Free CheckPoint 156-915.80 Exam Dumps Questions & Answers

You have three Gateways in a mesh community. Each gateway's VPN Domain is their internal network as defined on the Topology tab setting All IP Addresses behind Gateway based on Topology information.
You want to test the route-based VPN, so you created VTIs among the Gateways and created static route entries for the VTIs. However, when you test the VPN, you find out the VPN still go through the regular domain IPsec tunnels instead of the routed VTI tunnels.
What is the problem and how do you make the VPN use the VTI tunnels?

• A.  Domain VPN takes precedence over the route-based VTI. To make the VPN go through VTI, use an empty group object as each Gateway's VPN Domain
• B.  Route-based VTI takes precedence over the Domain VPN. To make the VPN go through VTI, use dynamic-routing protocol like OSPF or BGP to route the VTI address to the peer instead of static routes
• C.  Domain VPN takes precedence over the route-based VTI. To make the VPN go through VTI, remove the Gateways out of the mesh community and replace with a star community
• D.  Route-based VTI takes precedence over the Domain VPN. Troubleshoot the static route entries to insure that they are correctly pointing to the VTI gateway IP.

What is the primary benefit of using the command upgrade_export over either backup or snapshot?

• A.  upgrade_export has an option to back up the system and SmartView Tracker logs while backup and snapshot will not.
• B.  The commands backup and snapshot can take a long time to run whereas upgrade_export will take a much shorter amount of time.
• C.  upgrade_export will back up routing tables, hosts files, and manual ARP configurations, where backup and snapshot will not.
• D.  upgrade_export is operating system independent and can be used when backup or snapshot is not available.

Which of the following options is available with the GAiA cpconfig utility on a Management Server?

• A.  DHCP Server configuration
• B.  Export setup
• C.  Time & Date
• D.  GUI Clients

Peter is your new Security Administrator. On his first working day, he is very nervous and enters the wrong password three times. His account is locked. What can be done to unlock Peter's account? Give the BEST answer.

• A.  You can unlock Peter's account by using the command fwm unlock_admin -u Peter on the Security Management Server
• B.  You can unlock Peter's account by using the command fwm lock_admin -u Peter on the Security Management Server.
• C.  It is not possible to unlock Peter's account. You have to install the firewall once again or abstain from Peter's help.
• D.  You can unlock Peter's account by using the command fwm unlock_admin -u Peter on the Security Gateway.

You need to see which hotfixes are installed on your gateway, which command would you use?

• A.  cpinfo -h all
• B.  cpinfo -y all
• C.  cpinfo -o hotfix
• D.  cpinfo -l hotfix