Introducing The New!
Surepassexam Collection
Get Unlimited Access to all
Surepassexam's PREMIUM files
P.S. Top Quality 156-915.80 software are available on Google Drive, GET MORE: https://drive.google.com/open?id=10nZGq46vgX7-YMephRQOtbIjmfJ8w6LL
Question No: 8
Which file gives you a list of all security servers in use, including port number?
A. $FWDIR/conf/conf.conf
B. $FWDIR/conf/servers.conf
C. $FWDIR/conf/fwauthd.conf
D. $FWDIR/conf/serversd.conf
Answer: C
Question No: 9
Where can you find the Check Pointu2021s SNMP MIB file?
A. $CPDIR/lib/snmp/chkpt.mib
B. $FWDIR/conf/snmp.mib
C. It is obtained only by request from the TAC.
D. There is no specific MIB file for Check Point products.
Answer: A
Question No: 10
Which of the following authentication methods can be configured in the Identity Awareness setup wizard?
A. Check Point Password
B. TACACS
C. LDAP
D. Windows password
Answer: C
Question No: 11
Which is a suitable command to check whether Drop Templates are activated or not?
A. fw ctl get int activate _drop_ templates
B. fwaccel stat
C. fwaccel stats
D. fw ctl templates u2013d
Answer: B
Question No: 12
Many companies have defined more than one administrator. To increase security, only one administrator should be able to install a Rule Base on a specific Firewall. How do you configure this?
A. Define a permission profile in SmartDashboard with read/write privileges, but restrict it to all other firewalls by placing them in the Policy Targets field. Then, an administrator with this permission profile cannot install a policy on any Firewall not listed here.
B. Put the one administrator in an Administrator group and configure this group in the specific Firewall
object in Advanced > Permission to Install.
C. In the object General Properties representing the specific Firewall, go to the Software Blades product list and select Firewall. Right-click in the menu, select Administrator to Install to define only this administrator.
D. Right-click on the object representing the specific administrator, and select that Firewall in Policy Targets.
Answer: B
Question No: 13
What is the purpose of Priority Delta in VRRP?
A. When a box is up, Effective Priority = Priority + Priority Delta
B. When an Interface is up, Effective Priority = Priority + Priority Delta
C. When an Interface fail, Effective Priority = Priority u2013 Priority Delta
D. When a box fail, Effective Priority = Priority u2013 Priority Delta
Answer: C
Explanation:
Each instance of VRRP running on a supported interface may monitor the link state of other interfaces. The monitored interfaces do not have to be running VRRP. If a monitored interface loses its link state, then VRRP will decrement its priority over a VRID by the specified delta value and then will send out a new VRRP HELLO packet. If the new effective priority is less than the priority a backup platform has, then the backup platform will beging to send out its own HELLO packet. Once the master sees this packet with a priority greater than its own, then it releases the VIP.
Question No: 14
How can you check whether IP forwarding is enabled on an IP Security Appliance?
A. clish -c show routing active enable
B. cat /proc/sys/net/ipv4/ip_forward
C. echo 1 > /proc/sys/net/ipv4/ip_forward
D. ipsofwd list
Answer: D
Question No: 15
The CDT utility supports which of the following?
A. Major version upgrades to R77.30
B. Only Jumbo HFAu2021s and hotfixes
C. Only major version upgrades to R80.10
D. All upgrades
Answer: D
Explanation:
The Central Deployment Tool (CDT) is a utility that runs on an R77 / R77.X / R80 / R80.10 Security Management Server / Multi-Domain Security Management Server (running Gaia OS).
It allows the administrator to automatically install CPUSE Offline packages (Hotfixes, Jumbo Hotfix
Accumulators (Bundles), Upgrade to a Minor Version, Upgrade to a Major Version) on multiple managed Security Gateways and Cluster Members at the same time.
Question No: 16
Type the full fw command and syntax that allows you to disable only sync on a cluster firewall member. Answer:
fw ctl setsync off
Answer:
Question No: 17
To qualify as an Identity Awareness enabled rule, which column MAY include an Access Role?
A. Action
B. Source
C. User
D. Track
Answer: B
P.S. Easily pass 156-915.80 Exam with Certifytools Top Quality Dumps & pdf vce, Try Free: https://www.certifytools.com/156-915.80-exam.html ( New Questions)