Note! Following 156-115.80 Exam is Retired now. Please select the alternative replacement for your Exam Certification.

156-115.80 Exam Dumps - Check Point Certified Security Master - R80

Go to page:

Question # 4

An organization has 3 sites; 1 Headquarters (HQ) site and 2 remote sites. The remote sites are connected to the HQ through site-to-site VPNs and phone communication is done using standard SIP. There is an issue with VOIP calls where one side cannot hear the other over the phone. As a test, they decide to disable protocol inspection for SIP. How can this be achieved?

Select the existing SIP Service, change the Protocol type to None

Create a new UDP 5060 service, change the protocol type to None

Create a new TCP 5060 service, change the protocol type to None

Select the existing SIP service, change the protocol to None in advance settings.

Full Access

Question # 5

What is the purpose of a Management server?

The sole purpose of the Management server is to store the log files sent by the Security Gateways.

The Management server manages, creates, stores, and distributes the security policy to Security Gateways. It also functions as the Certificate Authority of all managed Check Point products.

The Management server provides the connector for the GUI client and uses exclusively port 257/tcp.

The Management server only functions as the Certificate Authority of all managed Check Point products.

Full Access

Question # 6

Which one of following commands should you run to display HTTPS packet content together with kernel debug?

fw ctl get int https_inspection_show_decrypted_data_in_debug=1 fw ctl get int ssl_inspection_extra_debug=1

fw set int https_inspection_get_encrypted_data_in_debug 1 fw set int https_inspection_show_debug 1

fw ctl set int https_inspection_show_decrypted_data_in_debug 1 fw ctl set int ssl_inspection_extra_debug 1

fw ctl set int http_inspection_display_encrypted_data_in_debug=1 fw ctl set int http_inspection_extra_debug=1

Full Access

Question # 7

Which SecureXL table holds IPs that should not be accelerated?

f2f_addresses

cphwd_psglue_conn_db

tcp_f2f_ports

udp_f2f_conns

Full Access

Question # 8

If you are experiencing performance issues on a gateway and you suspect it may be related to the interfaces, what command will assist in determining if packets are not being received into the gateway?

netstat â€“rn

show arp dynamic all

ifconfig -a and look for RX drops

ifconfig â€“a and look for TX drops

Full Access

Go to page: