CheckPoint 156-115.77 Online Practice Questions and Exam Preparation

CheckPoint 156-115.77 Online Questions & Answers

• Question 211:

  The CoreXL software architecture includes the Secure Network Dispatcher (SND). One of the responsibilities of SND is to:

  A. Distribute non-accelerated packets among kernel instances
  B. Dispatch the packet securely through the VPN link
  C. Processing outgoing traffic from the network interfaces
  D. Dispatch the packet securely through the physical link
  A. Distribute non-accelerated packets among kernel instances

• Question 212:

  Which command should you use to stop kernel module debugging (excluding SecureXL)?

  A. fw ctl debug 0
  B. fw ctl zdebug - all
  C. fw debug fwd off; vpn debug off
  D. fw debug fwd off
  A. fw ctl debug 0

• Question 213:

  You are running an inventory process within your corporate environment (R77) and need to find out CPU, memory, disk space, and information regarding the software blades enabled. What command could you use to easily gather this information?

  A. cpconfig
  B. fw ctl pstat
  C. SmartView Tracker
  D. cpview
  D. cpview

• Question 214:

  How to check the overall SecureXL statistics:

  A. fwaccel on
  B. fwaccel stat
  C. cat /proc/ppk/statistics
  D. fwaccel conns
  C. cat /proc/ppk/statistics

• Question 215:

  In a ClusterXL cluster with delayed synchronization, which of the following is not true?

  A. The length of time for the delay can be edited.
  B. It applies only to TCP services whose Protocol Type is set to HTTP or None.
  C. Delayed Synchronization is disabled if the Track option in the rule is set to Log or Account.
  D. Delayed Synchronization is performed only for connections matching a SecureXL Connection Template.
  A. The length of time for the delay can be edited.

• Question 216:

  In Wire mode. if a packet reaches the gateway from a trusted source and is destined to a trusted destination, will the firewall do stateful inspection?

  A. No, but IPS inspection will still be enforced.
  B. Yes, the Firewall always performs stateful inspection.
  C. Yes, but only if SecureXL is disabled.
  D. No
  D. No

• Question 217:

  What operating systems support unnumbered VTIs?

  A. GAIA and Secure Platform
  B. Solaris and IPSO
  C. GAIA and IPSO
  D. Secure Platform and IPSO
  C. GAIA and IPSO

• Question 218:

  What steps can be taken if IPS is causing a High Performance Impact?

  A. Consider activating the "Bypass under Load" IPS setting on the gateway
  B. Check your IPS configuration assigned to this gateway and deactivate protections with critical or high performance impact
  C. Determine if different or custom IPS profiles are better suited for different gateways in your organization
  D. All options listed
  D. All options listed

• Question 219:

  In the gateway object, under topology you select the "Get All Members Interfaces with Topology" option and your newly configured unnumbered VTIs are not populated. Why is this information missing?

  A. VTI information on unnumbered interfaces should appear, so there is an issue with your configuration.
  B. VTI information on unnumbered interfaces is not required information for the VPN to work.
  C. VTI information on unnumbered interfaces needs to be entered manually.
  D. In order to fetch VTI information on unnumbered interfaces you must add an explicit rule to the policy.
  C. VTI information on unnumbered interfaces needs to be entered manually.

• Question 220:

  How do you add the route entry for the "Enforcement Point Gateway" on the Management Server?

  A. Designate this gateway in the VPN community properties.
  B. Update file $FWDIR/conf/user.def on each peer with a route entry to the enforcement point gateway.
  C. Edit file $FWDIR/conf/vpn_route.conf with a new route entry.
  D. Edit peers' WebUI to add a static route to the "designated enforcement point".
  C. Edit file $FWDIR/conf/vpn_route.conf with a new route entry.