CheckPoint 156-115.77 Online Practice Questions and Exam Preparation

CheckPoint 156-115.77 Online Questions & Answers

• Question 131:

  By default, the size of the fwx_alloc table is: A. 65535

  B. 65536
  C. 25000
  D. 1024
  C. 25000

• Question 132:

  You would like to configure unnumbered VTIs and your environment uses load sharing clustering. Would this clustering technology be supported by your unnumbered VTI's?

  A. No, unnumbered VTIs only support VRRP HA active-passive mode.
  B. Yes, unnumbered VTIs only support clustering load sharing.
  C. Yes, all HA modes are supported.
  D. No, unnumbered VTIs do not support any HA modes.
  A. No, unnumbered VTIs only support VRRP HA active-passive mode.

• Question 133:

  Which of the following commands shows the high watermark threshold for triggering the cluster under load mechanism in R77?

  A. fw ctl get int fwha_cul_mechanism_enable
  B. fw ctl get int fwha_cul_cluster_short_timeout
  C. fw ctl get int fwha_cul_member_cpu_load_limit
  D. fw ctl get int fwha_cul_policy_freeze_event_timeout_millisec
  C. fw ctl get int fwha_cul_member_cpu_load_limit

• Question 134:

  What do the `F' flags mean in the output of fwaccel conns?

  A. Forward to firewall
  B. Flag set for debug
  C. Fast path packets
  D. Flow established
  A. Forward to firewall

• Question 135:

  Your company has recently decided to allow remote access for clients. You find that no one is able to connect, although you are confident that your rule set and remote access community has been defined correctly. What is the most likely cause, based on the options below? You have the following debug file:

  

  A. RDP is being blocked upstream.
  B. You have selected IKEv2 only in Global Properties > Remote Access > VPN Authentication and Encryption.
  C. Remote access clients are all behind NAT devices.
  D. Implied rule is not set to accept control connections.
  B. You have selected IKEv2 only in Global Properties > Remote Access > VPN Authentication and Encryption.

• Question 136:

  Where would you go to adjust the number of Kernels in CoreXL?

  A. Cpconfig
  B. fw ctl conf
  C. fw ctl affinity
  D. fw ctl multik stat
  A. Cpconfig

• Question 137:

  When a cluster member is completely powered down, how will the other member identify if there is network connectivity?

  A. The working member will ARP for the default gateway.
  B. The working member will look for replies to traffic sent from internal hosts.
  C. The working member will automatically assume connectivity.
  D. The working member will Ping IPs in the subnet until it gets a response.
  D. The working member will Ping IPs in the subnet until it gets a response.

• Question 138:

  Which command will NOT display information related to memory usage?

  A. free
  B. fw ctl pstat
  C. cat /proc/meminfo
  D. memoryinfo.conf
  D. memoryinfo.conf

• Question 139:

  What is the length of an IPv6 address?

  A. 128 Bytes
  B. 54 bits
  C. 128 bits
  D. 6 Bytes
  C. 128 bits

• Question 140:

  A new packet has arrived to a firewall's interface. The packet was compared with the connection table and there is no match. What process does the firewall start with that connection?

  A. The packet will be then forwarded to the outbound interface for handling.
  B. The new packet represents a new flow and requires a new connection table entry.
  C. The packet will be rejected by the kernel firewall.
  D. The packet will be forwarded to the firewall to apply the Security Policy.
  D. The packet will be forwarded to the firewall to apply the Security Policy.