CheckPoint Checkpoint Certifications 156-115.77 Questions & Answers

• Question 231:

  Using the default values in R77 how many kernel instances will there be on a 16-core gateway?

  A. 16

  B. 8

  C. 12

  D. 14

  Correct Answer: D

• Question 232:

  After creating and pushing out a new policy, Joe finds that an old connection is still being allowed that should have been closed after his changes. He wants to delete the connection on the gateway, and looks it up with fw tab t connections u. Joe finds the connection he is looking for. What command should Joe use to remove this connection?

  <0,a128c22,89,a158508,89,11;10001,2281,25,15b,a1,4ecdfeee,ac,691400ac,7b6,3e,ffffffff,3c,3c,0,0,0,0, 0,0,0,0,0,0,0,0,0,0>

  A. fw tab t connections x d "0,a128c22,89,0a158508,89,11"

  B. fw tab t connections x e "0,a128c22,00000089,0a158508,00000089,00000011"

  C. fw tab t connections x d "00000000,a128c22,00000089,0a158508,00000089,00000011"

  D. fw tab t connections x e "0,a128c22,89,0a158508,89,11"

  Correct Answer: B

• Question 233:

  Which command clears all the connection table entries on a Security Gateway?

  A. fw tab t connetion u

  B. fw ctl tab t connetions u

  C. fw tab t connetion -s

  D. fw tab t connections -x

  Correct Answer: D

• Question 234:

  How can you see a dropped connection and the cause from the kernel?

  A. fw zdebug drop

  B. fw ctl debug drop on

  C. fw debug drop on

  D. fw ctl zdebug drop

  Correct Answer: D

• Question 235:

  When you have edited the local.arp configuration, to support a manual NAT, what must be done to ensure proxy arps for both manual and automatic NAT rules function?

  A. In Global Properties > NAT tree select Merge manual proxy ARP configuration check box

  B. Run the command fw ctl ARP a on the gateway

  C. In Global Properties > NAT tree select Translate on client side check box

  D. Create and run a script to forward changes to the local.arp tables of your gateway

  Correct Answer: A

• Question 236:

  Which of the following commands shows the high watermark threshold for triggering the cluster under load mechanism in R77?

  A. fw ctl get int fwha_cul_mechanism_enable

  B. fw ctl get int fwha_cul_cluster_short_timeout

  C. fw ctl get int fwha_cul_member_cpu_load_limit

  D. fw ctl get int fwha_cul_policy_freeze_event_timeout_millisec

  Correct Answer: C

• Question 237:

  What mechanism solves asymmetric routing issues in a load sharing cluster?

  A. Flush and ACK

  B. Stateful Inspection

  C. SYN Defender

  D. State Synchronization

  Correct Answer: A

• Question 238:

  In some situations, switches may not play nicely with a Check Point Cluster and it is necessary to change from multicast to broadcast. What command should you invoke to correct the issue?

  A. set ccp broadcast

  B. cphaconf set_ccp broadcast

  C. cpha_conf set ccp broadcast

  D. This can only be changed via GuiDbEdit.

  Correct Answer: B

• Question 239:

  Which command should you use to stop kernel module debugging (excluding SecureXL)?

  A. fw ctl debug 0

  B. fw ctl zdebug - all

  C. fw debug fwd off; vpn debug off

  D. fw debug fwd off

  Correct Answer: A

• Question 240:

  Which command should you run to debug the VPN-1 kernel module?

  A. fw debug vpn on

  B. vpn debug on TDERROR_ALL_ALL=5

  C. fw ctl zdebug crypt kbuf

  D. fw ctl debug -m VPN all

  Correct Answer: D