CCSM 156-115.80 Checkpoint Study Notes

Check Point Certified Security Master - R80 Questions and Answers

Question 17

Which of the following features is supported in Check Point’s implementation of IPv6?

Security Servers

QoS

ClusterXL High Availability

SAM

Question 18

Which of the following is NOT a special consideration while running fw monitor on production firewall?

While executing fw monitor, you need to specify an expression so that it captures the required traffic instead of all traffic

While running fw monitor on a busy firewall, the –ci and –co switches can be used to limit the number of packets captured

While running fw monitor, it resets all the debug flags

During a fw monitor, the firewall will have to process more packets because SecureXL acceleration should be disabled

Question 19

Consider an IKE debug file that has been generated when debugging an issue with site to site VPN. What is the purpose of a NONCE?

Randomly generated part of key generation

Vendor ID and Remote Gateway ID

Protocol 50 and 51 representations

Fixed hex value of Phase 2 keys with PFS

Question 20

What is the command to check the number of CoreXL firewall instances?

show corexl stat

fw ctl multik stat

coreXL_admin stat

fw ctl corexl stats