Use Real 156-115.80 - 100% Cover Real Exam Questions [Sep-2021]
Dumps Brief Outline Of The 156-115.80 Exam - Actualtests4sure
NEW QUESTION 57
Where will the usermode core files located?
- A. $FW3DIR/var/log/dump/usermode
- B. /var/log/dump/usermode
- C. /var/suroot
- D. $CPDIR/var/log/dump/usermode
Answer: B
Explanation:
Reference:
https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolution details=&solutionid=sk92764
NEW QUESTION 58
Which is the correct "fw monitor" syntax for creating a capture file for loading it into WireShark?
- A. This cannot be accomplished as it is not supported with R80.10
- B. fw monitor -e "accept <FILTER EXPRESSION>;" -file Output.cap
- C. fw monitor -e "accept <FILTER EXPRESSION>; ">> Output.cap
- D. fw monitor -e "accept <FILTER EXPRESSION>;" -o Output.cap
Answer: D
NEW QUESTION 59
When enabling hyper-threading on a Security Gateway, the administrator needs to make sure there is enough _______________ to support additional CoreXL Firewall instances.
- A. cpu's
- B. available memory
- C. drive space
- D. available cache
Answer: B
Explanation:
Explanation/Reference:
Reference: https://supportcenter.checkpoint.com/supportcenter/portal?
eventSubmit_doGoviewsolutiondetails=&solutionid=sk93000
NEW QUESTION 60
Which of the following is not one of the relational database domains that stores the management configuration?
- A. System Domain
- B. User Domain
- C. Audit Domain
- D. Global Domain
Answer: C
NEW QUESTION 61
Which of the following inputs is suitable for debugging HTTPS inspection issues?
- A. Vpn debug cptls on
- B. fw diag debug tls enable
- C. fw debug tls on TDERROR_ALL_ALL=5
- D. fw ctl debug-m fw + conn drop cptls
Answer: D
NEW QUESTION 62
Your company's site to site VPN tunnel has been established, however, some or all of the traffic is being dropped. Which one of the commands below could be used in troubleshooting the issue?
- A. fw ctl debug -m fw + drop conn ltd xlate xltrc nat
- B. fw ctl debug -f fw + conns drop xlate net
- C. fw ctl debug -p fw + conn pstat xlate xltrc nat
- D. fw ctl debug -m fw + conn drop ld xlate xltrc nat
Answer: D
NEW QUESTION 63
Static NAT has been configured and NAT rules were created automatically. The global properties option
"Translate destination on client side" is not checked. Clients are complaining that they are not able to connect to one of your web servers using its public address. How would you solve the problem without changing the global properties and reinstalling the security policy?
- A. You will have the global properties and reinstall the security policy
- B. Configure manual NAT
- C. Rebooting the security gateway will resolve the problem
- D. On the security gateway, add a static route for the web server's public ip address
Answer: B
NEW QUESTION 64
In order to review the IP statistics to determine if adjustments can be mode to improve performance, which command would you use to get the appropriate information?
- A. Fw ctl debug -m ips debug_commpilation
- B. Fw monitor -e ,accept IPS_stat' >> ips_statistics.xml
- C. Fw ctl set int enable_ips_debug_ouput 1
- D. $FWDIR/scripts/get_ips_statistics sh 10.1.1.1.60
Answer: B
NEW QUESTION 65
What is the command to check the current status of hyper-threading?
- A. cat/proc/hyperstats
- B. fw ctl get int cphwd_hyper_status
- C. fw ctl multik stat
- D. cat/proc/smt_status
Answer: D
Explanation:
Explanation/Reference:
Reference: https://supportcenter.checkpoint.com/supportcenter/portal?
eventSubmit_doGoviewsolutiondetails=&solutionid=sk93000#To%20check%20SMT%20current%20status
NEW QUESTION 66
When dealing with monolithic operating systems such as Giga, where are system calls initiated from to achieve a required system level function?
- A. Slow Path
- B. User Mode
- C. Kernel Mode
- D. Medium Path
Answer: B
NEW QUESTION 67
Which daemon would you debug if you have issues acquiring identities via identity sharing and identities with other gateways?
- A. pdpd
- B. pepd
- C. iad
- D. wstlsd
Answer: A
Explanation:
Explanation/Reference:
Reference: https://sc1.checkpoint.com/documents/R76/
CP_R76_IdentityAwareness_AdminGuide/66477.htm
NEW QUESTION 68
Which kernel table stores information about NAT connections?
- A. Xlate
- B. Fwx_alloc
- C. tab_nat_conn
- D. Connections
Answer: B
Explanation:
Reference:
https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolution details=&solutionid=sk32224
NEW QUESTION 69
Which of the following would NOT be a flag when debugging a unified policy?
- A. clob
- B. connection
- C. tls
- D. rulebase
Answer: C
NEW QUESTION 70
When enabling hyper-threading on a Security Gateway, the administrator needs to make sure three is enough ______ to support additional CoreXL Firewall instances.
- A. Available cache
- B. Available memory ::correct sk93000 <notes section>.
- C. Cpu's
- D. Drive space
Answer: B
Explanation:
Reference:
https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk93000
NEW QUESTION 71
Which of the following commands can be used to see the list of processes monitored by the Watch Dog process?
- A. Ps -ef I grep watchd
- B. Cpstal fw -f watchidog
- C. Cpwd_admin list
- D. Fw ctl get str watchdog
Answer: C
NEW QUESTION 72
The CPM process user what ports?
- A. 19009 and 9009
- B. 19009 and 18120
- C. 18265 and 257
- D. 18265 and 9009
Answer: C
NEW QUESTION 73
Which of the following commands can be used to see the list of processes monitored by the Watch Dog process?
- A. cpwd_admin list
- B. ps -ef | grep watchd
- C. fw ctl get str watchdog
- D. cpstat fw -f watchdog
Answer: A
NEW QUESTION 74
You verified that Performance Pack is disabled and need to distribute the affinity interfaces. What command is ran to use static affinity to balance the interfaces between the SND cores?
- A. fw ctl affinity -s
- B. cpmq set
- C. sim affinity -s
- D. fw ctl affinity -a -l -v
Answer: D
NEW QUESTION 75
Which of the following is NOT a feature of Cluster XL?
- A. Zero downtime for mession-critical environments with State Synchronization
- B. Transparent failover in case of device failovers
- C. Transparent upgrades
- D. Enhanced throughput in all Cluster XL modes (2 gateway cluster compared with 1 gateway)
Answer: D
Explanation:
Reference:
https://sc1.checkpoint.com/documents/R76/CP_R76_ClusterXL_AdminGuide/7292.htm
NEW QUESTION 76
In order to test ClusterXL failovers which command would you use on one of the ClusterXL nodes to initiate a failover?
- A. cphaprob -d TEST -s ok register
- B. cphaprob -d TEST -s problem unregister
- C. clusterXL_admin down -p
- D. cluster XL_admin up -p
Answer: C
NEW QUESTION 77
......
Certification Training for 156-115.80 Exam Dumps Test Engine: https://www.actualtests4sure.com/156-115.80-test-questions.html
