156-215.80 Check-Point Exam Questions and Free Practice Test

Question 43

- (Exam Topic 4)
In R80 Management, apart from using SmartConsole, objects or rules can also be modified using:

A. 3rd Party integration of CLI and API for Gateways prior to R80.

B. A complete CLI and API interface using SSH and custom CPCode integration.

C. 3rd Party integration of CLI and API for Management prior to R80.

D. A complete CLI and API interface for Management with 3rd Party integration.

Correct Answer:B

Question 44

- (Exam Topic 1)
Which utility allows you to configure the DHCP service on GAIA from the command line?

A. ifconfig

B. dhcp_cfg

C. sysconfig

D. cpconfig

Correct Answer:C
Sysconfig Configuration Options
156-215.80 dumps exhibit

Question 45

- (Exam Topic 2)
Which command is used to obtain the configuration lock in Gaia?

A. Lock database override

B. Unlock database override

C. Unlock database lock

D. Lock database user

Correct Answer:A
Obtaining a Configuration Lock
lock database override
unlock database

Question 46

- (Exam Topic 2)
What action can be performed from SmartUpdate R77?

A. upgrade_export

B. fw stat -1

C. cpinfo

D. remote_uninstall_verifier

Correct Answer:C

Question 47

- (Exam Topic 4)
To enforce the Security Policy correctly, a Security Gateway requires:

A. a routing table

B. awareness of the network topology

C. a Demilitarized Zone

D. a Security Policy install

Correct Answer:B
The network topology represents the internal network (both the LAN and the DMZ) protected by the gateway. The gateway must be aware of the layout of the network topology to:
Correctly enforce the Security Policy.
Ensure the validity of IP addresses for inbound and outbound traffic.
Configure a special domain for Virtual Private Networks.

Question 48

- (Exam Topic 1)
Choose what BEST describes the Policy Layer Traffic Inspection.

A. If a packet does not match any of the inline layers, the matching continues to the next Layer.

B. If a packet matches an inline layer, it will continue matching the next layer.

C. If a packet does not match any of the inline layers, the packet will be matched against the Implicit Clean-up Rule.

D. If a packet does not match a Network Policy Layer, the matching continues to its inline layer.

Correct Answer:B

START 156-215.80 EXAM