Get New 2021 CheckPoint exam 156-115.80 Dumps Bundle On flat Updated Dumps!
Full 156-115.80 Practice Test and 160 unique questions with explanations waiting just for you, get it now!
NEW QUESTION 52
Your customer is experiencing problems connecting to the Security Management . Server via Smart Console. You suggest testing the connection to the SMS with GUDBedit from the client machine. This connection was successful. Now you suggest enabling debug to investigate possible issues with connections to SMS via Smart Console . Which process does the customer need t debug on the SMS?
- A. Fwd
- B. Cpd
- C. Fwm
- D. Cpm
Answer: D
NEW QUESTION 53
What is the command to check the current status of hyper-threading?
- A. fw ctl get int cphwd_hyper_status
- B. cat/proc/smt_stat
- C. cat/proc/hyper stat
- D. fw ctl multik stat
Answer: D
NEW QUESTION 54
You run "cat/proc/smt_status" on your security gateway and the output shows 'Soft Disable'. How is your system configured in reference to hyper-threading?
- A. Your system does not support Hyper-threading
- B. Hyper -threading is disabled in BIOS but disabled in pconfig
- C. Hyper -threading is disabled in BIOS but enabled in pconfig
- D. Hyper -threading is disabled in BIOS and cpconfig
Answer: C
NEW QUESTION 55
Your company's site to site VPN tunnel has been established, however, some or all of the traffic is being dropped. Which one of the commands below could be used in troubleshooting the issue?
- A. fw ctl debug -m fw + drop conn ltd xlate xltrc nat
- B. fw ctl debug -f fw + conns drop xlate net
- C. fw ctl debug -p fw + conn pstat xlate xltrc nat
- D. fw ctl debug -m fw + conn drop ld xlate xltrc nat
Answer: D
NEW QUESTION 56
What is the name of the table that an administrator would review to investigate a port exhaustion error when using Hide NAT?
- A. Fwx_alloc
- B. Nat_dyn_table
- C. Connection
- D. Dyn_nat_table
Answer: C
NEW QUESTION 57
In order to review the IPS statistics to determine if adjustments can be made to improve performance, which command would you use to get the appropriate information?
- A. fw monitor -e "accept IPS_stats;" >> ips_statistics.xml
- B. fw ctl debug -m ips debug_compilation
- C. $FWDIR/scripts/get_ips_statistics.sh 10.1.1.1 60
- D. fw ctl set int enable_ips_debug_output 1
Answer: C
NEW QUESTION 58
In R80 spoofing is defined as a method of:
- A. Desguising an illegal IP address behind an authorized Ip address through Port Address Translation.
- B. Hiding your firewall from unauthorized users.
- C. Detecting people using false or wrong authentication logins.
- D. Making packets appear as if they come from an authorized IP address.
Answer: C
NEW QUESTION 59
What is the difference between disabling SecureXL by running "fwaccel off" and disabling it via cpconfig?
- A. Disabling SecureXL in cpconfig survives reboot
- B. "fwaccel off" will survive the reboot but cpconfig will not
- C. There is no difference. These are two different ways of accomplishing the same task
- D. cpconfig option is available only on the security manager
Answer: A
NEW QUESTION 60
Which process is responsible for the generation of certificates?
- A. dbsync
- B. cpm
- C. cpca
- D. fwm
Answer: C
NEW QUESTION 61
When troubleshooting acceleration issues on a Security Gateway, you notice that the fw_worker_x process is consuming about 100% processing power. What can be done to stop this from happening?
- A. Assign more CPU cores to the system
- B. Use fwaccel stop/start release process
- C. Edit the registry file to increase virtual memory
- D. Remove the memory file in /proc/ and recreate it
Answer: A
NEW QUESTION 62
While using IPS, the network performance is being impacted on a load sharing cluster with asymmetric routes. What is most likely causing the degradation?
- A. A static NAT has been configured and an IPS protection requires the connection be handled on the same cluster member
- B. SecureXL has been disabled
- C. CoreXL has been disabled
- D. A failure in the sync network protocol
Answer: C
NEW QUESTION 63
When enabling hyper-threading on a Security Gateway, the administrator needs to make sure there is enough to support additional CoreXL Firewall instances.
- A. cpu's
- B. available memory
- C. drive space
- D. available cache
Answer: B
NEW QUESTION 64
Joey's implementation a new R80.10 firewall cluster into the network. During the implemenation he notices that the cluster object is in error state in SmartConsole. He tries to figure out the cause of the problem and runs a Cluster XL kernel debug with command 'fw ctl debug -m cluster + state priote conf ccp' Cluster XL kernel debug shown him follwing info: fwha_set_new_local_state: Old version HA machines exist around so prevent state change to READY.
How can be the solve the problem?
- A. Cphaprob mmagic
- B. Cphaconf cluster_id set <NEW_CLUSTER_ID_VALUE>
- C. Connect with GuiDBedit Tool to Security Management Server. Go to Table - Network Objects - networks. Select the relevant R80.10. Cluster object. Go to Search menu - Find - paste mac_magic.
Right-click on the cluster_magic the object -select Edt... and change the value between 1 and 253. Save changes and install policy. - D. Connect with GuiDBedit Tool to Security Management Server. Go to Table - Network Objects - networks. Select the relevant R80.10. Cluster object. Go to Search menu - Find - paste mac_magic.
Right-click on the mac_magic the object -select Edt... and change the value to 254. Save changes and install policy.
Answer: D
NEW QUESTION 65
If certain services should not use the Cluster Object IP Address, but requires the use of the individual Cluster Member Ips, what steps would be required for configuration?
- A. The configuration is not possible
- B. Edit the fwkern.conf on each Cluster Member
- C. Create Manual NAT rules in the Security Policy.
- D. Edit the table def file on the Management Server
Answer: C
NEW QUESTION 66
Which deamon would you debug if you have issues with acquiring identities via identity sharing identities with other gateways?
- A. Iad
- B. Wstlsed
- C. pepd
- D. Pdpd
Answer: D
Explanation:
Reference:
https://sc1.checkpoint.com/documents/R76/CP_R76_IdentityAwareness_AdminGuide/6647
7.htm
NEW QUESTION 67
Which file would you need to make sure you collect when debugging a VPN that fails to establish that is configured to use IKEv2?
- A. $FWDIR/log/ikev2.xml
- B. $CPDIR/log/ike.elg
- C. $FWDIR/log/vpnd.xml.v2
- D. $FWDIR/log/ike2.elg
Answer: B
Explanation:
Explanation/Reference:
Reference: https://supportcenter.checkpoint.com/supportcenter/portal?
eventSubmit_doGoviewsolutiondetails=&solutionid=skI4326
NEW QUESTION 68
How often will a gateway with Performance Pack running by default automatically review and distribute interface affinity between cores?
- A. Every 5 minutes
- B. Interface affinity is determined at gateway build time and does not change
- C. Every 10 seconds
- D. Every 60 seconds
Answer: D
NEW QUESTION 69
......
Reduce Your Chance of Failure in 156-115.80 Exam: https://www.passleader.top/CheckPoint/156-115.80-exam-braindumps.html