156-915.80 Free Practice Test

- (Exam Topic 1)
When simulating a problem on CLusterXL cluster with cphaprob –d STOP –s problem –t 0 register, to initiate a failover on an active cluster member, what command allows you remove the problematic state?

1. A. cphaprob –d STOP unregister
2. B. cphaprob STOP unregister
3. C. cphaprob unregister STOP
4. D. cphaprob –d unregister STOP

Correct Answer: A
esting a failover in a controlled manner using following command;
# cphaprob -d STOP -s problem -t 0 register
This will register a problem state on the cluster member this was entered on;If you then run;
# cphaprob list
this will show an entry named STOP.
to remove this problematic register run following;
# cphaprob -d STOP unregister References:

- (Exam Topic 2)
You are a Security Administrator who has installed Security Gateway R80 on your network. You need to allow a specific IP address range for a partner site to access your intranet Web server. To limit the partner’s access for HTTP and FTP only, you did the following:
1) Created manual Static NAT rules for the Web server.
2) Cleared the following settings in the Global Properties > Network Address Translation screen:
- Allow bi-directional NAT
- Translate destination on client side
Do the above settings limit the partner’s access?

1. A. Ye
2. B. This will ensure that traffic only matches the specific rule configured for this traffic, and that the Gateway translates the traffic after accepting the packet.
3. C. N
4. D. The first setting is not applicabl
5. E. The second setting will reduce performance.
6. F. Ye
7. G. Both of these settings are only applicable to automatic NAT rules.
8. H. N
9. I. The first setting is only applicable to automatic NAT rule
10. J. The second setting will force translation by the kernel on the interface nearest to the client.

Correct Answer: D

- (Exam Topic 1)
Which one of these is NOT a firewall chain?

1. A. RTM packet in (rtm)
2. B. VPN node add (vpnad)
3. C. IP Options restore (in) (ipopt_res)
4. D. Fw SCV inbound (scv)

Correct Answer: B

- (Exam Topic 1)
What can you do to see the current number of kernel instances in a system with CoreXL enabled?

1. A. Browse to Secure Platform Web GUI
2. B. Only Check Point support personnel can access that information
3. C. Execute SmarDashboard client
4. D. Execute command cpconfig

Correct Answer: D

- (Exam Topic 3)
You want VPN traffic to match packets from internal interfaces. You also want the traffic to exit the Security Gateway bound for all site-to-site VPN Communities, including Remote Access Communities. How should you configure the VPN match rule?

1. A. internal_clear > All_communities
2. B. Internal_clear > External_Clear
3. C. Communities > Communities
4. D. internal_clear > All_GwToGw

Correct Answer: A