CheckPoint 156-915.80 Exam Practice Test Instant Access

Question 1

You are responsible for the configuration of MegaCorp's Check Point Firewall. You need to allow two NAT rules to match a connection. Is it possible? Give the BEST answer.

ANo, it is not possible to have more than one NAT rule matching a connection. When the firewall receives a packet belonging to a connection, it compares it against the first rule in the Rule Base, then the second rule, and so on. When it finds a rule that matches, it stops checking and applies that rule.

BYes, it is possible to have two NAT rules which match a connection, but only in using Manual NAT (bidirectional NAT).

CYes, there are always as many active NAT rules as there are connections.

DYes, it is possible to have two NAT rules which match a connection, but only when using Automatic NAT (bidirectional NAT).

Answer : D

Question 2

How can you check whether IP forwarding is enabled on an IP Security Appliance?

Aclish -c show routing active enable

Bcat /proc/sys/net/ipv4/ip_forward

Cecho 1 > /proc/sys/net/ipv4/ip_forward

Dipsofwd list

Answer : D

Question 3

Check Point Management (cpm) is the main management process in that it provides the architecture for a consolidated management console. CPM allows the GUI client and management server to communicate via web service using ______.

ATCP port 19009

BTCP Port 18190

CTCP Port 18191

DTCP Port 18209

Answer : B

Question 4

Fill in the blank: The tool ___________ generates a R80 Security Gateway configuration report.

AinfoCP

Binfoview

Ccpinfo

Dfw cpinfo

Answer : C

Question 5

What is true about VRRP implementations?

AVRRP membership is enabled in cpconfig

BVRRP can be used together with ClusterXL, but with degraded performance

CYou cannot have a standalone deployment

DYou cannot have different VRIDs in the same physical network
References:

Answer : C

Question 6

In a ClusterXL high-availability environment, what MAC address will answer for Virtual IP in the default configuration?

AMAC address of Active Member

BVirtual MAC Address

CMAC Address of Standby Member

DMAC Address of Management Server
References:

Answer : A

Question 7

CPD is a core Check Point process that does all of the following EXCEPT:

AAMON status pull from the Gateway

BManagement High Availability (HA) sync

CSIC (Secure Internal Communication) functions

DPolicy installation
References:

Answer : B

CheckPoint Check Point Certified Security Expert Update - R80 156-915.80 Exam Practice Test