CheckPoint 156-115.77 Online Practice Questions and Exam Preparation

CheckPoint 156-115.77 Online Questions & Answers

• Question 201:

  Why would you choose to combine dynamic routing protocols and VPNs?

  A. All options listed.
  B. In the case of one tunnel failure, other tunnels may be used to route the traffic.
  C. Dynamic-routing information can propagate over the VPN, utilizing the VPN as just another point-to- point link in the network.
  D. The VPN device can be automatically updated with network changes on any VPN peer Gateway without the need to update the VPN Domain's configuration.
  A. All options listed.

• Question 202:

  After disabling SecureXL you ran command fw monitor to help troubleshoot a VPN issue. In your review you note that you only see pre-inbound traffic ("i") and no other traffic after this. Which of the following reasons could explain this output?

  A. You don't have an "encrypt" rule
  B. Traffic is not destined to the correct MAC address because you failed to set up proxy ARP
  C. You have overlapping encryption domains with the remote site
  D. Routes are set up incorrectly
  C. You have overlapping encryption domains with the remote site

• Question 203:

  Which command displays FireWall internal statistics about memory and traffic?

  A. fw getifs
  B. cpstat os f memory
  C. fw ctl pstat
  D. cpstat os f cpu
  C. fw ctl pstat

• Question 204:

  Which of the following statements about Full HA support with IPv6 is NOT true?

  A. There is no Dynamic Routing with IPv6.
  B. Mirrored Interfaces must have IPv4 addresses.
  C. Sync traffic must be IPv4.
  D. IPv6 does not support a Secondary Management Server.
  D. IPv6 does not support a Secondary Management Server.

• Question 205:

  The 'Maximum Entries' value in the GAiA Portal corresponds to the 'gc_thresh3' parameter in the Linux kernel and has value of 1024. Knowing this, you know that gc_thresh2 and gc_thresh1 if are automatically set to the values:

  A. gc_thresh2=256 and gc_thresh1=128
  B. gc_thresh2=512 and gc_thresh1=256
  C. gc_thresh2=1024 and gc_thresh1=1024
  D. gc_thresh1=256 and gc_thresh2=128
  B. gc_thresh2=512 and gc_thresh1=256

• Question 206:

  You run the command fwaccel conns and notice in the output that all the connections have "F" in the "flags" column, see below:

  

  What does this mean?

  A. Connections are being "forward to firewall" ("f2f").
  B. Connections are being "forwarded" to the accelerating engine.
  C. Connections are accelerated ("fastpath").
  D. Connections have the fragment flag set.
  A. Connections are being "forward to firewall" ("f2f").

• Question 207:

  What command would you use for a packet capture on an absolute position for TCP streaming (out) 1ffffe0

  A. fw ctl chain -po 1ffffe0 -o monitor.out
  B. fw monitor -po -0x1ffffe0 -o monitor.out
  C. fw monitor -e 0x1ffffe0 -o monitor.out
  D. fw monitor -pr 1ffffe0 -o monitor.out
  B. fw monitor -po -0x1ffffe0 -o monitor.out

• Question 208:

  Your Customer would like to enable IPS in his Corporate Cluster, but he is concerned about high CPU usage because if the IPS inspection. What feature would you configure to disable inspection if a high CPU usage develops?

  A. It is not possible. In this case no enable IPS
  B. Bypass Under Load. (In IPS Option on Gateway Properties)
  C. Bypass Inspection. (In IPS Option on Gateway Properties)
  D. Disable Inspection. (In IPS Option on Gateway Properties)
  B. Bypass Under Load. (In IPS Option on Gateway Properties)

• Question 209:

  Which process should you debug when SmartDashboard authentication is rejected?

  A. fwm
  B. cpd
  C. fwd
  D. DAService
  A. fwm

• Question 210:

  You are configuring OSPF on your Secure Platform firewall. You are in expert mode and run the commands:

  interface vt-Gateway_C

  IP ospf 1 area 0.0.0.0

  exit

  When you run show running-config you do not see your OSPF configuration listed Why?

  A. You did not run command save running config before you exited.
  B. You should not have moved to expert mode to make these configurations.
  C. You did not run command save configuration before you exited.
  D. You did not run command enable before you exited.
  D. You did not run command enable before you exited.