156-915.80 | 10 Tips For Replace 156-915.80 dumps

New Questions 2

Your customer, Mr. Smith needs access to other networks and should be able to use all services. Session authentication is not suitable. You select Client Authentication with HTTP. The standard authentication port for client HTTP authentication (Port 900) is already in use. You want to use Port 9001 but are having connectivity problems. Why are you having problems?

A. The configuration file $FWDIR/conf/fwauthd.conf is incorrect.

B. The Security Policy is not correct.

C. You can't use any port other than the standard port 900 for Client Authentication via HTTP.

D. The service FW_clntauth_http configuration is incorrect.

Answer: A

New Questions 3

After implementing Static Address Translation to allow Internet traffic to an internal Web Server on your DMZ, you notice that any NATed connections to that machine are being dropped by anti-spoofing protections. Which of the following is the MOST LIKELY cause?

A. The Global Properties setting Translate destination on client side is unchecked. But the topology on the DMZ interface is set to Internal - Network defined by IP and Mask. Check the Global Properties setting Translate destination on client side.

B. The Global Properties setting Translate destination on client side is unchecked. But the topology on the external interface is set to Others +. Change topology to External.

C. The Global Properties setting Translate destination on client side is checked. But the topology on the external interface is set to External. Change topology to Others +.

D. The Global Properties setting Translate destination on client side is checked. But the topology on the DMZ interface is set to Internal - Network defined by IP and Mask. Uncheck the Global Properties setting Translate destination on client side.

Answer: A

New Questions 4

A host on the Internet initiates traffic to the Static NAT IP of your Web server behind the Security Gateway. With the default settings in place for NAT, the initiating packet will translate the .

A. destination on server side

B. source on server side

C. source on client side

D. destination on client side

Answer: D

New Questions 5

What is the purpose of the pre-defined exclusions included with SmartEvent R80?

A. To allow SmartEvent R80 to function properly with all other R71 devices.

B. To avoid incorrect event generation by the default IPS event definition; a scenario that may occur in deployments that include Security Gateways of versions prior to R71.

C. As a base for starting and building exclusions.

D. To give samples of how to write your own exclusion.

Answer: B

New Questions 6

VPN Tunnel Sharing can be configured with any of the options below, EXCEPT One:

A. Gateway-based

B. Subnet-based

C. IP range based

D. Host-based

Answer: C

Explanation:

VPN Tunnel Sharing provides interoperability and scalability by controlling the number of VPN tunnels created between peer Security Gateways. There are three available settings:

One VPN tunnel per each pair of hosts One VPN tunnel per subnet pair

One VPN tunnel per Security Gateway pair

New Questions 7

Which CLI tool helps on verifying proper ClusterXL sync?

A. fw stat

B. fw ctl sync

C. fw ctl pstat

D. cphaprob stat

Answer: C

New Questions 8

Fill in the blank with a numeric value. The default port number for standard TCP connections with the LDAP server is

Answer:

389

New Questions 9

You are about to integrate RSA SecurID users into the Check Point infrastructure. What kind of users are to be defined via SmartDashboard?

A. A group with generic user

B. All users

C. LDAP Account Unit Group

D. Internal user Group

Answer: A

New Questions 10

How many pre-defined exclusions are included by default in SmartEvent R80 as part of the product installation?

A. 5

B. 0

C. 10

D. 3

Answer: D

New Questions 11

When migrating the SmartEvent data base from one server to another, the last step is to save the files on the new server. Which of the following commands should you run to save the SmartEvent data base files on the new server?

A. cp

B. restore

C. migrate import

D. eva_db_restore

Answer: D