156-915.80 Exam Questions and Answers

QUESTION: 31

The Firewall kernel is replicated multiple times, therefore:

The Firewall kernel only touches the packet if the connection is accelerated
The Firewall can run different policies per core
The Firewall kernel is replicated only with new connections and deletes itself once the connection times out
The Firewall can run the same policy on all cores

Answer(s): D

Explanation:

On a Security Gateway with CoreXL enabled, the Firewall kernel is replicated multiple times. Each replicated copy, or instance, runs on one processing core. These instances handle traffic concurrently, and each instance is a complete and independent inspection kernel. When CoreXL is enabled, all the kernel instances in the Security Gateway process traffic through the same interfaces and apply the same security policy.

Reveal Solution Next Question

QUESTION: 32

The "MAC magic" value must be modified under the following condition:

There is more than one cluster connected to the same VLAN
A firewall cluster is configured to use Multicast for CCP traffic
There are more than two members in a firewall cluster
A firewall cluster is configured to use Broadcast for CCP traffic

Answer(s): D

Reveal Solution Next Question

QUESTION: 33

Which command shows the current connections distributed by CoreXL FW instances?

fw ctl multik stat
fw ctl affinity l
fw ctl instances v
fw ctl iflist

Answer(s): A

Explanation:

The fw ctl multik stat and fw6ctl multik stat (multi-kernel statistics) commands show information for each kernel instance. The state and processing core number of each instance is displayed, along with:

Reveal Solution Next Question

QUESTION: 34

Which features are only supported with R80.10 Gateways but not R77.x?

Access Control policy unifies the Firewall, Application Control & URL Filtering, Data Awareness, and Mobile Access Software Blade policies.
Limits the upload and download throughput for streaming media in the company to 1 Gbps.
The rule base can be built of layers, each containing a set of the security rules. Layers are inspected in the order in which they are defined, allowing control over the rule base flow and which security functionalities take precedence.
Time object to a rule to make the rule active only during specified times.

Answer(s): C

Reveal Solution Next Question

QUESTION: 35

What API command below creates a new host with the name "New Host" and IP address of "192.168.0.10"?

new host name "New Host" ip-address "192.168.0.10"
set host name "New Host" ip-address "192.168.0.10"
create host name "New Host" ip-address "192.168.0.10"
add host name "New Host" ip-address "192.168.0.10"

Answer(s): D

Explanation:

Sample Command with SmartConsole CLI You can use the add host command to create a new host and then publish the changes. > add host name "Sample_Host" ip-address "192.0.2.3" > publish

Reveal Solution Next Question

Checkpoint 156-915.80 Exam (page: 7) Checkpoint Check Point Certified Security Expert Update - R80.10 Updated on: 25-Dec-2025

QUESTION: 31

Explanation:

QUESTION: 32

QUESTION: 33

Explanation:

QUESTION: 34

QUESTION: 35

Explanation:

Checkpoint 156-915.80 Exam (page: 7)
Checkpoint Check Point Certified Security Expert Update - R80.10
Updated on: 25-Dec-2025