QUESTION: 21

Which is the correct “fw monitor” syntax for creating a capture file for loading it into WireShark?

fw monitor –e “accept <FILTER EXPRESSION>; “>> Output.cap
This cannot be accomplished as it is not supported with R80.10
fw monitor –e “accept <FILTER EXPRESSION>;” –file Output.cap
fw monitor –e “accept <FILTER EXPRESSION>;” –o Output.cap

Answer(s): D

Reveal Solution Next Question

QUESTION: 22

How many layers are incorporated in IPS detection and what are they called?

4 layers – Passive Streaming Library (PSL), Protocol Parsers, Context Management, Protections
3 layers – Active Streaming Library (ASL), CMI, Protections
4 layers – Active Streaming Library (ASL), Protocol Parsers, Context Management, Protections
3 layers – Protocol Parsers, CMI, Protections

Answer(s): A

Reveal Solution Next Question

QUESTION: 23

What is the command to check the current status of hyper-threading?

fw ctl get int cphwd_hyper_status
fw ctl multik stat
cat/proc/hyperstats
cat/proc/smt_status

Answer(s): D

Reference:

https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk93000#To%20check% 20SMT%20current%20status

Reveal Solution Next Question

QUESTION: 24

What occurs when Bypass Under Load activated?

Packets are forwarded to the destination without checking the packets against the firewall rule base
Packets are forwarded to the destination without performing IPS analysis
To still ensure a minimum level of data integrity, the system revert to the use of MD5 instead of SHA-1, since former produces an output smaller than the latter
The amount of the state table entries is decreased according to the LRU (least recently used) algorithm

Answer(s): B

Reference:

https://sc1.checkpoint.com/documents/R76/CP_R76_IPS_AdminGuide/12750.htm

Reveal Solution Next Question

Free 156-115.80 Exam Braindumps (page: 7)

QUESTION: 21

QUESTION: 22

QUESTION: 23

Reference:

QUESTION: 24

Reference:

156-115.80 Discussions & Posts