156-915.80 Exam Training Practice Tests (CheckPoint Check Point Certified Security Expert Update

Question 1

When Dynamic Dispatcher is enabled, connections are assigned dynamically with the exception of

A. Threat Emulation B. VolP C. HTTPS D. QOS

Correct Answer: B

Explanation: Only visible for TrainingDump members. You can sign-up / login (it's free).

Question 2

Type the command and syntax you would use to verify that your Check Point cluster is functioning correctly.

Correct Answer:

cphaprob state

Question 3

You have configured Automatic Static NAT on an internal host-node object. You clear the box Translate destination on client site from Global Properties > NAT. Assuming all other NAT settings in Global Properties are selected, what else must be configured so that a host on the Internet can initiate an inbound connection to this host?

A. A static route, to ensure packets destined for the public NAT IP address will reach the Gateway's internal interface. B. No extra configuration is needed. C. A proxy ARP entry, to ensure packets destined for the public IP address will reach the Security Gateway's external interface. D. The NAT IP address must be added to the external Gateway interface anti-spoofing group.

Correct Answer: A

Question 4

If you need strong protection for the encryption of user data, what option would be the BEST choice?

A. Use Diffie-Hellman for key construction and pre-shared keys for Quick Mode. Choose SHA in Quick Mode and encrypt with AES. Use AH protocol. Switch to Aggressive Mode. B. Use certificates for Phase 1, SHA for all hashes, AES for all encryption and PFS, and use ESP protocol. C. When you need strong encryption, IPsec is not the best choice. SSL VPN's are a better choice. D. Disable Diffie-Hellman by using stronger certificate based key-derivation. Use AES-256 bit on all encrypted channels and add PFS to QuickMode. Use double encryption by implementing AH and ESP as protocols.

Correct Answer: B

Question 5

When migrating the SmartEvent data base from one server to another, the first step is to back up the files on the original server. Which of the following commands should you run to back up the SmartEvent data base?

A. migrate export B. eva_db_backup C. snapshot D. backup

Correct Answer: B

Question 6

SandBlast agent extends 0 day prevention to what part of the network?

A. Cloud B. Web Browsers and user devices C. DMZ server D. Email servers

Correct Answer: B

Question 7

A ClusterXL configuration is limited to ___ members.

A. There is no limit. B. 16 C. 2 D. 6

Correct Answer: D

Question 8

MegaCorp is using SmartCenter Server with several gateways. Their requirements result in a heavy log load. Would it be feasible to add the SmartEvent Correlation Unit and SmartEvent Server to their SmartCenter Server?

A. Yes. SmartEvent must be installed on your SmartCenter Server. B. No. If SmartCenter is already under stress, the use of a separate server for SmartEvent is recommended. C. No, SmartEvent and Smartcenter cannot be installed on the same machine at the same time. D. No. SmartCenter SIC will interfere with the function of SmartEvent.

Correct Answer: B

Question 9

The following command is used to verify the CPUSE version:

A. HostName:0>show installer status build B. [Expert@HostName:0]#show installer status C. [Expert@HostName:0]#show installer status build D. HostName:0>show installer build

Correct Answer: A

Question 10

Which of the following process pulls applications monitoring status?

A. fwm B. cpwd C. fwd D. cpd

Correct Answer: B

CheckPoint Check Point Certified Security Expert Update - R80 - 156-915.80 Exam Practice Test