P.S. Virtual 156-915.80 preparation are available on Google Drive, GET MORE: https://drive.google.com/open?id=1UHtXnNXw0Sz3rmLlziAf9CI0FDZ1fvFf
New Questions 3
You have configured Automatic Static NAT on an internal host-node object. You clear the box Translate destination on client site from Global Properties > NAT. Assuming all other NAT settings in Global Properties are selected, what else must be configured so that a host on the Internet can initiate an inbound connection to this host?
A. No extra configuration is needed.
B. A proxy ARP entry, to ensure packets destined for the public IP address will reach the Security Gateway's external interface.
C. The NAT IP address must be added to the external Gateway interface anti-spoofing group.
D. A static route, to ensure packets destined for the public NAT IP address will reach the Gateway's internal interface.
Answer: D
New Questions 4
Using mgmt_cli, what is the correct syntax to import a host object called Server_1 from the CLI?
A. mgmt_cli add-host u201cServer_1u201d ip_ address u201c10.15.123.10u201d u2013 format txt
B. mgmt_ cli add host name u201cServer_ 1u201d ip-address u201c10.15.123.10u201d u2013 format json
C. mgmt_ cli add object-host u201cServer_ 1u201d ip-address u201c10.15.123.10u201d u2013 format json
D. mgmt_cli add object u201cServer_ 1u201d ip-address u201c10.15.123.10u201d u2013 format json
Answer: B
Explanation: Example:
mgmt_cli add host name "New Host 1" ip-address "192.0.2.1" --format json
u2022 "--format json" is optional. By default the output is presented in plain text.
New Questions 5
What gives administrators more flexibility when configuring Captive Portal instead of LDAP query for Identity Awareness authentication?
A. Captive Portal is more secure than standard LDAP
B. Nothing, LDAP query is required when configuring Captive Portal
C. Captive Portal works with both configured users and guests
D. Captive Portal is more transparent to the user
Answer: C
New Questions 6
When using AD Query to authenticate users for Identity Awareness, identity data is received seamlessly from the Microsoft Active Directory (AD). What is NOT a recommended usage of this method?
A. Leveraging identity in the application control blade
B. Basic identity enforcement in the internal network
C. Identity-based auditing and logging
D. Identity-based enforcement for non-AD users (non-Windows and guest users)
Answer: D
New Questions 7
Fill in the blank with a numeric value. The default port number for standard TCP connections with the LDAP server is
Answer:
389
New Questions 8
MultiCorp is running Smartcenter R71 on an IPSO platform and wants to upgrade to a new Appliance with R80. Which migration tool is recommended?
A. Download Migration Tool R80 for IPSO and Splat/Linux from Check Point website.
B. Use already installed Migration Tool.
C. Use Migration Tool from CD/ISO
D. Fetch Migration Tool R71 for IPSO and Migration Tool R80 for Splat/Linux from CheckPoint website
Answer: A
New Questions 9
What command syntax would you use to turn on PDP logging in a distributed environment?
A. pdp track=1
B. pdp tracker on
C. pdp logging on
D. pdp log=1
Answer: B
New Questions 10
Which packet info is ignored with Session Rate Acceleration?
A. source port ranges
B. source ip
C. source port
D. same info from Packet Acceleration is used
Answer: C
New Questions 11
Access Role objects define users, machines, and network locations as:
A. Credentialed objects
B. Linked objects
C. One object
D. Separate objects
Answer: C
New Questions 12
Which command would provide the most comprehensive diagnostic information to Check Point Technical Support?
A. fw cpinfo
B. cpinfo -o date.cpinfo.txt
C. diag
D. cpstat - date.cpstat.txt
Answer: B
P.S. Easily pass 156-915.80 Exam with Examcollectionplus Virtual Dumps & pdf vce, Try Free: https://www.examcollectionplus.net/vce-156-915.80/ ( New Questions)