156-315.80 Exam Training Practice Tests (CheckPoint Check Point Certified Security Expert

Question 1

CoreXL is NOT supported when one of the following features is enabled: (Choose three)

A. IPv6 B. IPS C. Route-based VPN D. Overlapping NAT

Correct Answer: A,C,D

Explanation: Only visible for TrainingDump members. You can sign-up / login (it's free).

Question 2

After the initial installation on Check Point appliance, you notice that the Management-interface and default gateway are incorrect.
Which commands could you use to set the IP to 192.168.80.200/24 and default gateway to 192.168.80.1.

A. set interface Mgmt ipv4-address 192.168.80.200 mask-length 24add static-route default nexthop gateway address 192.168.80.1 onsave config B. set interface Mgmt ipv4-address 192.168.80.200 255.255.255.0set static-route 0.0.0.0. 0.0.0.0 gw 192.168.80.1 onsave config C. set interface Mgmt ipv4-address 192.168.80.200 mask-length 24set static-route default nexthop gateway address 192.168.80.1 onsave config D. set interface Mgmt ipv4-address 192.168.80.200 255.255.255.0add static-route 0.0.0.0. 0.0.0.0 gw 192.168.80.1 onsave config

Correct Answer: C

Question 3

You need to change the MAC-address on eth2 interface of the gateway. What is the correct way to change MAC-address in Check Point Gaia?

A. In expert-mode run ifconfig eth1 hw 11:11:11:11 11 11 B. In CLISH run set interface eth2 hw-addr 11 11 11:11:11 11 C. In expert-mode run: ethtool -4 eth2 mac 11 11:11:11:11:11 D. In CLISH run: set interface eth2 mac-addr 11:11:11:11:11:11

Correct Answer: D

Question 4

What API command below creates a new host with the name "New Host" and IP address of "192.168.0.10"?

A. new host name "New Host" ip-address "192.168.0.10" B. add host name "New Host" ip-address "192.168.0.10" C. set host name "New Host" ip-address "192.168.0.10" D. create host name "New Host" ip-address "192.168.0.10"

Correct Answer: B

Question 5

Which option, when applied to a rule, allows traffic to VPN gateways in specific VPN communities?

A. Accept all encrypted traffic B. All Site-to-Site VPN Communities C. Specific VPN Communities D. All Connections (Clear or Encrypted)

Correct Answer: A

Question 6

Which file contains the host address to be published, the MAC address that needs to be associated with the IP Address, and the unique IP of the interface that responds to ARP request?

A. /var/opt/CPshrd-R80/conf/local.arp B. $FWDIR/conf/local.arp C. $CPDIR/conf/local.arp D. /opt/CPshrd-R80/conf/local.arp

Correct Answer: B

Question 7

In SmartConsole, objects are used to represent physical and virtual network components and also some logical components. These objects are divided into several categories. Which of the following is NOT an objects category?

A. Network Object B. Custom Application / Site C. Limit D. Resource

Correct Answer: D

Question 8

John is using Management HA. Which Smartcenter should be connected to for making changes?

A. secondary Smartcenter B. connect virtual IP of Smartcenter HA C. active Smartenter D. primary Smartcenter

Correct Answer: C

Question 9

The log server sends what to the Correlation Unit?

A. Logs B. Event Policy C. CPMI dbsync D. Authentication requests

Correct Answer: A

Question 10

When performing a minimal effort upgrade, what will happen to the network traffic?

A. All connections that were initiated before the upgrade will be dropped, causing network downtime B. All connections that were initiated before the upgrade will be handled by the active gateway C. All connections that were initiated before the upgrade will be handled by the standby gateway D. All connections that were initiated before the upgrade will be handled normally

Correct Answer: A

Question 11

Fill in the blanks: In the Network policy layer, the default action for the Implied last rule is ____ all traffic. However, in the Application Control policy layer, the default action is ______ all traffic.

A. Accept; redirect B. Redirect; drop C. Drop; accept D. Accept; drop

Correct Answer: C

Question 12

In Logging and Monitoring, the tracking options are Log, Detailed Log and Extended Log. Which of the following options can you add to each Log, Detailed Log and Extended Log?

A. Accounting/Extended B. Suppression C. Accounting/Suppression D. Accounting

Correct Answer: C

Question 13

For Management High Availability, which of the following is NOT a valid synchronization status?

A. Never been synchronized B. Collision C. Lagging D. Down

Correct Answer: D

Question 14

Can Check Point and Third-party Gateways establish a certificate-based Site-to-Site VPN tunnel?

A. No, they cannot share certificate authorities B. Yes, but they need to have a mutually trusted certificate authority C. No, Certificate based VPNs are only possible between Check Point devices D. Yes, but they have to have a pre-shared secret key

Correct Answer: B

Question 15

Which of the following Check Point processes within the Security Management Server is responsible for the receiving of log records from Security Gateway?

A. fwm B. fwd C. cpd D. logd

Correct Answer: B

CheckPoint Check Point Certified Security Expert - R80 - 156-315.80 Exam Practice Test