Download Checkpoint.156-915.80.Pass4Sure.2019-01-24.80q.tqb
| Vendor: | Checkpoint |
| Exam Code: | 156-915.80 |
| Exam Name: | CCSE Update R80 |
| Date: | Jan 24, 2019 |
| File Size: | 309 KB |
Demo Questions
Question 1
What is a feature that enables VPN connections to successfully maintain a private and secure VPN session without employing Stateful Inspection?
- Stateful Mode
- VPN Routing Mode
- Wire Mode
- Stateless Mode
Correct answer: C
Explanation:
Wire Mode is a VPN-1 NGX feature that enables VPN connections to successfully fail over, bypassing Security Gateway enforcement. This improves performance and reduces downtime. Based on a trusted source and destination, Wire Mode uses internal interfaces and VPN Communities to maintain a private and secure VPN session, without employing Stateful Inspection. Since Stateful Inspection no longer takes place, dynamic-routing protocols that do not survive state verification in non-Wire Mode configurations can now be deployed. The VPN connection is no different from any other connections along a dedicated wire, thus the meaning of "Wire Mode". Reference: https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk30974 Wire Mode is a VPN-1 NGX feature that enables VPN connections to successfully fail over, bypassing Security Gateway enforcement. This improves performance and reduces downtime. Based on a trusted source and destination, Wire Mode uses internal interfaces and VPN Communities to maintain a private and secure VPN session, without employing Stateful Inspection. Since Stateful Inspection no longer takes place, dynamic-routing protocols that do not survive state verification in non-Wire Mode configurations can now be deployed. The VPN connection is no different from any other connections along a dedicated wire, thus the meaning of "Wire Mode".
Reference: https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk30974
Question 2
On R80.10 the IPS Blade is managed by:
- Threat Protection policy
- Anti-Bot Blade
- Threat Prevention policy
- Layers on Firewall policy
Correct answer: A
Explanation:
Reference: https://www.checkpoint.com/downloads/product-related/r80.10-mgmt-architecture-overview.pdf very top of last page. Reference: https://www.checkpoint.com/downloads/product-related/r80.10-mgmt-architecture-overview.pdf very top of last page.
Question 3
Which packet info is ignored with Session Rate Acceleration?
- source port ranges
- source ip
- source port
- same info from Packet Acceleration is used
Correct answer: C
Explanation:
Reference: http://trlj.blogspot.com/2015/10/check-point-acceleration.html Reference: http://trlj.blogspot.com/2015/10/check-point-acceleration.html
