Check Point Certified Security Master - R80 (156-115.80) Free Practice Test

Question 1

What is the command to check the number of CoreXL firewall instances?

A. show corexl stat

B. fw ctl multik stat

C. fw ctl corexl stats

D. coreXL_admin stat

Correct Answer: B

Question 2

IPS detection incorporates 4 layers. Which of the following is NOT a layer in IPS detection?

A. Context Management

B. Protections

C. Detections

D. Protocol Parsers

Correct Answer: C

Question 3

Consider a Check Point Security Gateway under high load. What mechanism can be used to confirm that important traffic such as control connections are not dropped?

A. fw ctl multik prioq

B. fw debug fgd50 on OPSEC_DEBUG_LEVEL=3

C. fgate -d load

D. fw ctl debug -m fg all

Correct Answer: A

Question 4

Fill in the blank: The commandprovides the most complete restoration of a R80 configuration.

A. fwm dbimport -p <export file>

B. cpinfo -recover

C. cpconfig

D. upgrade_import

Correct Answer: D

Question 5

When running a debug with fw monitor, which parameter will create a more verbose output?

A. -D

B. -l

C. -d

D. -i

Correct Answer: A

Question 6

Which command is used to write a kernel debug to a file?

A. fw ctl debug -S -t > debug.txt

B. fw ctl kdebug -T -l > debug.txt

C. fw ctl kdebug -T -f > debug.txt

D. fw ctl debug -T -f > debug.txt

Correct Answer: C

Question 7

While using IPS, the network performance is being impacted on a load sharing cluster with asymmetric routes.
What is most likely causing the degradation?

A. A failure in the sync network protocol

B. CoreXL has been disabled

C. SecureXL has been disabled

D. A static NAT has been configured and an IPS protection requires the connection be handled on the same cluster member

Correct Answer: B

Question 8

Which type of SecureXL templates is enabled by default on Security Gateways?

A. Accept

B. VPN

C. NAT

D. Drop

Correct Answer: A

Question 9

Which daemon process performs asymmetric key operations for HTTPS Inspection?

A. wstlsd

B. pkxld

C. httpsd

D. httpkd

Correct Answer: B

Question 10

How many layers are incorporated in IPS detection and what are they called?

A. 3 layers - Protocol Parsers, CMI, Protections

B. 4 layers - Active Streaming Library (ASL), Protocol Parsers, Context Management, Protections

C. 3 layers - Active Streaming Library (ASL), CMI, Protections

D. 4 layers - Passive Streaming Library (PSL), Protocol Parsers, Context Management, Protections

Correct Answer: D

Welcome to TestSimulate

CheckPoint Check Point Certified Security Master - R80 (156-115.80) Free Practice Test