CheckPoint Checkpoint Certifications 156-115.77 Questions & Answers

• Question 171:

  When are rules that include identity awareness access roles accelerated through SecureXL?

  A. Rules using Identity Awareness are always accelerated.

  B. Only when `Unauthenticated Guests' is included in the access role.

  C. They have no bearing on whether the connection for the rule is accelerated.

  D. Rules using Identity Awareness are never accelerated.

  Correct Answer: C

• Question 172:

  According to this Rule Base, templates will be created until which rule?

  

  A. Rule 4

  B. Rule 2

  C. Rule 3

  D. Rule 5

  Correct Answer: B

• Question 173:

  What command can be used to get the following output?

  

  A. fw ctl kdebug

  B. fw monitor e "accept;"

  C. fwaccel conns

  D. netstat -ni

  Correct Answer: C

• Question 174:

  What command would you use to determine if a particular connection is being accelerated by SecureXL?

  A. fw tab t connections u

  B. fw ctl kdebug

  C. fwaccel stat

  D. fwaccel conns

  Correct Answer: D

• Question 175:

  A new packet has arrived to a firewall's interface. The packet was compared with the connection table and there is no match. What process does the firewall start with that connection?

  A. The packet will be then forwarded to the outbound interface for handling.

  B. The new packet represents a new flow and requires a new connection table entry.

  C. The packet will be rejected by the kernel firewall.

  D. The packet will be forwarded to the firewall to apply the Security Policy.

  Correct Answer: D

• Question 176:

  The command fwaccel stat displays what information?

  A. Accelerator status, accept templates, drop templates

  B. Accelerated packets, accept templates, dropped packets

  C. Accelerator status, accelerated rules, drop templates

  D. Accelerator status, CoreXL state, drop templates

  Correct Answer: A

• Question 177:

  When running a SecureXL debug how do you initialize the debug buffer to 32000?

  A. fwaccel debug buf 32000

  B. fw ctl debug buf 32000

  C. sim debug buf 32000

  D. fwaccel dbg buf 32000

  Correct Answer: B

• Question 178:

  Look at the follow Rule Base display. Rule 5 contains a TIME object. What is the effect on the following rules?

  

  A. Rule 6 will be eligible but Rule 7 will not.

  B. All subsequent rules below Rule 5 will not be templated, regardless of the rule

  C. No effect. Rules 6 and 7 will be eligible for templating.

  D. The restriction on one rule does not affect later rules with regards to templates.

  Correct Answer: B

• Question 179:

  SecureXL uses templating to accelerate traffic passing through the gateway. What command should you run to determine if Accept, Drop and NAT templating is enabled?

  A. fwaccel stat

  B. fw ctl pstat

  C. cphaprob -a if

  D. cpconfig

  Correct Answer: A

• Question 180:

  Certain rules will disable connection rate acceleration (templates) in the Rule Base. What command should be used to determine on what rule templates are disabled?

  A. cpconfig

  B. cphaprob -a if

  C. fw ctl pstat

  D. fwaccel stat

  Correct Answer: D