanation:
Explanation
NEW QUESTION 201
Which utility allows you to configure the DHCP service on Gaia from the command line?
- A. cpconfig
- B. dhcp_ofg
- C. ifconfig
- D. sysconfig
Answer: D
NEW QUESTION 202
Fill in the blanks: A _______ license requires an administrator to designate a gateway for attachment whereas a ________ license is automatically attached to a Security Gateway.
- A. Local; formal
- B. Local; central
- C. Formal; corporate
- D. Central; local
Answer: D
Explanation:
Explanation/Reference: https://sc1.checkpoint.com/documents/R76/CP_R76_Installation_and_Upgrade_Guide- webAdmin/13128.htm
NEW QUESTION 203
CoreXL is supported when one of the following features is enabled:
- A. IPv6
- B. IPS
- C. Route-based VPN
- D. Overlapping NAT
Answer: B
Explanation:
Explanation
CoreXL does not support Check Point Suite with these features:
References:
NEW QUESTION 204
In the Check Point Security Management Architecture, which component(s) can store logs?
- A. Security Management Server and Security Gateway
- B. SmartConsole and Security Management Server
- C. Security Management Server
- D. SmartConsole
Answer: A
NEW QUESTION 205
What is the valid range for VRID value in VRRP configuration?
- A. 0 - 255
- B. 1 - 254
- C. 0 - 254
- D. 1 - 255
Answer: D
Explanation:
Explanation
Virtual Router ID - Enter a unique ID number for this virtual router. The range of valid values is 1 to 255.
References:
NEW QUESTION 206
In the Check Point Firewall Kernel Module, each Kernel is associated with a key, which specifies the type of traffic applicable to the chain module. For Wire Mode configuration, chain modules marked with
____________ will not apply.
- A. 0
- B. 1
- C. ffff
- D. 2
Answer: A
NEW QUESTION 207
Fill in the blank: A ________ VPN deployment is used to provide remote users with secure access to internal corporate resources by authenticating the user through an internet browser.
- A. Clientless remote access
- B. Direct access
- C. Client-based remote access
- D. Clientless direct access
Answer: A
NEW QUESTION 208
Which blades and or features are not supported in R80?
- A. SmartConsole Toolbars
- B. SmartEvent Maps
- C. SmartEvent
- D. Identity Awareness
Answer: B
Explanation:
Explanation
NEW QUESTION 209
Automatic affinity means that if SecureXL is running, the affinity for each interface is automatically reset every
- A. 60 sec
- B. 15 sec
- C. 5 sec
- D. 30 sec
Answer: A
Explanation:
Explanation/Reference: https://sc1.checkpoint.com/documents/R76/CP_R76_PerformanceTuning_WebAdmin/6731.htm
NEW QUESTION 210
......
Updated PDF (New 2023) Actual CheckPoint 156-315.80 Exam Questions: https://actualtests.realvalidexam.com/156-315.80-real-exam-dumps.html
