Free 156-115.80 sample questions

Correct answer: clusterXL_admin down -p

The clusterXL_admin down -p command is used to simulate a problem state and trigger a failover in ClusterXL environments for testing purposes. This command forces the current cluster member to report a problem state, causing other cluster members to take over its responsibilities. The up command would bring a member back online, while cphaprob commands are used for monitoring cluster status rather than initiating failovers. Reference: https://sc1.checkpoint.com/documents/R76/CP_R76_ClusterXL_AdminGuide/7298.htm#o97358

Correct answer: packets

The packets parameter is not a valid fwaccel command option in Check Point SecureXL acceleration framework. Valid fwaccel parameters include stat (shows acceleration statistics), stats (detailed statistics), and templates (shows acceleration templates). The fwaccel command is used to monitor and configure SecureXL hardware acceleration features on Check Point gateways. Reference: https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk41397

Correct answer: Audit Domain

Audit Domain is not one of the three relational database domains that store Check Point management configuration data. The three actual domains are: User Domain (stores user-defined objects like network objects, services, and policies), System Domain (stores system-level configuration and built-in objects), and Global Domain (stores global settings that apply across the management environment). An Audit Domain does not exist in Check Point database architecture.

Correct answer: .cap

The .cap file extension should be used with fw monitor to create output files that can be imported and analyzed in Wireshark. Check Point fw monitor tool captures network traffic at the firewall level, and the .cap format is compatible with Wireshark packet analysis software. Extensions like .exe are executable files, .tgz are compressed archives, and .pcap is also a packet capture format but .cap is the standard extension used by fw monitor for Wireshark compatibility.

Correct answer: /var/log/dump/usermode

Usermode core files in Check Point systems are located in /var/log/dump/usermode directory. These core dump files are generated when usermode processes crash and are essential for troubleshooting application-level issues on Check Point gateways and management servers. The /var/suroot directory is for different system files, while and prefixed paths are not the correct locations for usermode core dumps.

Correct answer: Every 60 seconds

A Check Point gateway with Performance Pack (SecureXL) automatically reviews and redistributes interface affinity between cores every 60 seconds by default. This automatic load balancing helps optimize network traffic processing across multiple CPU cores for maximum performance. Interface affinity is not static and can be dynamically adjusted based on traffic patterns and core utilization, rather than being fixed at gateway build time. Reference: https://sc1.checkpoint.com/documents/R76/CP_R76_PerformanceTuning_WebAdmin/6731.htm