156-915.80 | The Replace Guide To 156-915.80 examcollection

Q1. Which three of the following are ClusterXL member requirements?

1) same operating systems

2) same Check Point version

3) same appliance model

4) same policy

A. 1, 3, and 4

B. 1, 2, and 4

C. 2, 3, and 4

D. 1, 2, and 3

Answer: B

Q2. The CDT utility supports which of the following?

A. Major version upgrades to R77.30

B. Only Jumbo HFAu2021s and hotfixes

C. Only major version upgrades to R80.10

D. All upgrades

Answer: D

Explanation:

The Central Deployment Tool (CDT) is a utility that runs on an R77 / R77.X / R80 / R80.10 Security Management Server / Multi-Domain Security Management Server (running Gaia OS).

It allows the administrator to automatically install CPUSE Offline packages (Hotfixes, Jumbo Hotfix

Accumulators (Bundles), Upgrade to a Minor Version, Upgrade to a Major Version) on multiple managed Security Gateways and Cluster Members at the same time.

Q3. Complete this statement from the options provided. Using Captive Portal, unidentified users may be either; blocked, allowed to enter required credentials, or required to download the .

A. Identity Awareness Agent

B. Full Endpoint Client

C. ICA Certificate

D. SecureClient

Answer: A

Q4. Paul has just joined the MegaCorp security administration team. Natalie, the administrator, creates a new administrator account for Paul in SmartDashboard and installs the policy. When Paul tries to login it fails. How can Natalie verify whether Paulu2021s IP address is predefined on the security management server?

A. Login to Smart Dashboard, access Properties of the SMS, and verify whether Paulu2021s IP address is listed.

B. Type cpconfig on the Management Server and select the option u201cGUI client Listu201d to see if Paulu2021s IP address is listed.

C. Login in to Smart Dashboard, access Global Properties, and select Security Management, to verify whether Paulu2021s IP address is listed.

D. Access the WEBUI on the Security Gateway, and verify whether Paulu2021s IP address is listed as a GUI client.

Answer: B

Q5. Which of the following authentication methods can be configured in the Identity Awareness setup wizard?

A. Check Point Password

B. TACACS

C. LDAP

D. Windows password

Answer: C

Q6. When deploying multiple clustered firewalls on the same subnet, what does the firewall administrator need to configure to prevent CCP broadcasts being sent to the wrong cluster?

A. Set the fwha_mac_magic_forward parameter in the $CPDIR/boot/modules/ha_boot. conf

B. Set the fwha_mac_magic parameter in the $FWDIR/boot/fwkern.conf file

C. Set the cluster global ID using the command u201ccphaconf cluster_id set <value>u201d

D. Set the cluster global ID using the command u201cfw ctt set cluster_id <value>u201d

Answer: C

Q7. Where does the security administrator activate Identity Awareness within SmartDashboard?

A. Gateway Object > General Properties

B. Security Management Server > Identity Awareness

C. Policy > Global Properties > Identity Awareness

D. LDAP Server Object > General Properties

Answer: A

Q8. What happens if the identity of a user is known?

A. If the user credentials do not match an Access Role, the system displays the Captive Portal.

B. If the user credentials do not match an Access Role, the system displays a sandbox.

C. If the user credentials do not match an Access Role, the traffic is automatically dropped.

D. If the user credentials match an Access Role, the rule is applied and traffic is accepted or dropped based on the defined action.

Answer: D

Q9. Type the full cphaprob command and syntax that will show full synchronization status.

Answer:

cphaprob -i list

Q10. Fill in the blank. To remove site-to-site IKE and IPSEC keys you would enter command and select the option to delete all IKE and IPSec SAu2021s.

Answer:

vpn tu