156-915.80 Free Practice Test

- (Exam Topic 3)
What is Check Point's CoreXL?

1. A. A way to synchronize connections across cluster members
2. B. TCP-18190
3. C. Multiple core interfaces on the device to accelerate traffic
4. D. Multi Core support for Firewall Inspection

Correct Answer: D

- (Exam Topic 3)
If you need strong protection for the encryption of user data, what option would be the BEST choice?

1. A. Use Diffie-Hellman for key construction and pre-shared keys for Quick Mod
2. B. Choose SHA in Quick Mode and encrypt with AE
3. C. Use AH protoco
4. D. Switch to Aggressive Mode.
5. E. When you need strong encryption, IPsec is not the best choic
6. F. SSL VPN’s are a better choice.
7. G. Use certificates for Phase 1, SHA for all hashes, AES for all encryption and PFS, and use ESP protocol.
8. H. Disable Diffie-Hellman by using stronger certificate based key-derivatio
9. I. Use AES-256 bit on all encrypted channels and add PFS to QuickMod
10. J. Use double encryption by implementing AH and ESP as protocols.

Correct Answer: C

- (Exam Topic 3)
Which of the following items should be configured for the Security Management Server to authenticate via LDAP?

1. A. Check Point Password
2. B. Active Directory Server object
3. C. Windows logon password
4. D. WMI object

Correct Answer: B

- (Exam Topic 3)
To qualify as an Identity Awareness enabled rule, which column MAY include an Access Role?

1. A. Action
2. B. Source
3. C. User
4. D. Track

Correct Answer: B

- (Exam Topic 2)
You want to generate a cpinfo file via CLI on a system running GAiA. This will take about 40 minutes since the log files are also needed. What action do you need to take regarding timeout?

1. A. No action is needed because cpshell has a timeout of one hour by default.
2. B. Log in as the default user expert and start cpinfo.
3. C. Log in as admin, switch to expert mode, set the timeout to one hour with the command, idle 60, then start cpinfo.
4. D. Log in as Administrator, set the timeout to one hour with the command idle 60 and start cpinfo.

Correct Answer: D