[Sep-2021] CCSM 156-115.80 Exam Practice Dumps
2021 156-115.80 Premium Files Test pdf - Free Dumps Collection
NEW QUESTION 25
Consider an IKE debug file that has been generated when debugging an issue with site to site VPN. What is the purpose of a NONCE?
- A. Vendor ID and Remote Gateway ID
- B. Protocol 50 and 51 representations
- C. Fixed hex value of Phase 2 keys with PFS
- D. Randomly generated part of key generation
Answer: D
NEW QUESTION 26
Static NAT has been configured and NAT rules were created automatically. The global properties option "Translate on client side" is not checked. Clients are complaining that they are not able to connect to one of your web servers using its public address. How would you solve the problem without changing the global properties and reinstalling the security policy?
- A. You will have to change the global properties and reinstall the security policy
- B. Configure manual NAT
- C. Rebooting the security gateway will resolve the problem
- D. On the security gateway, add a static route for the web server's public ip address.
Answer: B
NEW QUESTION 27
How can you force a manual failover?
- A. Cluster XL_admin down
- B. Kil -15 vpnd
- C. Cphaconf set_force_failover 1
- D. Fw ctl set int fwha_failover 1
Answer: C
NEW QUESTION 28
The Security Gateway is installed on GAiA R80, The port for Web User Interface is ____ .
- A. TCP 443
- B. TCP 18211
- C. TCP 257
- D. TCP 4433
Answer: A
NEW QUESTION 29
In R80 spoofing is defined as a method of:
- A. Desguising an illegal IP address behind an authorized Ip address through Port Address Translation.
- B. Hiding your firewall from unauthorized users.
- C. Detecting people using false or wrong authentication logins.
- D. Making packets appear as if they come from an authorized IP address.
Answer: D
NEW QUESTION 30
The security administrator wants to verify if a specific connection is being handling by SecureXL. What command below is used to verify this information?
- A. fwaccel stat
- B. fw tab -t connections -f | grep <application ip>
- C. cpview
- D. fwaccel conns
Answer: D
NEW QUESTION 31
After determining that the IPS Blad is causing high resource utilization in the gateway, which be an appropriate strategy to improve IPS performance?
- A. Enable Bypass XL
- B. Enabling Secure XL
- C. Enabling Core XL
- D. Enable Bypass mode
Answer: C
NEW QUESTION 32
Your customer is experiencing problems connecting to the Security Management Server via SmartConsole.
You suggest testing the connection to the SMS with GuiBedit from the client machine. This connection was successful. Now you suggest enabling debug to investigate possible issues with connections to SMS via SmartConsole. Which process does the customer need to debug on the SMS?
- A. fwd
- B. cpm
- C. cpd
- D. fwm
Answer: B
NEW QUESTION 33
What is the difference between Client-Side and Server-Side NAT?
- A. The translation occurs at the kernel nearest the server for client-side NAT, but for server-side NAT, the translation occurs at the kernel nearest the client
- B. The translation occurs at the kernel nearest the client in both cases. So, there is no difference at all
- C. The translation occurs at the kernel nearest the client for client-side NAT, but for server-side NAT, the translation occurs at the kernel nearest the server
- D. The translation occurs at the kernel nearest the server in both cases. So, there is no difference at all
Answer: C
NEW QUESTION 34
Which command is used to write a kernel debug to a file?
- A. Fw ctl kdebug -T -f> debug .txt
- B. Fw ctl debug -S -T > debug. txt
- C. Fw ctl debug -T -f > debug.txt
- D. Fw ctl kdebug-T -I > debug.txt
Answer: D
NEW QUESTION 35
Which Check Point utility should be used to assist in analyzing the output of vpn and ike debug?
- A. ikeview
- B. vpnview
- C. cpinfo
- D. cpview
Answer: A
NEW QUESTION 36
You verified that Performance Pack is disabled and need to distribute the affinity interfaces. What command would you run to use static affinity to balance the interfaces between the SND cores?
- A. fw ctl affinity -s
- B. cpmq set
- C. sim affinity -s
- D. fw ctl affinity -a -l -v
Answer: D
NEW QUESTION 37
Which kernel debug flag should you use to troubleshoot NAT connections?
- A. fw ctl debug + xltrc xlate nat table
- B. fw ctl debug + xlate xltrc nat table
- C. fw ctl debug + fwx_alloc nat conn drop
- D. fw ctl debug + xlate xltrc nat conn drop
Answer: D
NEW QUESTION 38
Which templates for Secure XL are not enabled by default?
- A. Accept and NMR
- B. Drop and NAT
- C. All templates are enabled by default
- D. All templates are disabled by default
Answer: D
NEW QUESTION 39
Which type of SecureXL templates is enabled by default on Security Gateways?
- A. Drop
- B. VPN
- C. NAT
- D. Accept
Answer: D
NEW QUESTION 40
......
Get ready to pass the 156-115.80 Exam right now using our CCSM Exam Package: https://www.surepassexams.com/156-115.80-exam-bootcamp.html