Check Point Certified Security Expert - R80 (156-315.80) Free Practice Test

Question 1

What is correct statement about Security Gateway and Security Management Server failover in Check Point R80.X in terms of Check Point Redundancy driven solution?

A. Security Gateway failover as well as Security Management Server failover is a manual procedure.

B. Security Gateway failover as well as Security Management Server failover is an automatic procedure.

C. Security Gateway failover is a manual procedure but Security Management Server failover is an automatic procedure.

D. Security Gateway failover is an automatic procedure but Security Management Server failover is a manual procedure.

Correct Answer: D

Question 2

D18912E1457D5D1DDCBD40AB3BF70D5D
The system administrator of a company is trying to find out why acceleration is not working for the traffic. The traffic is allowed according to the rule based and checked for viruses. But it is not accelerated. What is the most likely reason that the traffic is not accelerated?

A. The connection is destined for a server within the network

B. The connection required a Security server

C. The packet is the second in an established TCP connection

D. The packets are not multicast

Correct Answer: B

Question 3

Which command shows the current connections distributed by CoreXL FW instances?

A. fw ctl instances -v

B. fw ctl iflist

C. fw ctl affinity -l

D. fw ctl multik stat

Correct Answer: D

Question 4

When Dynamic Dispatcher is enabled, connections are assigned dynamically with the exception of:

A. HTTPS

B. QOS

C. VoIP

D. Threat Emulation

Correct Answer: C

Question 5

What is a feature that enables VPN connections to successfully maintain a private and secure VPN session without employing Stateful Inspection?

A. Stateless Mode

B. VPN Routing Mode

C. Wire Mode

D. Stateful Mode

Correct Answer: C

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 6

Which TCP-port does CPM process listen to?

A. 8983

B. 18191

C. 19009

D. 18190

Correct Answer: C

Question 7

In the Firewall chain mode FFF refers to:

A. Stateful Packets

B. All Packets

C. No Match

D. Stateless Packets

Correct Answer: B

Question 8

What is the port used for SmartConsole to connect to the Security Management Server?

A. CPMI port 18191/TCP

B. CPM port/TCP port 19009

C. SIC port 18191/TCP

D. https port 4434/TCP

Correct Answer: A

Question 9

Which configuration file contains the structure of the Security Server showing the port numbers, corresponding protocol name, and status?

A. $FWDIR/conf/fwauth.conf

B. $FWDIR/conf/fwauthd.conf

C. $FWDIR/state/fwauthd.conf

D. $FWDIR/database/fwauthd.conf

Correct Answer: B

Question 10

During the Check Point Stateful Inspection Process, for packets that do not pass Firewall Kernel Inspection and are rejected by the rule definition, packets are:

A. Dropped without logs and without sending a negative acknowledgment

B. Dropped with negative acknowledgment

C. Dropped without sending a negative acknowledgment

D. Dropped with logs and without sending a negative acknowledgment

Correct Answer: D

Question 11

The fwd process on the Security Gateway sends logs to the fwd process on the Management Server via which 2 processes?

A. cpm via cpd

B. fwd via cpm

C. fwm via fwd

D. fwd via cpd

Correct Answer: B

Welcome to TestSimulate

CheckPoint Check Point Certified Security Expert - R80 (156-315.80) Free Practice Test