Exam 156-315.80 topic 1 question 178 discussion

https://supportcenter.checkpoint.com/supportcenter/portal?action=portlets.SearchResultMainAction&eventSubmit_doGoviewsolutiondetails=&solutionid=sk52421

It looks like a question for those who work or studied on earlier versions, since I found the phrase (in the SmartConsole R80.20 help): "A firewall between SmartConsole and the management server blocks Port 19009 - port 19009 is used for a new service in R80 and higher. Allow traffic on this port for all clients and management servers." https://sc1.checkpoint.com/documents/R80.20/SmartConsole_OLH/EN/html_frameset.htm?topic=documents/R80.20/SmartConsole_OLH/EN/PNE_Pj0hjnq5ZalCAxB2Aw2 Also in CCSE R80.40 there is a phrase: CPM allows the GUI client and management server to communicate via web services using TCP port 19009. In this case, the answer is only 1: CPM port/TCP port 19009 But in reality, the full list is described in the article https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk52421

Correct answers should be: A. CPMI(18190) B. CPM(19009), CPMI(18190) https(443) C. CPM(19009), CPMI(18190) CPD(18191) D. ICA_Pull(18210), CPMI(18190) https(443) Taken from CCSE Practice Test

B is correct

CPMI itself uses port 18190 (which is given incorrect in option A). Correct answer is CPM - 19009

If you disable control connections for implicit rules (Global Properties > FireWall), you must open ports for SmartConsole to communicate with the Security Management Server. Make sure the SmartConsole computer can access these ports on the server: 18190 18264 Here port 18190 is not given so answer would be B - 19009

> netstat -noa | findstr [MGMT Server IP] :TCP [SmartConsole IP]:5904 [MGMT Server IP]:18190 ESTABLISHED 3488 :TCP [SmartConsole IP]:59922 [MGMT Server IP]:19009 ESTABLISHED 3956 :TCP [SmartConsole IP]:59930 [MGMT Server IP]:19009 ESTABLISHED 3956 :TCP [SmartConsole IP]:59942 [MGMT Server IP]:18190 ESTABLISHED 3956 :TCP [SmartConsole IP]:60286 [MGMT Server IP]:19009 CLOSE_WAIT 3956 > get-process | findstr 3956 : 1843 190 529328 612012 1193 90.78 3956 SmartConsole

18190 /tcp CPMI Check Point Management Interface - Protocol used for communicatopn ICA between the SmartConsole and the SmartCenter/SecurityManagement Server. - Protocol for connections from Multi-Domain GUI to MDS and CMA http://www.cpwiki.net/index.php/Check_point_service_ports

Due to Check Point B is correct!

Correct is B, CPMI use 18190 and not 18191

Correct answer is B