CheckPoint Check Point Certified Security Master - R80

QUESTION NO: 1
Which Threat Prevention daemon is the core Threat Emulation engine and responsible for emulation files and communications with Threat Cloud?

A. in.msd B. scrub C. ted D. ctasd

Correct Answer: C

QUESTION NO: 2
The CPM process uses what ports?

A. 18265 and 9009 B. 18265 and 257 C. 19009 and 9009 D. 19009 and 18120

Correct Answer: C

QUESTION NO: 3
Static NAT has been configured and NAT rules were created automatically. The global properties option
"Translate destination on client side" is not checked. Clients are complaining that they are not able to connect to one of your web servers using its public address. How would you solve the problem without changing the global properties and reinstalling the security policy?

A. Configure manual NAT B. Rebooting the security gateway will resolve the problem C. On the security gateway, add a static route for the web server's public ip address D. You will have the global properties and reinstall the security policy

Correct Answer: A

QUESTION NO: 4
When running a debug with fw monitor, which parameter will create a more verbose output?

A. -l B. -i C. -D D. -d

Correct Answer: C

QUESTION NO: 5
Which command would show the synchronization statistics between cluster members?

A. fw ctl sync B. cphaprob stat C. cphaprob sync D. fw ctl pstat

Correct Answer: D

QUESTION NO: 6
How often will a gateway with Performance Pack running by default automatically review and distribute interface affinity between cores?

A. Interface affinity is determined at gateway build time and does not change B. Every 10 seconds C. Every 5 minutes D. Every 60 seconds

Correct Answer: D

QUESTION NO: 7
What is the role of FWM process in Check Point R80.10 Security Management architecture?

A. FWM prepares and loads commit functions to execute the policy B. Policy installation command initiated from SmartConsole is sent to FWM C. FWM is used to transfer CPsets from management to the gateway D. It is called by CPM process to perform verification and conversion of the database

Correct Answer: B

QUESTION NO: 8
Which command would show you the status of the clustered interfaces as well as the virtual interfaces?

A. cphaprob -a if B. cphaprob -i if C. cphaprob if stat D. cphaprob -i list

Correct Answer: A

QUESTION NO: 9
Which of the following ports are used for SIC?

A. 18210 and 18211 B. 18192 and 18193 C. 18355 and 18356 D. 257 and 258

Correct Answer: A

QUESTION NO: 10
Having a look at the output of the "fwaccel conns" command, the F flag is the indicator for a packet
.

A. being processed by the firewall kernel module B. getting the routing information according to the Forwarding Information Base (FIB) C. going through the slow path D. being forced of using the accelerated path

Correct Answer: A

QUESTION NO: 11
Where will the command, "fw monitor -pi -vpn", be inserted into the fw ctl chain?

A. Before the vpn module B. After the vpn module C. Before the Fw VM inbound D. After the Fw VM outbound

Correct Answer: A

QUESTION NO: 12
When an object is created via SmartConsole or the API server, a command is sent to which process?

A. To the FWM process B. To the CPM process C. To the CPD process D. To the FWD process

Correct Answer: B

QUESTION NO: 13
Which of the connections cannot be accelerated with SecureXL?

A. Every connection destined to the Security Gateways B. Every encrypted connection, such as HTTPS or SSH connections C. Every NAT'ed connection D. Every connection through a rule using a time object

Correct Answer: C

QUESTION NO: 14
Regarding the Database Domains, which of the following best describes the System Domain?

A. The database that contains administrator data, folders, domains, trusted GUI clients, permissions profiles, and management settings. B. This domain is used as the Global database for MDSM and contains global objects and policies. C. The database stores user-modified configurations, such as network objects and security policies. In a Multi Domain environment, each domain contains a separate User Domain type. D. The database contains configuration data of log servers and saved queries for applications.

Correct Answer: A

CheckPoint Check Point Certified Security Master - R80 - 156-115.80 Exam Questions