156-215.80 Free Practice Test

- (Exam Topic 3)
What happens when you run the command: fw sam -J src [Source IP Address]?

1. A. Connections from the specified source are blocked without the need to change the Security Policy.
2. B. Connections to the specified target are blocked without the need to change the Security Policy.
3. C. Connections to and from the specified target are blocked without the need to change the Security Policy.
4. D. Connections to and from the specified target are blocked with the need to change the Security Policy.

Correct Answer: A

- (Exam Topic 4)
You noticed that CPU cores on the Security Gateway are usually 100% utilized and many packets were dropped. You don’t have a budget to perform a hardware upgrade at this time. To optimize drops you decide to use Priority Queues and fully enable Dynamic Dispatcher. How can you enable them?

1. A. fw ctl multik dynamic_dispatching on
2. B. fw ctl multik dynamic_dispatching set_mode 9
3. C. fw ctl multik set_mode 9
4. D. fw ctl miltik pq enable

Correct Answer: C

- (Exam Topic 1)
Fill in the blank: To build an effective Security Policy, use a _____ and _____ rule.

1. A. Cleanup; stealth
2. B. Stealth; implicit
3. C. Cleanup; default
4. D. Implicit; explicit

Correct Answer: A

- (Exam Topic 2)
What is the potential downside or drawback to choosing the Standalone deployment option instead of the Distributed deployment option?

1. A. degrades performance as the Security Policy grows in size
2. B. requires additional Check Point appliances
3. C. requires additional software subscription
4. D. increases cost

Correct Answer: A

- (Exam Topic 3)
Packet acceleration (SecureXL) identifies connections by several attributes. Which of the attributes is NOT used for identifying connection?

1. A. Source Address
2. B. Destination Address
3. C. TCP Acknowledgment Number
4. D. Source Port

Correct Answer: C