CheckPoint Checkpoint Certifications 156-115.77 Questions & Answers

• Question 121:

  What should you do after editing fwkern.conf to enable NAT templates?

  A. Install database

  B. Reboot

  C. Install policy

  D. Make sure the change shows up in Smartview Monitor

  Correct Answer: B

• Question 122:

  How would you determine the value of 'Maximum concurrent connections' of the NAT Table?

  A. fwx_alloc

  B. fwx_max_conns

  C. fwx_auth

  D. objects_5_0.C

  Correct Answer: A

• Question 123:

  From a Best Practices perspective, what percentage of your packets should be accelerated?

  A. 65%

  B. 90%

  C. 100%

  D. 75%

  Correct Answer: B

• Question 124:

  How does the Check Point Security Administrator enable NAT Templates?

  A. Run commands with syntax fw ctl set int cphwd_nat_templates_support 1 and fw ctl set int cphwd_nat_templates_enabled 1.

  B. Edit file $FWDIR/boot/modules/fwkern.conf with the lines "cphwd_nat_templates_support=1" and "cphwd_nat_templates_enabled=1".

  C. Set Firewall object > NAT > Advanced

  D. Set Global properties > NAT-Network address translation

  Correct Answer: B

• Question 125:

  You run the command fwaccel conns and notice in the output that all the connections have "F" in the "flags" column, see below:

  

  What does this mean?

  A. Connections are being "forward to firewall" ("f2f").

  B. Connections are being "forwarded" to the accelerating engine.

  C. Connections are accelerated ("fastpath").

  D. Connections have the fragment flag set.

  Correct Answer: A

• Question 126:

  You are running an inventory process within your corporate environment (R77) and need to find out CPU, memory, disk space, and information regarding the software blades enabled. What command could you use to easily gather this information?

  A. cpconfig

  B. fw ctl pstat

  C. SmartView Tracker

  D. cpview

  Correct Answer: D

• Question 127:

  A Rule Base has been improperly configured with a rule which disables templating at the top of the Rule Base. How will this impact traffic acceleration?

  A. SecureXL is disabled.

  B. Templates are disabled, and throughput acceleration only functions for rules above this one.

  C. Templates are disabled for this rule but it does not impact the rest of the Rule Base.

  D. Templates are disabled but throughput acceleration is still taking place.

  Correct Answer: D

• Question 128:

  You issue the command fwaccel stat and see the following: What is a possible reason that the "accept templates" is disabled?

  

  A. Rule one is a drop rule.

  B. Rule one uses static NAT.

  C. Rule one contains a time object.

  D. Your administrator has not enabled templating.

  Correct Answer: C

• Question 129:

  PXL is considered to be what type of acceleration?

  A. Fast Path

  B. Slow Path

  C. Medium Path

  D. PXL is not related to acceleration

  Correct Answer: C

• Question 130:

  What type of connections cannot be templated?

  A. Any connections that contain Hide NAT

  B. Complex connections such as FTP, H323, SQL, ETC

  C. UDP because it is not connection oriented

  D. TCP

  Correct Answer: B