New 2021 Guaranteed Success with ActualVCE 156-115.80 Dumps CheckPoint PDF Questions
Exceptional Practice To Check Point Certified Security Master - R80 Pass the First Time
NEW QUESTION 48
You suspect that IPS protections may be dropping legitimate traffic by mistake. To reduce the false positives, what GuiDBedit parameter could you enable to work with fw ctl zdebug drop to generate a more elaborate drop message for these packets?
- A. enable_inspect_debug_ips_compilation
- B. enable_inspect_debug_ips
- C. enable_inspect_debug_compilation
- D. inspect_ips_debug_inspection
Answer: C
NEW QUESTION 49
What must be done for the "fw monitor" command to capture packets through the firewall kernel?
- A. ClusterXL must be temporarily disabled
- B. Firewall policy must be re-installed
- C. SecureXL must be disabled
- D. The output file must be transferred to a machine with WireShark
Answer: C
NEW QUESTION 50
The R80 feature__________ permits bloking specific IP address for specified time period.
- A. Local Interface Spoofing
- B. Adaptive Threat Prevention
- C. Suspicious Activity Monitoring
- D. Block Port Overflow
Answer: C
NEW QUESTION 51
A Firewall administrator is attempting to push a policy to a new Security Gateway for a remote office but the installation fails. The Management Server IP is 10.1.1.101. Initial troubleshooting shows that policy is successfully transferred to the Gateway. What command would you use to attempt to identify the cause of the issue?
- A. fw fetchlocal -d $FWDIR/state/_tmp/FW1
- B. cp_merge export_policy -s 10.1.1.101 -n Standard $var/log/
- C. fw ctl debug -m 10.1.1.101
- D. fw ctl debug -T -f > /var/log/p_debug.txt
Answer: B
NEW QUESTION 52
Which file would you need to make sure you collect when debugging a VPN that fails to establish that is configured to use IKEv2?
- A. $FWDIR/log/ikev2.xml
- B. $FWDIR/log/vpnd.xml.v2
- C. $SPDIR/log/ike.elg
- D. $FWDIR/log/ike2.elg
Answer: C
NEW QUESTION 53
Which of the following features is supported in Check Point's implementation of Ipv6?
- A. QoS
- B. Security Servers
- C. ClusterXL High Availability
- D. SAM
Answer: C
NEW QUESTION 54
What is the difference between disabling Secure XL by running "fwaccel off" and disabling it via cpconfig?
- A. Cpconfig option is available only on the security manager.
- B. Disabling Secure XL in cpconfig survives reboot.
- C. "fwaccel off " will survive the reboot but cpconfig will not
- D. There is no difference. These are two different ways of accomplishing the same task.
Answer: B
Explanation:
Reference:
https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolution details=&solutionid=sk41397
NEW QUESTION 55
The maximum number of critical devices or p notes on a cluster member is what?
- A. 0
- B. 1
- C. 2
- D. 3
Answer: C
Explanation:
Reference:
https://sc1.checkpoint.com/documents/R76/CP_R76_ClusterXL_AdminGuide/7298.htm
NEW QUESTION 56
The pepd and add daemons are used by which Software blade?
- A. URL Filtering
- B. DLP
- C. Application Control
- D. Identity Awareness
Answer: D
NEW QUESTION 57
Where will command, "fw monitor -pi -vpn", be inserted into the fw ctl chain?
- A. After the Fw Vm outbound
- B. Before the vpn module
- C. Before the FW VM inbound
- D. After the vpn module
Answer: C
NEW QUESTION 58
Which Check Point daemon, if it stops responding or goes down, results in connections from the SmartConsole to the Management Server failing?
- A. CPM
- B. SMSD
- C. CPTA
- D. FWD
Answer: A
NEW QUESTION 59
Which of the following commands can be used to see the list of processes monitored by the Watch Dog process?
- A. Ps -ef I grep watchd
- B. Cpstal fw -f watchidog
- C. Cpwd_admin list
- D. Fw ctl get str watchdog
Answer: C
NEW QUESTION 60
Your customer is experiencing problems connecting to the Security Management . Server via Smart Console. You suggest testing the connection to the SMS with GUDBedit from the client machine. This connection was successful. Now you suggest enabling debug to investigate possible issues with connections to SMS via Smart Console . Which process does the customer need t debug on the SMS?
