It is impossible to pass Check Point 156-915.80 exam without any help in the short term. Come to Exambible soon and find the most advanced, correct and guaranteed Check Point 156-915.80 practice questions. You will get a surprising result by our Far out Check Point Certified Security Expert Update - R80 practice guides.

P.S. 100% Guarantee 156-915.80 tutorials are available on Google Drive, GET MORE: https://drive.google.com/open?id=1YYqgCO6ctCwcBVUFbQYMfHPbrQOvemUT


New Check Point 156-915.80 Exam Dumps Collection (Question 5 - Question 14)

Question No: 5

Jennifer McHanry is CEO of ACME. She recently bought her own personal iPad. She wants use her iPad to access the internal Finance Web server. Because the iPad is not a member of the Active Directory domain, she cannot identify seamlessly with AD Query. However, she can enter her AD credentials in the Captive Portal and then get the same access as on her office computer. Her access to resources is based on rules in the R80 Firewall Rule Base.

To make this scenario work, the IT administrator must:

1) Enable Identity Awareness on a gateway and select Captive Portal as one of the Identity Sources.

2) In the Portal Settings window in the User Access section, make sure that Name and password login is selected.

3) Create a new rule in the Firewall Rule Base to let Jennifer McHanry access network destinations. Select accept as the Action.

Ms. McHanry tries to access the resource but is unable. What should she do?

A. Have the security administrator select the Action field of the Firewall Rule u201cRedirect HTTP connections to an authentication (captive) portalu201d

B. Have the security administrator reboot the firewall

C. Have the security administrator select Any for the Machines tab in the appropriate Access Role

D. Install the Identity Awareness agent on her iPad

Answer: A


Question No: 6

Type the full fw command and syntax that will show full synchronization status.

Answer:

fw ctl pstat


Question No: 7

Your expanding network currently includes ClusterXL running Multicast mode on two members, as shown in this topology:

Exhibit:

You need to add interfaces: 10.10.10.1/24 on Member A, and 10.10.10.2/24 on Member B. The virtual IP address for these interfaces is 10.10.10.3/24. Both cluster gateways have a Quad card with an available eth3 interface. What is the correct procedure to add these interfaces?

A. 1. Disable "Cluster membership" from one Gateway via cpconfig.2. Configure the new interface via sysconfig from the "non-member" Gateway.3. Re-enable "Cluster membership" on the Gateway.4. Perform the same steps on the other Gateway.5. Update the topology in the cluster object.6. Install the Security Policy.

B. 1. Configure the new interface on both members using WebUI.2. Update the new topology in the cluster

object from SmartDashboard.3. Define virtual IP in the Dashboard4. Install the Security Policy.

C. 1. Use WebUI to configure the new interfaces on both member.2. Update the topology in the cluster object.3. Reboot both gateways.4. Install the Security Policy.

D. 1. Use the command ifconfig to configure and enable the new interface on both members.2. Update the topology in the cluster object for the cluster and both members.3. Install the Security Policy.4. Reboot the gateway.

Answer: B


Question No: 8

When using AD Query to authenticate users for Identity Awareness, identity data is received seamlessly from the Microsoft Active Directory (AD). What is NOT a recommended usage of this method?

A. Leveraging identity in the application control blade

B. Basic identity enforcement in the internal network

C. Identity-based auditing and logging

D. Identity-based enforcement for non-AD users (non-Windows and guest users)

Answer: D


Question No: 9

Which statements about Management HA are correct?

1) Primary SmartCenter describes first installed SmartCenter

2) Active SmartCenter is always used to administrate with SmartConsole

3) Active SmartCenter describes first installed SmartCenter

4) Primary SmartCenter is always used to administrate with SmartConsole

A. 1 and 4

B. 2 and 3

C. 1 and 2

D. 3 and 4

Answer: C


Question No: 10

Type the command and syntax to view critical devices on a cluster member in a ClusterXL environment.

Answer:

cphaprob -ia list


Question No: 11

You enable Automatic Static NAT on an internal host node object with a private IP address of 10.10.10.5, which is NATed into 216.216.216.5. (You use the default settings in Global Properties / NAT.)

When you run fw monitor on the R80 Security Gateway and then start a new HTTP connection from host

10.10.10.5 to browse the Internet, at what point in the monitor output will you observe the HTTP SYN-ACK packet translated from 216.216.216.5 back into 10.10.10.5?

A. o=outbound kernel, before the virtual machine

B. I=inbound kernel, after the virtual machine

C. O=outbound kernel, after the virtual machine

D. i=inbound kernel, before the virtual machine

Answer: B


Question No: 12

MultiCorp is located in Atlanta. It has a branch office in Europe, Asia, and Africa. Each location has its own AD controller for local user login. How many ADqueries have to be configured?

Answer:

4


Question No: 13

You are trying to configure Directional VPN Rule Match in the Rule Base. But the Match column does not have the option to see the Directional Match. You see the following window.

What must you enable to see the Directional Match?

A. directional_match(true) in the objects_5_0.C file on Security Management Server

B. VPN Directional Match on the Gateway objectu2021s VPN tab

C. VPN Directional Match on the VPN advanced window, in Global Properties

D. Advanced Routing on each Security Gateway

Answer: C


Question No: 14

Which of these options is an implicit MEP option?

A. Primary-backup

B. Source address based

C. Round robin

D. Load Sharing

Answer: A

Explanation:

There are three methods to implement implicit MEP:

First to Respond, in which the first Security Gateway to reply to the peer Security Gateway is chosen. An organization would choose this option if, for example, the organization has two Security Gateways in a MEP

configuration - one in London, the other in New York. It makes sense for VPN-1 peers located in England to try the London Security Gateway first and the NY Security Gateway second. Being geographically closer to VPN peers in England, the London Security Gateway is the first to respond, and becomes the entry point to the internal network. See: First to Respond.

Primary-Backup, in which one or multiple backup Security Gateways provide "high availability" for a primary Security Gateway. The remote peer is configured to work with the primary Security Gateway, but switches to the backup Security Gateway if the primary goes down. An organization might decide to use this configuration if it has two machines in a MEP environment, one of which is stronger than the other. It makes sense to configure the stronger machine as the primary. Or perhaps both machines are the same in terms of strength of performance, but one has a cheaper or faster connection to the Internet. In this case, the machine with the better Internet connection should be configured as the primary. See: Primary-Backup Security Gateways.

Load Distribution, in which the remote VPN peer randomly selects a Security Gateway with which to open a connection. For each IP source/destination address pair, a new Security Gateway is randomly selected. An organization might have a number of machines with equal performance abilities. In this case, it makes

sense to enable load distribution. The machines are used in a random and equal way. See: Random Selection.


P.S. Easily pass 156-915.80 Exam with Allfreedumps 100% Guarantee Dumps & pdf vce, Try Free: https://www.allfreedumps.com/156-915.80-dumps.html ( New Questions)