CheckPoint 156-915.80 Exam Practice Test Instant Access

Question 1

What GUI client would you use to view an IPS packet capture?

ASmartView Monitor

BSmartView Tracker

CSmart Update

DSmart Reporter
References:

Answer : B

Question 2

If your firewall is performing a lot of IPS inspection and the CPUs assigned to fw_worker_thread are at or near 100%, which of the following could you do to improve performance?

AAdd more RAM to the system.

BAdd more Disk Drives.

CAssign more CPU cores to CoreXL

DAssign more CPU cores to SecureXL.

Answer : C

Question 3

MultiCorp is running Smartcenter R71 on an IPSO platform and wants to upgrade to a new Appliance with R80. Which migration tool is recommended?

ADownload Migration Tool R80 for IPSO and Splat/Linux from Check Point website.

BUse already installed Migration Tool.

CUse Migration Tool from CD/ISO

DFetch Migration Tool R71 for IPSO and Migration Tool R80 for Splat/Linux from CheckPoint website

Answer : A

Question 4

What is the primary benefit of using the command upgrade_export over either backup or snapshot?

Aupgrade_export is operating system independent and can be used when backup or snapshot is not available.

Bupgrade_export will back up routing tables, hosts files, and manual ARP configurations, where backup and snapshot will not.

CThe commands backup and snapshot can take a long time to run whereas upgrade_export will take a much shorter amount of time.

Dupgrade_export has an option to back up the system and SmartView Tracker logs while backup and snapshot will not.

Answer : A

Question 5

VPN Tunnel Sharing can be configured with any of the options below, EXCEPT One:

AGateway-based

BSubnet-based

CIP range based

DHost-based
VPN Tunnel Sharing provides interoperability and scalability by controlling the number of VPN tunnels created between peer Security Gateways. There are three available settings:
One VPN tunnel per each pair of hosts
One VPN tunnel per subnet pair
One VPN tunnel per Security Gateway pair

Answer : C

Question 6

What is the valid range for VRID value in VRRP configuration?

A1 -- 254

B1 -- 255

C0 -- 254

D0 -- 255
Virtual Router ID - Enter a unique ID number for this virtual router. The range of valid values is 1 to 255.
References:

Answer : B

Question 7

Select the correct statement about Secure Internal Communications (SIC) Certificates. SIC Certificates:

AAre used for securing internal network communications between the SmartDashboard and the Security Management Server.

BFor R75 Security Gateways are created during the Security Management Server installation.

CDecrease network security by securing administrative communication among the Security Management Servers and the Security Gateway.

DUniquely identify Check Point enabled machines; they have the same function as VPN Certificates.

Answer : D

CheckPoint 156-915.80 Check Point Certified Security Expert Update - R80 Exam Practice Test