156-915.80 Free Practice Test

- (Exam Topic 3)
What command with appropriate switches would you use to test Identity Awareness connectivity?

1. A. test_ldap
2. B. test_ad_connectivity
3. C. test_ldap_connectivity
4. D. test_ad

Correct Answer: B

- (Exam Topic 2)
You are the Security Administrator for MegaCorp. A Check Point firewall is installed and in use on a platform using GAiA. You have trouble configuring the speed and duplex settings of your Ethernet interfaces. Which of the following commands can be used in CLISH to configure the speed and duplex settings of an Ethernet interface and will survive a reboot? Give the BEST answer.

1. A. ethtool
2. B. set interface
3. C. mii_tool
4. D. ifconfig -a

Correct Answer: B

- (Exam Topic 1)
Sticky Decision Function (SDF) is required to prevent which of the following? Assume you set up an Active-Active cluster.

1. A. Symmetric routing
2. B. Failovers
3. C. Asymmetric routing
4. D. Anti-Spoofing

Correct Answer: C

- (Exam Topic 2)
John Adams is an HR partner in the ACME organization. ACME IT wants to limit access to HR servers to designated IP addresses to minimize malware infection and unauthorized access risks. Thus, the gateway policy permits access only from John's desktop which is assigned an IP address 10.0.0.19 via DHCP.
John received a laptop and wants to access the HR Web Server from anywhere in the organization. The IT department gave the laptop a static IP address, but that limits him to operating it only from his desk. The current Rule Base contains a rule that lets John Adams access the HR Web Server from his laptop. He wants to move around the organization and continue to have access to the HR Web Server.
To make this scenario work, the IT administrator:
1) Enables Identity Awareness on a gateway, selects AD Query as one of the Identity Sources installs the policy.
2) Adds an access role object to the Firewall Rule Base that lets John Adams PC access the HR Web Server from any machine and from any location.
John plugged in his laptop to the network on a different network segment and he is not able to connect. How does he solve this problem?

1. A. John should install the Identity Awareness Agent
2. B. The firewall admin should install the Security Policy
3. C. John should lock and unlock the computer
4. D. Investigate this as a network connectivity issue

Correct Answer: B

- (Exam Topic 1)
When Dynamic Dispatcher is enabled, connections are assigned dynamically with the exception of

1. A. Threat Emulation
2. B. HTTPS
3. C. QOS
4. D. VolP

Correct Answer: D
The following types of traffic are not load-balanced by the CoreXL Dynamic Dispatcher (this traffic will always be handled by the same CoreXL FW instance):