CheckPoint 156-115.77 Online Practice Questions and Exam Preparation

CheckPoint 156-115.77 Online Questions & Answers

• Question 91:

  Where do you configure the file user.def to change the encryption domain of the Security Gateway?

  A. Management Server
  B. Endpoint Client
  C. Security Gateway
  D. interoperable device
  A. Management Server

• Question 92:

  You want to enable OSPF on Secure Platform, but you notice that the required gated daemon is not running. How can you enable this?

  A. Enter cpconfig, type Y to enable OSPF, type Y to restart Check Point services.
  B. Enter cpconfig, type Y to enable Advanced Routing, type Y to restart Check Point services.
  C. At the command prompt enter tellpm gated.
  D. Add an OSPF rule to your Rule Base.
  B. Enter cpconfig, type Y to enable Advanced Routing, type Y to restart Check Point services.

• Question 93:

  When optimizing a customer firewall Rule Base, what is the BEST way to start the analysis?

  A. With the command fwaccel stat followed by the command fwaccel stats.
  B. At the top of the Rule Base.
  C. Using the hit count column.
  D. Using the Compliance Software Blade.
  A. With the command fwaccel stat followed by the command fwaccel stats.

• Question 94:

  One of IPS Layers' main functions are to ensure compliance to well-defined protocol standards, detect anomalies if any exist, and assemble the data for further inspection by other components of the IPS engine. Which component is responsible for these functions?

  A. Context Management Interface layer (CMI)
  B. Protections
  C. Protocol Parsers
  D. Passive Streaming Library (PSL)
  C. Protocol Parsers

• Question 95:

  When you have edited the local.arp configuration, to support a manual NAT, what must be done to ensure proxy arps for both manual and automatic NAT rules function?

  A. In Global Properties > NAT tree select Merge manual proxy ARP configuration check box
  B. Run the command fw ctl ARP a on the gateway
  C. In Global Properties > NAT tree select Translate on client side check box
  D. Create and run a script to forward changes to the local.arp tables of your gateway
  A. In Global Properties > NAT tree select Merge manual proxy ARP configuration check box

• Question 96:

  Which of the following items is NOT part of the columns of the chain modules?

  A. Inbound/Outbound chain
  B. Function Pointer
  C. Chain position
  D. Module location
  A. Inbound/Outbound chain

• Question 97:

  What command allows you to monitor IPV6 packets in the kernel module?

  A. ip -6 neigh show
  B. ip -6 addr show
  C. tcpdump -nni eth ip6
  D. fw6 monitor
  D. fw6 monitor

• Question 98:

  Using the default values in R77 how many kernel instances will there be on a 16-core gateway?

  A. 16
  B. 8
  C. 12
  D. 14
  D. 14

• Question 99:

  What utility would you use to configure route-based VPNs?

  A. vpn sw_topology
  B. vpn shell
  C. vpn set_slim_server
  D. vpn tu
  B. vpn shell

• Question 100:

  Which file holds global Kernel values to survive reboot in a Check Point R77 gateway?

  A. $FWDIR/conf/fwkern.conf
  B. $FWDIR/boot/modules/fwkern.conf
  C. $FWDIR/boot/confwkern.conf
  D. $FWDIR/boot/fwkern.conf
  B. $FWDIR/boot/modules/fwkern.conf