156-115.80 Online Practice Questions and Answers

What must be done for the "fw monitor" command to capture packets through the firewall kernel?

A. SecureXL must be disabled

B. ClusterXL must be temporarily disabled

C. Firewall policy must be re-installed

D. The output file must be transferred to a machine with WireShark

Which of the following inputs is suitable for debugging HTTPS inspection issues?

A. vpn debug cptls on

B. fw ctl debug –m fw + conn drop cptls

C. fw diag debug tls enable

D. fw debug tls on TDERROR_ALL_ALL=5

Which of the following ports are used for SIC?

A. 18355 and 18356

B. 18210 and 18211

C. 257 and 258

D. 18192 and 18193

The Security Gateway is installed on GAiA R80. The default port for the Web User Interface is _____________.

A. TCP 18211

B. TCP 257

C. TCP 4433

D. TCP 443

What is the shorthand reference for a classification object?

A. CLOB

B. class.obj

C. classobj

D. COBJ

Which database domain stores URL filtering updates?

A. Threat Prevention Domain

B. Application Control domain

C. IPS Domain

D. Check Point Data Domain

If cluster members are geographically separated and the time to detect a failover needs to be longer, what timer needs to be adjusted?

A. fwha_timer_cpha_res

B. fwha_timer_dist_res

C. fwha_geosync_timer

D. fwha_timer_sync_res

Which command should be used to insert fw monitor before secxl_sync module?

A. fw monitor –pi –secxl_sync –o capture.cap

B. fw monitor –pl –secxl_sync –o capture.cap

C. fw monitor –pO –secxl_sync –o capture.cap

D. fw monitor –e “accept –pi –secxl_sync;” –o capture.cap

When troubleshooting acceleration issues on a Security Gateway, you notice that the fw_worker_x process is consuming about 100% processing power. What can be done to stop this from happening?

A. Assign more CPU cores to the system

B. Use fwaccel stop/start release process

C. Edit the registry file to increase virtual memory

D. Remove the memory file in /proc/ and recreate it

Which command would show the synchronization statistics between cluster members?

A. cphaprob stat

B. fw ctl sync

C. fw ctl pstat

D. cphaprob sync