156-115.80

What is the difference between disabling SecureXL by running “fwaccel off” and disabling it via cpconfig?A . Disabling SecureXL in cpconfig survives rebootB . cpconfig option is available only on the security managerC . There is no difference. These are two different ways of accomplishing the same taskD . “fwaccel...

Which daemon would you debug if you have issues acquiring identities via identity sharing and identities with other gateways?A . pdpdB . wstlsdC . iadD . pepdView AnswerAnswer: A Explanation: Reference: https://sc1.checkpoint.com/documents/R76/CP_R76_IdentityAwareness_AdminGuide/66477.htm

Which of the connections cannot be accelerated with SecureXL?A . Every NAT’ed connectionB . Every encrypted connection, such as HTTPS or SSH connectionsC . Every connection destined to the Security GatewaysD . Every connection through a rule using a time objectView AnswerAnswer: A

What occurs when Bypass Under Load activated?A . Packets are forwarded to the destination without checking the packets against the firewall rule baseB . Packets are forwarded to the destination without performing IPS analysisC . To still ensure a minimum level of data integrity, the system revert to the use...

Consider a Check Point Security Gateway under high load. What mechanism can be used to confirm that important traffic such as control connections are not dropped?A . fw debug fgd50 on OPSEC_DEBUG_LEVEL=3B . fw ctl multik prioqC . fgate Cd loadD . fw ctl debug Cm fg allView AnswerAnswer: B

How many layers are incorporated in IPS detection and what are they called?A . 4 layers C Passive Streaming Library (PSL), Protocol Parsers, Context Management, ProtectionsB . 3 layers C Active Streaming Library (ASL), CMI, ProtectionsC . 4 layers C Active Streaming Library (ASL), Protocol Parsers, Context Management, ProtectionsD ....

In order to test ClusterXL failovers which command would you use on one of the ClusterXL nodes to initiate a failover?A . clusterXL_admin down -pB . cluster XL_admin up -pC . cphaprob -d TEST -s ok registerD . cphaprob -d TEST -s problem unregisterView AnswerAnswer: A Explanation: Reference: https://sc1.checkpoint.com/documents/R76/CP_R76_ClusterXL_AdminGuide/7298.htm#o97358

What is the default and maximum number of entries in the ARP Cache Table in a Check Point appliance?A . 1,024 and 4,096B . 4,096 and 16,384C . 4,096 and 65,536D . 1,024 and 16,384View AnswerAnswer: D Explanation: Reference: https://sc1.checkpoint.com/documents/R76/CP_R76_Gaia_WebAdmin/73181.htm

What is the correct command to turn off an IKE debug?A . vpn debug ikeoffB . fw ctl debug ikeoffC . vpn debug ikeoff 0D . fw ctl vpn debug ikeoffView AnswerAnswer: A Explanation: Reference: https://community.checkpoint.com/docs/DOC-3023-vpn-troubleshooting-commands

When enabling hyper-threading on a Security Gateway, the administrator needs to make sure there is enough _______________ to support additional CoreXL Firewall instances.A . drive spaceB . cpu’sC . available cacheD . available memoryView AnswerAnswer: D Explanation: Reference: https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk93000