Check Point Certified Security Master - R80 - 156-115.80 Exam Practice Test

Question 1

What effect would change the parameter of fwha_timer_cpha_res to 5 have on a cluster?

A. Change the sync network timeout to 5 seconds

B. Change the cphad to send test packets every 5 milliseconds

C. Change the failover delay timeout to 500 milliseconds

D. Change the cluster interface active check to 5 milliseconds

Correct Answer: C

Question 2

Where do Protocol parsers register themselves for IPS?

A. Other handlers register to Protocol parser

B. Passive Streaming Library

C. Context Management Infrastructure

D. Protections database

Correct Answer: B

Question 3

In order to review the IPS statistics to determine if adjustments can be made to improve performance, which command would you use to get the appropriate information?

A. $FWDIR/scripts/get_ips_statistics.sh 10.1.1.1 60

B. fw monitor -e "accept IPS_stats;" >> ips_statistics.xml

C. fw ctl debug -m ips debug_compilation

D. fw ctl set int enable_ips_debug_output 1

Correct Answer: A

Question 4

You have configured IPS Bypass Under Load function with additional kernel parameters:
ids_tolerance_no_stress=15 and ids_tolerance_stress=15. For configuration you used the "fw ctl set" command. After reboot you noticed that these parameters returned to their default values. What do you need to do to make this configuration work immediately and stay permanent?

A. Edit appropriate parameters in $FWDIR/boot/modules/fwkern.conf

B. Use script $FWDIR/bin IpsSetBypass.sh to set these parameters

C. Set these parameters again with "fw ctl set" and edit appropriate parameters in $FWDIR/boot/modules/ fwkern.conf

D. Set these parameters again with "fw ctl set" and save configuration with "save config"

Correct Answer: D

Question 5

Which daemon process performs asymmetric key operations for HTTPS Inspection?

A. httpkd

B. wstlsd

C. httpsd

D. pkxld

Correct Answer: D

Question 6

While using IPS, the network performance is being impacted on a load sharing cluster with asymmetric routes.
What is most likely causing the degradation?

A. CoreXL has been disabled

B. A failure in the sync network protocol

C. SecureXL has been disabled

D. A static NAT has been configured and an IPS protection requires the connection be handled on the same cluster member

Correct Answer: A

Question 7

Which command would show the synchronization statistics between cluster members?

A. cphaprob sync

B. fw ctl pstat

C. fw ctl sync

D. cphaprob stat

Correct Answer: B

Question 8

What is the command to check the current status of hyper-threading?

A. cat/proc/hyperstats

B. cat/proc/smt_status

C. fw ctl get int cphwd_hyper_status

D. fw ctl multik stat

Correct Answer: B

Question 9

How many layers are incorporated in IPS detection and what are they called?

A. 4 layers - Active Streaming Library (ASL), Protocol Parsers, Context Management, Protections

B. 4 layers - Passive Streaming Library (PSL), Protocol Parsers, Context Management, Protections

C. 3 layers - Protocol Parsers, CMI, Protections

D. 3 layers - Active Streaming Library (ASL), CMI, Protections

Correct Answer: B

Question 10

The pepd and pdpd daemons are used by which Software blade?

A. Application Control

B. URL Filtering

C. Identity Awareness

D. DLP

Correct Answer: C

Question 11

When debugging object configurations in SmartConsole, which new Windows Environment Variable must be added?

A. EMBEDDED_CPSC_LOG

B. EMBEDDED_SCDB_LOG

C. EMBEDDED_SDB_LOG

D. EMBEDDED_DBS_log

Correct Answer: C

Question 12

Which file would you need to make sure you collect when debugging a VPN that fails to establish that is configured to use IKEv2?

A. $FWDIR/log/ike2.elg

B. $FWDIR/log/ikev2.xml

C. $CPDIR/log/ike.elg

D. $FWDIR/log/vpnd.xml.v2

Correct Answer: B

CheckPoint Check Point Certified Security Master - R80 - 156-115.80 Exam Practice Test

Latest Update

Useful Links

Contact Us