Pass4sure offers free demo for 156-915.80 exam. "Check Point Certified Security Expert Update - R80", also known as 156-915.80 exam, is a Check Point Certification. This set of posts, Passing the Check Point 156-915.80 exam, will help you answer those questions. The 156-915.80 Questions & Answers covers all the knowledge points of the real exam. 100% real Check Point 156-915.80 exams and revised by experts!

P.S. Refined 156-915.80 vce are available on Google Drive, GET MORE: https://drive.google.com/open?id=1kHtvfzv89_QPh4A3_cAnuAFq9mDuP3yP


New Check Point 156-915.80 Exam Dumps Collection (Question 7 - Question 16)

Question No: 7

Your organizationu2019s disaster recovery plan needs an update to the backup and restore section to reap the new distributed R80 installation benefits. Your plan must meet the following required and desired objectives:

Required Objective: The Security Policy repository must be backed up no less frequently than every 24 hours. Desired Objective: The R80 components that enforce the Security Policies should be backed up at least once a week.

Desired Objective: Back up R80 logs at least once a week. Your disaster recovery plan is as follows:

- Use the cron utility to run the command upgrade_export each night on the Security Management Servers.

- Configure the organization's routine back up software to back up the files created by the command upgrade_export.

- Configure the GAiA back up utility to back up the Security Gateways every Saturday night.

- Use the cron utility to run the command upgrade_export each Saturday night on the log servers.

- Configure an automatic, nightly logswitch.

- Configure the organization's routine back up software to back up the switched logs every night. Upon evaluation, your plan:

A. Meets the required objective and only one desired objective.

B. Meets the required objective but does not meet either desired objective.

C. Does not meet the required objective.

D. Meets the required objective and both desired objectives.

Answer: D


Question No: 8

What makes Anti-Bot unique compared to other Threat Prevention mechanisms, such as URL Filtering, Anti-Virus, IPS, and Threat Emulation?

A. Anti-Bot is the only countermeasure against unknown malware

B. Anti-Bot is the only protection mechanism which starts a counter-attack against known Command & Control Centers

C. Anti-Bot is the only signature-based method of malware protection

D. Anti-Bot is a post-infection malware protection to prevent a host from establishing a connection to a Command & Control Center

Answer: D


Question No: 9

If you need strong protection for the encryption of user data, what option would be the BEST choice?

A. Use Diffie-Hellman for key construction and pre-shared keys for Quick Mode. Choose SHA in Quick Mode and encrypt with AES. Use AH protocol. Switch to Aggressive Mode.

B. When you need strong encryption, IPsec is not the best choice. SSL VPNu2019s are a better choice.

C. Use certificates for Phase 1, SHA for all hashes, AES for all encryption and PFS, and use ESP protocol.

D. Disable Diffie-Hellman by using stronger certificate based key-derivation. Use AES-256 bit on all encrypted channels and add PFS to QuickMode. Use double encryption by implementing AH and ESP as protocols.

Answer: C


Question No: 10

Type the command and syntax to view critical devices on a cluster member in a ClusterXL environment.

Answer:

cphaprob -ia list


Question No: 11

A host on the Internet initiates traffic to the Static NAT IP of your Web server behind the Security Gateway. With the default settings in place for NAT, the initiating packet will translate the .

A. destination on server side

B. source on server side

C. source on client side

D. destination on client side

Answer: D


Question No: 12

After implementing Static Address Translation to allow Internet traffic to an internal Web Server on your DMZ, you notice that any NATed connections to that machine are being dropped by anti-spoofing protections. Which of the following is the MOST LIKELY cause?

A. The Global Properties setting Translate destination on client side is unchecked. But the topology on the DMZ interface is set to Internal - Network defined by IP and Mask. Check the Global Properties setting Translate destination on client side.

B. The Global Properties setting Translate destination on client side is unchecked. But the topology on the external interface is set to Others +. Change topology to External.

C. The Global Properties setting Translate destination on client side is checked. But the topology on the external interface is set to External. Change topology to Others +.

D. The Global Properties setting Translate destination on client side is checked. But the topology on the DMZ interface is set to Internal - Network defined by IP and Mask. Uncheck the Global Properties setting Translate destination on client side.

Answer: A


Question No: 13

Which of the following is the preferred method for adding static routes in GAiA?

A. In the CLI with the command u201croute addu201d

B. In Web Portal, under Network Management > IPv4 Static Routes

C. In the CLI via sysconfig

D. In SmartDashboard under Gateway Properties > Topology

Answer: B


Question No: 14

John detected high load on sync interface. Which is most recommended solution?

A. For short connections like http service u2013 delay sync for 2 seconds

B. Add a second interface to handle sync traffic

C. For short connections like http service u2013 do not sync

D. For short connections like icmp service u2013 delay sync for 2 seconds

Answer: A


Question No: 15

You want to generate a cpinfo file via CLI on a system running GAiA. This will take about 40 minutes since the log files are also needed. What action do you need to take regarding timeout?

A. No action is needed because cpshell has a timeout of one hour by default.

B. Log in as the default user expert and start cpinfo.

C. Log in as admin, switch to expert mode, set the timeout to one hour with the command, idle 60, then start cpinfo.

D. Log in as Administrator, set the timeout to one hour with the command idle 60 and start cpinfo.

Answer: D


Question No: 16

You intend to upgrade a Check Point Gateway from R71 to R80. Prior to upgrading, you want to back up the Gateway should there be any problems with the upgrade. Which of the following allows for the Gateway configuration to be completely backed up into a manageable size in the least amount of time?

A. database revision

B. snapshot

C. upgrade_export

D. backup

Answer: D


100% Up to the immediate present Check Point 156-915.80 Questions & Answers shared by Dumpscollection, Get HERE: http://www.dumpscollection.net/dumps/156-915.80/ (New Q&As)