CheckPoint 156-915.80 Exam Practice Test Instant Access

Question 1

Using Threat Emulation technologies, what is the best way to block .exe and .bat file types?

AEnable DLP and select .exe and .bat file type

Benable .exe & .bat protection in IPS Policy

Ccreate FW rule for particular protocol

Dtecli advanced attributes set prohibited_file_types exe,bat

Answer : D

Question 2

What is the limitation of employing Sticky Decision Function?

AWith SDF enabled, the involved VPN Gateways only supports IKEv1

BAcceleration technologies, such as SecureXL and CoreXL are disabled when activating SDF

CWith SDF enabled, only ClusterXL in legacy mode is supported

DWith SDF enabled, you can only have three Sync interfaces at most
References:

Answer : B

Question 3

Which is NOT a SmartEvent component?

ASmartEvent Server

BCorrelation Unit

CLog Consolidator

DLog Server

Answer : C

Question 4

You have created a Rule Base for firewall, websydney. Now you are going to create a new policy package with security and address translation rules for a second Gateway.

What is TRUE about the new package's NAT rules?

ARules 1, 2, 3 will appear in the new package.

BOnly rule 1 will appear in the new package.

CNAT rules will be empty in the new package.

DRules 4 and 5 will appear in the new package.

Answer : A

Question 5

The third-shift Administrator was updating Security Management Server access settings in Global Properties and testing. He managed to lock himself out of his account. How can you unlock this account?

AType fwm unlock_admin from the Security Management Server command line.

BType fwm unlock_admin -u from the Security Gateway command line.

CType fwm lock_admin -u from the Security Management Server command line.

DDelete the file admin.lock in the Security Management Server directory $FWDIR/tmp/.

Answer : C

Question 6

For best practices, what is the recommended time for automatic unlocking of locked admin accounts?

A20 minutes

B15 minutes

CAdmin account cannot be unlocked automatically

D30 minutes at least

Answer : D

Question 7

Which command will only show the number of entries in the connection table?

Afw tab -t connections -s

Bfw tab -t connections -u

Cfw tab -t connections

Dfw tab

Answer : A

CheckPoint 156-915.80 Check Point Certified Security Expert Update - R80 Exam Practice Test