Free 156-115.80 Exam braindumps download (156-115.80 exam dumps Free)

QUESTION: 21

Which is the correct “fw monitor” syntax for creating a capture file for loading it into WireShark?

fw monitor –e “accept <FILTER EXPRESSION>; “>> Output.cap
This cannot be accomplished as it is not supported with R80.10
fw monitor –e “accept <FILTER EXPRESSION>;” –file Output.cap
fw monitor –e “accept <FILTER EXPRESSION>;” –o Output.cap

Answer(s): D

Show Answer Next Question

QUESTION: 22

How many layers are incorporated in IPS detection and what are they called?

4 layers – Passive Streaming Library (PSL), Protocol Parsers, Context Management, Protections
3 layers – Active Streaming Library (ASL), CMI, Protections
4 layers – Active Streaming Library (ASL), Protocol Parsers, Context Management, Protections
3 layers – Protocol Parsers, CMI, Protections

Answer(s): A

Show Answer Next Question

QUESTION: 23

What is the command to check the current status of hyper-threading?

fw ctl get int cphwd_hyper_status
fw ctl multik stat
cat/proc/hyperstats
cat/proc/smt_status

Answer(s): D

Reference:

https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk93000#To%20check% 20SMT%20current%20status

Show Answer Next Question

QUESTION: 24

What occurs when Bypass Under Load activated?

Packets are forwarded to the destination without checking the packets against the firewall rule base
Packets are forwarded to the destination without performing IPS analysis
To still ensure a minimum level of data integrity, the system revert to the use of MD5 instead of SHA-1, since former produces an output smaller than the latter
The amount of the state table entries is decreased according to the LRU (least recently used) algorithm

Answer(s): B

Reference:

https://sc1.checkpoint.com/documents/R76/CP_R76_IPS_AdminGuide/12750.htm

Show Answer Next Question

QUESTION: 25

Having a look at the output of the “fwaccel conns” command, the F flag is the indicator for a packet ____________.

getting the routing information according to the Forwarding Information Base (FIB)
being processed by the firewall kernel module
going through the slow path
being forced of using the accelerated path

Answer(s): B

Show Answer Next Question

Free 156-115.80 Exam Braindumps Check Point Certified Security Master - R80 Questions 21–25 (page: 6)

QUESTION: 21

QUESTION: 22

QUESTION: 23

Reference:

QUESTION: 24

Reference:

QUESTION: 25

Free 156-115.80 Exam Braindumps
Check Point Certified Security Master - R80 Questions 21–25 (page: 6)