156-915.80: CCSE Update R80 - Free download from ExamHUB

The “MAC magic” value must be modified under the following condition:

There is more than one cluster connected to the same VLAN
A firewall cluster is configured to use Multicast for CCP traffic
There are more than two members in a firewall cluster
A firewall cluster is configured to use Broadcast for CCP traffic

Correct answer: D

Explanation:

Reference: https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk25977

The Correlation Unit performs all but which of the following actions:

Marks logs that individually are not events, but may be part of a larger pattern to be identified later
Generates an event based on the Event policy
Assigns a severity level to the event
Takes a new log entry that is part of a group of items that together make up an event, and adds it to an ongoing event

Correct answer: C

The following command is used to verify the CPUSE version:

HostName:0>show installer status build
[Expert@HostName:0]#show installer status
[Expert@HostName:0]#show installer status build
HostName:0>show installer build

Correct answer: A

Explanation:

Reference: http://dkcheckpoint.blogspot.com/2017/11/how-to-fix-deployment-agent-issues.html

Which statement is true regarding redundancy?

System Administrator know when their cluster has failed over and can also see why it failed over by using the cphaprob f it command.
ClusterXL offers three different Load Sharing solutions: Unicast, Broadcast, and Multicast.
Machines in a Cluster XL High Availability configuration must be synchronized.
Both Cluster XL and VRRP are fully supported by Gaia and available to all Check Point appliances, open servers, and virtualized environments.

Correct answer: D

Explanation:

Reference: https://www.checkpoint.com/download/public-files/gaia-technical-brief.pdf page 5

Vanessa is expecting a very important Security Report. The Document should be sent as an attachment via e-mail. An e-mail with Security_ report.pdf file was delivered to her e-mail inbox. When she opened the PDF file, she noticed that the file is basically empty and only few lines of text are in it. The report is missing some graphs, tables and links.

Which component of SandBlast protection is her company using on a Gateway?

SandBlast Threat Emulation
SandBlast Agent
Check Point Protect
SandBlast Threat Extraction

Correct answer: D

Which command collects diagnostic data for analyzing customer setup remotely?

cpinfo
migrate export
sysinfo
cpview

Correct answer: A

Explanation:

CPInfo is an auto-updatable utility that collects diagnostics data on a customer's machine at the time of execution and uploads it to Check Point servers (it replaces the standalone cp_uploader utility for uploading files to Check Point servers). The CPInfo output file allows analyzing customer setups from a remote location. Check Point support engineers can open the CPInfo file in a demo mode, while viewing actual customer Security Policies and Objects. This allows the in-depth analysis of customer's configuration and environment settings. Reference: https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk92739

CPInfo is an auto-updatable utility that collects diagnostics data on a customer's machine at the time of execution and uploads it to Check Point servers (it replaces the standalone cp_uploader utility for uploading files to Check Point servers).

The CPInfo output file allows analyzing customer setups from a remote location. Check Point support engineers can open the CPInfo file in a demo mode, while viewing actual customer Security Policies and Objects. This allows the in-depth analysis of customer's configuration and environment settings.

Reference: https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk92739

When deploying multiple clustered firewalls on the same subnet, what does the firewall administrator need to configure to prevent CCP broadcasts being sent to the wrong cluster?

Set the fwha_mac_magic_forward parameter in the $CPDIR/boot/modules/ha_boot. conf
Set the fwha_mac_magic parameter in the $FWDIR/boot/fwkern.conf file
Set the cluster global ID using the command “cphaconf cluster_id set <value>”
Set the cluster global ID using the command “fw ctt set cluster_id <value>”

Correct answer: C

Explanation:

Reference: https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk25977

Which of these options is an implicit MEP option?

Primary-backup
Source address based
Round robin
Load Sharing

Correct answer: A

Explanation:

There are three methods to implement implicit MEP:First to Respond, in which the first Security Gateway to reply to the peer Security Gateway is chosen. An organization would choose this option if, for example, the organization has two Security Gateways in a MEP configuration - one in London, the other in New York. It makes sense for VPN-1 peers located in England to try the London Security Gateway first and the NY Security Gateway second. Being geographically closer to VPN peers in England, the London Security Gateway is the first to respond, and becomes the entry point to the internal network. See: First to Respond.Primary-Backup, in which one or multiple backup Security Gateways provide "high availability" for a primary Security Gateway. The remote peer is configured to work with the primary Security Gateway, but switches to the backup Security Gateway if the primary goes down. An organization might decide to use this configuration if it has two machines in a MEP environment, one of which is stronger than the other. It makes sense to configure the stronger machine as the primary. Or perhaps both machines are the same in terms of strength of performance, but one has a cheaper or faster connection to the Internet. In this case, the machine with the better Internet connection should be configured as the primary. See: Primary-Backup Security Gateways.Load Distribution, in which the remote VPN peer randomly selects a Security Gateway with which to open a connection. For each IP source/destination address pair, a new Security Gateway is randomly selected. An organization might have a number of machines with equal performance abilities. In this case, it makes sense to enable load distribution. The machines are used in a random and equal way. See: Random Selection.Reference: https://sc1.checkpoint.com/documents/R77/CP_R77_VPN_AdminGuide/13812.htm

There are three methods to implement implicit MEP:

First to Respond, in which the first Security Gateway to reply to the peer Security Gateway is chosen. An organization would choose this option if, for example, the organization has two Security Gateways in a MEP configuration - one in London, the other in New York. It makes sense for VPN-1 peers located in England to try the London Security Gateway first and the NY Security Gateway second. Being geographically closer to VPN peers in England, the London Security Gateway is the first to respond, and becomes the entry point to the internal network. See: First to Respond.
Primary-Backup, in which one or multiple backup Security Gateways provide "high availability" for a primary Security Gateway. The remote peer is configured to work with the primary Security Gateway, but switches to the backup Security Gateway if the primary goes down. An organization might decide to use this configuration if it has two machines in a MEP environment, one of which is stronger than the other. It makes sense to configure the stronger machine as the primary. Or perhaps both machines are the same in terms of strength of performance, but one has a cheaper or faster connection to the Internet. In this case, the machine with the better Internet connection should be configured as the primary. See: Primary-Backup Security Gateways.
Load Distribution, in which the remote VPN peer randomly selects a Security Gateway with which to open a connection. For each IP source/destination address pair, a new Security Gateway is randomly selected. An organization might have a number of machines with equal performance abilities. In this case, it makes sense to enable load distribution. The machines are used in a random and equal way. See: Random Selection.

Reference: https://sc1.checkpoint.com/documents/R77/CP_R77_VPN_AdminGuide/13812.htm

John detected high load on sync interface. Which is most recommended solution?

For short connections like http service – delay sync for 2 seconds
Add a second interface to handle sync traffic
For short connections like http service – do not sync
For short connections like icmp service – delay sync for 2 seconds

Correct answer: A

What is the SOLR database for?

Used for full text search and enables powerful matching capabilities
Writes data to the database and full text search
Serves GUI responsible to transfer request to the DLEserver
Enables powerful matching capabilities and writes data to the database

Correct answer: A

Vendor:	Checkpoint
Exam Code:	156-915.80
Exam Name:	CCSE Update R80
Date:	Nov 28, 2018
File Size:	38 KB

Download CCSE Update R80.156-915.80.Test4Prep.2018-11-28.56q.vcex

How to open VCEX files?

Demo Questions

Question 1

Question 2

Question 3

Question 4

Question 5

Question 6

Question 7

Question 8

Question 9

Question 10

ProfExam at a 20% markdown