156-215.80 practice questions 171–180

1. Question 171 · 380 in bank

   Review the rules. Assume domain UDP is enabled in the implied rules.

   

   What happens when a user from the internal network tries to browse to the internet using HTTP? The user:

   • Acan connect to the Internet successfully after being authenticated.
   • Bis prompted three times before connecting to the Internet successfully.
   • Ccan go to the Internet after Telnetting to the client authentication daemon port 259.
   • Dcan go to the Internet, without being prompted for authentication.

   Show answer

   Answer: D

   Next question

2. Question 172 · 380 in bank

   Which component functions as the Internal Certificate Authority for R77?

   • ASecurity Gateway
   • BManagement Server
   • CPolicy Server
   • DSmartLSM

   Show answer

   Answer: B

   Next question

3. Question 173 · 380 in bank

   Check Point APIs allow system engineers and developers to make changes to their organization's security policy with CLI tools and Web Services for all of the following except:

   • ACreate new dashboards to manage 3 rd party task
   • BCreate products that use and enhance 3 rd party solutions
   • CExecute automated scripts to perform common tasks
   • DCreate products that use and enhance the Check Point Solution

   Show answer

   Answer: A

   Next question

4. Question 174 · 380 in bank

   In what way are SSL VPN and IPSec VPN different?

   • ASSL VPN is using HTTPS in addition to IKE, whereas IPSec VPN is clientless
   • BSSL VPN adds an extra VPN header to the packet, IPSec VPN does not
   • CIPSec VPN does not support two factor authentication, SSL VPN does support this
   • DIPSec VPN uses an additional virtual adapter, SSL VPN uses the client network adapter only

   Show answer

   Answer: D

   Next question

5. Question 175 · 380 in bank

   Which command can you use to enable or disable multi-queue per interface?

   • Acpmq set
   • BCpmqueue set
   • CCpmq config
   • DSet cpmq enable

   Show answer

   Answer: A

   Next question

6. Question 176 · 380 in bank

   Which limitation of CoreXL is overcome by using (mitigated by) Multi-Queue?

   • AThere is no traffic queue to be handled
   • BSeveral NICs can use one traffic queue by one CPU
   • CEach NIC has several traffic queues that are handled by multiple CPU cores
   • DEach NIC has one traffic queue that is handled by one CPU

   Show answer

   Answer: C

   Next question

7. Question 177 · 380 in bank

   To fully enable Dynamic Dispatcher on a Security Gateway:

   • Arun fw ctl multik set_mode 9 in Expert mode and then reboot
   • BUsing cpconfig, update the Dynamic Dispatcher value to ג€fullג€ under the CoreXL menu
   • CEdit /proc/interrupts to include multik set_mode 1 at the bottom of the file, save, and reboot
   • Drun fw ctl multik set_mode 1 in Expert mode and then reboot

   Show answer

   Answer: A

   Next question

8. Question 178 · 380 in bank

   What are types of Check Point APIs available currently as part of R80.10 code?

   • ASecurity Gateway API, Management API, Threat Prevention API and Identity Awareness Web Services API
   • BManagement API, Threat Prevention API, Identity Awareness Web Services API and OPSEC SDK API
   • COSE API, OPSEC SDK API, Threat Prevention API and Policy Editor API
   • DCPMI API, Management API, Threat Prevention API and Identity Awareness Web Services API

   Show answer

   Answer: B

   Next question

9. Question 179 · 380 in bank

   What is the purpose of Priority Delta in VRRP?

   • AWhen a box is up, Effective Priority = Priority + Priority Delta
   • BWhen an Interface is up, Effective Priority = Priority + Priority Delta
   • CWhen an Interface fails, Effective Priority = Priority - Priority Delta
   • DWhen a box fails, Effective Priority = Priority - Priority Delta

   Show answer

   Answer: C

   Next question

10. Question 180 · 380 in bank

    The Firewall kernel is replicated multiple times, therefore:

    • AThe Firewall kernel only touches the packet if the connection is accelerated
    • BThe Firewall can run different policies per core
    • CThe Firewall kernel is replicated only with new connections and deletes itself once the connection times out
    • DThe Firewall can run the same policy on all cores

    Show answer

    Answer: D

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

156-215.80 practice, question 171. 380 questions available.