- A. Fwd
- B. Cpd
- C. Fwm
- D. Cpm
Answer: D
NEW QUESTION 61
On a production Check Point Gateway that is running Check Point Acceleration features, is it possible to reset SIC without affecting the production machines?
- A. Yes, use the vi utility to edit CP HKLM_registry.data Registry File
- B. No, Reset SIC on the Gateway first and then in SmartConsole
- C. Yes, use the cp_conf command
- D. No, Reset SIC using cpconfig during a change window
Answer: C
NEW QUESTION 62
The fw monitor output file type is?
- A. tar.gzip
- B. ASCII text
- C. ZIP
- D. Binary
Answer: B
NEW QUESTION 63
The CPM process user what ports?
- A. 18265 and 257
- B. 19009 and 18120
- C. 18265 and 9009
- D. 19009 and 9009
Answer: D
Explanation:
Reference:
https://sc1.checkpoint.com/documents/R80/CP_R80_MultiDomainSecurity/html_frameset.h tm?topic=documents/R80/CP_R80_MultiDomainSecurity/15420
NEW QUESTION 64
Which one of following commands should you run to display HTTPS packet content together with kernel debug?
- A. fw ctl get int https_inspection_show_decrypted_data_in_debug=1
fw ctl get int ssl_inspection_extra_debug=1 - B. fw ctl set int https_inspection_show_decrypted_data_in_debug 1
fw ctl set int ssl_inspection_extra_debug 1 - C. fw set int https_inspection_get_encrypted_data_in_debug 1
fw set int https_inspection_show_debug 1 - D. fw ctl set int http_inspection_display_encrypted_data_in_debug=1
fw ctl set int http_inspection_extra_debug=1
Answer: B
NEW QUESTION 65
When running a debug with fw monitor, which parameter will create a more verbose output?
- A. -D
- B. -i
- C. -d
- D. -I
Answer: A
Explanation:
Reference:
https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolution details=&solutionid=sk30583
NEW QUESTION 66
What is the default and maximum number of entries in the ARP Cache Table in a Check Point appliance?
- A. 1,024 and 4,096
- B. 4,096 and 16,384
- C. 4,096 and 65,536
- D. 1,024 and 65,536
Answer: B
NEW QUESTION 67
How often will a gateway with Performance Pack running by default automatically review and distribute interface affinity between cores?
- A. Every 5 minutes
- B. Every 10 minutes
- C. Interface affinity is determined at gateway build time and does not change
- D. Every 60 seconds
Answer: D
NEW QUESTION 68
What file extension should be used with fw monitor to allow the output file to be imported and read in Wireshark?
- A. .pcap
- B. .exe
- C. .tgz
- D. .cap
Answer: D
NEW QUESTION 69
Which file would you need to make sure you collect when debugging a VPN that fails to establish that is configured to use IKEv2?
- A. $FWDIR/log/ikev2.xml
- B. $SPDIR/log/ike.elg
- C. $FWDIR/log/ike2.elg
- D. $FWDIR/log/vpnd.xml.v2
Answer: D
NEW QUESTION 70
Having a look at the output of the "fwaccel conns" command, the F flag is the indicator a packet_______.
- A. Getting the routing information according to the Forwarding Information Base (FIB)
- B. Going through the slow path
- C. Being forced of using the accelerated path.
- D. Being processed by the firewall kernel module
Answer: B
NEW QUESTION 71
You run "cat/proc/smt_status" on your security gateway and the output shows 'Soft Disable'. How is your system configured in reference to hyper-threading?
- A. Your system does not support Hyper-threading
- B. Hyper -threading is disabled in BIOS but disabled in pconfig
- C. Hyper -threading is disabled in BIOS but enabled in pconfig
- D. Hyper -threading is disabled in BIOS and cpconfig
Answer: C
NEW QUESTION 72
Which type of SecureXL templates is enabled by default on Security Gateways?
- A. Drop
- B. VPN
- C. NAT
- D. Accept
Answer: D
NEW QUESTION 73
......
156-115.80 EXAM DUMPS WITH GUARANTEED SUCCESS: https://www.actualvce.com/CheckPoint/156-115.80-valid-vce-dumps.html