156-915.80 Online Practice Questions and Answers

Fill in the blank. To verify that a VPN Tunnel is properly established, use the command _________

Which Security Gateway R80 configuration setting forces the Client Authentication authorization time-out to refresh, each time a new user is authenticated? The:

A. Time properties, adjusted on the user objects for each user, in the Client Authentication rule Source.

B. IPS > Application Intelligence > Client Authentication > Refresh User Timeout option enabled.

C. Refreshable Timeout setting, in Client Authentication Action Properties > Limits.

D. Global Properties > Authentication parameters, adjusted to allow for Regular Client Refreshment.

What type of traffic can be re-directed to the Captive Portal?

A. SMTP

B. HTTP

C. All of the above

D. FTP

You find that Gateway fw2 can NOT be added to the cluster object. What are possible reasons for that? Exhibit:

1) fw2 is a member in a VPN community. 2) ClusterXL software blade is not enabled on fw2. 3) fw2 is a DAIP Gateway.

A. 2 or 3

B. 1 or 2

C. 1 or 3

D. All

You have three Gateways in a mesh community. Each gateway's VPN Domain is their internal network as defined on the Topology tab setting All IP Addresses behind Gateway based on Topology information. You want to test the route-based VPN, so you created VTIs among the Gateways and created static route entries for the VTIs. However, when you test the VPN, you find out the VPN still go through the regular domain IPsec tunnels instead of the routed VTI tunnels. What is the problem and how do you make the VPN use the VTI tunnels?

A. Domain VPN takes precedence over the route-based VTI. To make the VPN go through VTI, remove the Gateways out of the mesh community and replace with a star community

B. Domain VPN takes precedence over the route-based VTI. To make the VPN go through VTI, use an empty group object as each Gateway's VPN Domain

C. Route-based VTI takes precedence over the Domain VPN. To make the VPN go through VTI, use dynamic-routing protocol like OSPF or BGP to route the VTI address to the peer instead of static routes

D. Route-based VTI takes precedence over the Domain VPN. Troubleshoot the static route entries to insure that they are correctly pointing to the VTI gateway IP.

Which process is available on any management product and on products that require direct GUI access, such as SmartEvent and provides GUI client communications, database manipulation, policy compilation and Management HA synchronization?

A. cpwd

B. fwd

C. cpd

D. fwm

When doing a Stand-Alone Installation, you would install the Security Management Server with which other Check Point architecture component?

A. None, Security Management Server would be installed by itself

B. SmartConsole

C. SecureClient

D. SmartEvent

GAiA Software update packages can be imported and installed offline in situation where:

A. Security Gateway with GAiA does NOT have SFTP access to Internet

B. Security Gateway with GAiA does NOT have access to Internet.

C. Security Gateway with GAiA does NOT have SSH access to internet.

D. The desired CPUSE package is ONLY available in the Check Point CLOUD.

What are the available options for downloading Check Point hotfixes in Gaia WebUI (CPUSE)?

A. Manually, Scheduled, Automatic

B. Update Now, Scheduled Update, Offline Update

C. Update Automatically, Update Now, Disable Update

D. Manual Update, Disable Update, Automatic Update

You can select the file types that are sent for emulation for all the Threat Prevention profiles. Each profile defines a(n)_________ or ___________ action for the file types.

A. Inspect/Bypass

B. Inspect/Prevent

C. Prevent/Bypass

D. Detect/Bypass