156-215.80 Free Practice Test

- (Exam Topic 2)
You are going to upgrade from R77 to R80. Before the upgrade, you want to back up the system so that, if there are any problems, you can easily restore to the old version with all configuration and management files intact. What is the BEST backup method in this scenario?

1. A. backup
2. B. Database Revision
3. C. snapshot
4. D. migrate export

Correct Answer: C
2. Snapshot Management
The snapshot creates a binary image of the entire root (lv_current) disk partition. This includes Check Point products, configuration, and operating system.
Starting in R77.10, exporting an image from one machine and importing that image on another machine of the same type is supported.
The log partition is not included in the snapshot. Therefore, any locally stored FireWall logs will not be save

- (Exam Topic 4)
Fill in the blanks. There are _____ types of software containers ______

1. A. Three; security managemen
2. B. Security Gateway and endpoint security.
3. C. Three; Security Gateway, endpoint Security, and gateway management.
4. D. Two; security management and endpoint security
5. E. Two; endpoint security and Security Gateway

Correct Answer: A

- (Exam Topic 2)
Vanessa is a Firewall administrator. She wants to test a backup of her company’s production Firewall cluster Dallas_GW. She has a lab environment that is identical to her production environment. She decided to restore production backup via SmartConsole in lab environment. Which details she need to fill in System Restore window before she can click OK button and test the backup?

1. A. Server, SCP, Username, Password, Path, Comment, Member
2. B. Server, TFTP, Username, Password, Path, Comment, All Members
3. C. Server, Protocol, Username, Password, Path, Comment, All Members
4. D. Server, Protocol, Username, Password, Path, Comment, member

Correct Answer: C

- (Exam Topic 4)
To ensure that VMAC mode is enabled, which CLI command you should run on all cluster members? Choose the best answer.

1. A. fw ctl set int fwha vmac global param enabled
2. B. fw ctl get int fwha vmac global param enabled; result of command should return value 1
3. C. cphaprob –a if
4. D. fw ctl get int fwha_vmac_global_param_enabled; result of command should return value 1

Correct Answer: B

- (Exam Topic 1)
Which of the following is NOT a SecureXL traffic flow?

1. A. Medium Path
2. B. Accelerated Path
3. C. Fast Path
4. D. Slow Path

Correct Answer: C
SecureXL is an acceleration solution that maximizes performance of the Firewall and does not compromise security. When SecureXL is enabled on a Security Gateway, some CPU intensive operations are processed by virtualized software instead of the Firewall kernel. The Firewall can inspect and process connections more efficiently and accelerate throughput and connection rates. These are the SecureXL traffic flows:
Slow path - Packets and connections that are inspected by the Firewall and are not processed by SecureXL. Accelerated path - Packets and connections that are offloaded to SecureXL and are not processed by the
Firewall.
Medium path - Packets that require deeper inspection cannot use the accelerated path. It is not necessary for the Firewall to inspect these packets, they can be offloaded and do not use the slow path. For example, packets that are inspected by IPS cannot use the accelerated path and can be offloaded to the IPS PSL (Passive Streaming Library). SecureXL processes these packets more quickly than packets on the slow path.