156-915.80 | Renovate Check Point 156-915.80 practice test

Question No: 4

Which of the following statements accurately describes the command upgrade_export?

A. upgrade_export stores network-configuration data, objects, global properties, and the database revisions prior to upgrading the Security Management Server.

B. Used primarily when upgrading the Security Management Server, upgrade_export stores all object databases and the /conf directories for importing to a newer Security Gateway version.

C. upgrade_export is used when upgrading the Security Gateway, and allows certain files to be included or excluded before exporting.

D. This command is no longer supported in GAiA.

Answer: B

Question No: 5

Fill in the blank. The user wants to replace a failed Windows-based firewall with a new server running GAiA.

For the most complete restore of an GAiA configuration, he or she will use the command

Answer:

migrate_import

Question No: 6

Which Check Point tool allows you to open a debug file and see the VPN packet exchange details.

A. PacketDebug.exe

B. VPNDebugger.exe

C. IkeView.exe

D. IPSECDebug.exe

Answer: C

Question No: 7

Which two processes are responsible on handling Identity Awareness?

A. pdp and lad

B. pdp and pdp-11

C. pep and lad

D. pdp and pep

Answer: D

Question No: 8

Which process should you debug if SmartDashboard login fails?

A. sdm

B. cpd

C. fwd

D. fwm

Answer: D

Question No: 9

How granular may an administrator filter an Access Role with identity awareness? Per:

A. Specific ICA Certificate

B. AD User

C. Radius Group

D. Windows Domain

Answer: B

Question No: 10

What is the purpose of Priority Delta in VRRP?

A. When a box is up, Effective Priority = Priority + Priority Delta

B. When an Interface is up, Effective Priority = Priority + Priority Delta

C. When an Interface fail, Effective Priority = Priority u2013 Priority Delta

D. When a box fail, Effective Priority = Priority u2013 Priority Delta

Answer: C

Explanation:

Each instance of VRRP running on a supported interface may monitor the link state of other interfaces. The monitored interfaces do not have to be running VRRP. If a monitored interface loses its link state, then VRRP will decrement its priority over a VRID by the specified delta value and then will send out a new VRRP HELLO packet. If the new effective priority is less than the priority a backup platform has, then the backup platform will beging to send out its own HELLO packet. Once the master sees this packet with a priority greater than its own, then it releases the VIP.

Question No: 11

The technical-support department has a requirement to access an intranet server. When configuring a User Authentication rule to achieve this, which of the following should you remember?

A. You can only use the rule for Telnet, FTP, SMTP, and rlogin services.

B. The Security Gateway first checks if there is any rule that does not require authentication for this type of connection before invoking the Authentication Security Server.

C. Once a user is first authenticated, the user will not be prompted for authentication again until logging

out.

D. You can limit the authentication attempts in the User Propertiesu2021 Authentication tab.

Answer: B

Question No: 12

What scenario indicates that SecureXL is enabled?

A. Dynamic objects are available in the Object Explorer

B. SecureXL can be disabled in cpconfig

C. fwaccel commands can be used in clish

D. Only one packet in a stream is seen in a fw monitor packet capture

Answer: C

Question No: 13

You have a diskless appliance platform. How do you keep swap file wear to a minimum?

A. Issue FW-1 bases its package structure on the Security Management Server, dynamically loading when the firewall is booted.

B. The external PCMCIA-based flash extension has the swap file mapped to it, allowing easy replacement.

C. Use PRAM flash devices, eliminating the longevity.

D. A RAM drive reduces the swap file thrashing which causes fast wear on the device.

Answer: D