Check Point Certified Security Expert Update - R80 (156-915.80) Free Practice Test

Question 1

What is the responsibility of SOLR process on R80.10 management server?

A. Validating all data before it's written into the database

B. It generates indexes of data written to the database

C. Communication between SmartConsole applications and the Security Management Server

D. Writing all information into the database

Correct Answer: B

Question 2

Review the rules.

Assume domain UDP is enabled in the impled rules.
What happens when a user from the internal network tries to browse to the internet using HTTP? The user:

A. can go to the Internet, without being prompted for authentication.

B. can go to the Internet after Telnetting to the client authentication daemon port 259.

C. can connect to the Internet successfully after being authenticated.

D. is prompted three times before connecting to the Internet successfully.

Correct Answer: A

Question 3

Which Check Point address translation method allows an administrator to use fewer ISP-assigned IP addresses than the number of internal hosts requiring Internet connectivity?

A. Static Destination

B. Hide

C. Static Source

D. Dynamic Destination

Correct Answer: B

Question 4

To stop acceleration on a GAiA Security Gateway, enter command:________ .

Correct Answer:

fwaccel off

Question 5

You need to see which hotfixes are installed on your gateway, which command would you use?

A. cpinfo -h all

B. cpinfo -l hotfix

C. cpinfo -o hotfix

D. cpinfo -y all

Correct Answer: D

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 6

After verifying that API Server is not running, how can you start the API Server?

A. Run command "set api start" in CLISH mode

B. Run command "mgmt._cli set api start" in Expert mode

C. Run command "mgmt. api start" in CLISH mode

D. Run command "api start" in Expert mode

Correct Answer: D

Question 7

MegaCorp is using SmartCenter Server with several gateways. Their requirements result in a heavy log load. Would it be feasible to add the SmartEvent Correlation Unit and SmartEvent Server to their SmartCenter Server?

A. No, SmartEvent and Smartcenter cannot be installed on the same machine at the same time.

B. No. SmartCenter SIC will interfere with the function of SmartEvent.

C. Yes. SmartEvent must be installed on your SmartCenter Server.

D. No. If SmartCenter is already under stress, the use of a separate server for SmartEvent is recommended.

Correct Answer: D

Question 8

When restoring R80 using the command upgrade_import, which of the following items are NOT restored?

A. SIC Certificates

B. Licenses

C. Global properties

D. Route tables

Correct Answer: D

Question 9

Which of the following statements accurately describes the command upgrade_export?

A. Used primarily when upgrading the Security Management Server, upgrade_export stores all object databases and the /conf directories for importing to a newer Security Gateway version.

B. upgrade_export stores network-configuration data, objects, global properties, and the database revisions prior to upgrading the Security Management Server.

C. This command is no longer supported in GAiA.

D. upgrade_export is used when upgrading the Security Gateway, and allows certain files to be included or excluded before exporting.

Correct Answer: A

Question 10

Fill in the blank with a numeric value. The default port number for Secure Sockets Layer (SSL) connections with the LDAP Server is

Correct Answer:

636

Question 11

John is using Management HA.
Which Smartcenter should be connected to for marking changes?

A. Primary Log Server

B. connect virtual IP of Smartcenter HA

C. secondary Smartcenter

D. active SmartConsole

Correct Answer: D

Question 12

Fill in the blank. The command that typically generates the firewall application, operating system, and hardware specific drivers is _________ .

Correct Answer:

snapshot

Question 13

Fill in the blank.

In Load Sharing Unicast mode, the internal cluster IP address is 10.4.8.3. The internal interfaces on two members are 10.4.8.1 and 10.4.8.2. Internal host 10.4.8.108 Pings 10.4.8.3, and receives replies. The following is the ARP table from the internal Windows host 10.4.8.108. Review the exhibit and type the IP address of the member serving as the pivot machine in the space below.

Correct Answer:

10.4.8.2

Welcome to TestSimulate

CheckPoint Check Point Certified Security Expert Update - R80 (156-915.80) Free Practice Test