Best Quality CheckPoint 156-115.80 Exam Questions ITexamReview Realistic Practice Exams [2021]
Critical Information To Check Point Certified Security Master - R80 Pass the First Time
NEW QUESTION 87
If certain services should not use the Cluster Object IP Address, but requires the use of the individual Cluster Member IPs, what steps would be required for configuration?
- A. Edit the table.def file on the Management Server
- B. The configuration is not possible
- C. Edit the fwkern.conf on each Cluster Member
- D. Create Manual NAT rules in the Security Policy
Answer: A
NEW QUESTION 88
Which of the following is NOT a special consideration while running fw monitor on production firewall?
- A. While executing fw monitor, you need to specify an expression so that it captures the required traffic instead of all traffic.
- B. While running fw monitoring on a busy firewall, the -ci <count> and -co <count> switches can be used to limit the number of packets captured
- C. During a fw monitor, the firewall will have to process more packets because Secure XL,acceleration should be disabled.
- D. While running fw monitor, it resets all the debug flags.
Answer: D
NEW QUESTION 89
Which of the following commands can be used to see the list of processes monitored by the Watch Dog process?
- A. Ps -ef I grep watchd
- B. Cpstal fw -f watchidog
- C. Cpwd_admin list
- D. Fw ctl get str watchdog
Answer: C
NEW QUESTION 90
Fill in the blank: The R80 featurepermits blocking specific IP addresses for a specified time period.
- A. Local Interface Spoofing
- B. Adaptive Threat Prevention
- C. Suspicious Activity Monitoring
- D. Block Port Overflow
Answer: C
NEW QUESTION 91
Which command is used to write a kernel debug to a file?
- A. fw ctl debug -T -f > debug.txt
- B. fw ctl debug -S -t > debug.txt
- C. fw ctl kdebug -T -f > debug.txt
- D. fw ctl kdebug -T -l > debug.txt
Answer: C
NEW QUESTION 92
Your customer is experiencing problems connecting to the Security Management . Server via Smart Console.
You suggest testing the connection to the SMS with GUDBedit from the client machine. This connection was successful. Now you suggest enabling debug to investigate possible issues with connections to SMS via Smart Console . Which process does the customer need t debug on the SMS?
- A. Cpm
- B. Fwd
- C. Cpd
- D. Fwm
Answer: C
NEW QUESTION 93
Which IPS command debug tool can you use for troubleshooting IPS traffic?
- A. ips debug traffic -o IPSdebug
- B. ips debug -f /var/log/IPSdebug.txt
- C. ips debug -o IPSdebug
- D. debug ips enable -o IPSdebug
Answer: C
NEW QUESTION 94
What effect would changing the parameter of fwha_timer_cpha_res to have on acluster?
- A. Change the cluster interface active check to 5 miliseconds
- B. Change the sync network timeout to 5 seconds
- C. Change the failover delay timeout to 500 miliseconds
- D. Change the cphad to send test packets every 5 miliseconds
Answer: C
Explanation:
Reference:
https://sc1.checkpoint.com/documents/R76/CP_R76_ClusterXL_AdminGuide/7298.htm
NEW QUESTION 95
While using IPS, the network performance is being impacted on a load sharing cluster with asymmetric. What is most likely causing the degradation?
- A. A static NAT has been configured and an IPS protection requires the connection be handled on the same cluster member
- B. Secure XL has been disabled
- C. A failure in the sync network protocol
- D. Core XL has been disabled
Answer: C
NEW QUESTION 96
Where do Protocol parsers register themselves for IPS?
- A. Context Management Infrastructure
- B. Other handlers register to Protocol parser
- C. Protections database
- D. Passive Streaming Library
Answer: A
NEW QUESTION 97
To display status information, such as number of connections currently being handled and the peak number of concurrent connections the instance has handled since inception for each kernel instance, which command would you use?
- A. fw ctl affinity -s stat
- B. fw ctl affinity -t stat
- C. fw ctl multip stat
- D. fw ctl multik stat
Answer: D
NEW QUESTION 98
Which process is responsible for the generation of certificates?
- A. Cpm
- B. Dbsync
- C. Cpca
- D. fwm
Answer: C
Explanation:
Reference:
https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk97638#Security%20Management%20Software%20Blades%20and%20Features%20-%20SmartLog
NEW QUESTION 99
URL Filtering is an essential part of Web Security in the Gateway. For the Security Gateway to perform a URL lookup when a client makes a URL request, where is the sync-request forwarded from if a sync- request is required?
- A. URLF Online Service
- B. URLF Kernel Client
- C. RAD Kernel Space
- D. RAD User Space
Answer: B
Explanation:
Explanation/Reference:
Reference: https://community.checkpoint.com/thread/9034-url-filtering-using-dns
NEW QUESTION 100
Which command query will search the database for instances of the following FW-Corporate object:
- A. select data from dleobjectderef_data where name = 'FW-Corporate';
- B. select object 'FW-Corporate' from dleobjectderef_data;
- C. select name from dleobjectderef_data where name = 'FW-Corporate';
- D. select name from dleobjectderef_table where name = 'FW-Corporate';
Answer: C
NEW QUESTION 101
A Firewall administrator is attempting to push a policy to a new Security Gateway for a remote office but the installation fails. The Management Server IP is 10.1.1.101. Initial troubleshooting shows that policy is successfully transferred to the Gateway. What command would you use to attempt to identify the cause of the issue?
- A. fw fetchlocal -d $FWDIR/state/_tmp/FW1
- B. cp_merge export_policy -s 10.1.1.101 -n Standard $var/log/
- C. fw ctl debug -m 10.1.1.101
- D. fw ctl debug -T -f > /var/log/p_debug.txt
Answer: B
NEW QUESTION 102
What command, when combined with IPS traffic, will give you information that can be used to determine if adjustments can be made to improve performance and security?
- A. > show ips all statistics
- B. # $FWDIR/bin/get_ips_statistics.sh
- C. # fw ctl ips stats
- D. # $FWDIR/scripts/get_ips_statistics.sh
Answer: D
NEW QUESTION 103
URL Filtering is an essential part of Web Security in the Gateway. For the Security Gateway to perform a URL lookup when a client makes a URL request, where is the sync-request forwarded from if a sync-request is required?
- A. RAD Kernel Space
- B. URLF Kernel Client
- C. URLF Online Service
- D. RAD User Space
Answer: C
NEW QUESTION 104
......
156-115.80 EXAM DUMPS WITH GUARANTEED SUCCESS: https://www.itexamreview.com/156-115.80-exam-dumps.html
