CheckPoint Checkpoint Certifications 156-115.77 Questions & Answers

• Question 271:

  The user tried to connect in SmartDashboard and did not work. You started a FWM debug and receive the logs below:

  

  What is the error cause?

  A. IP not defined in $FWDIR/conf/gui-clients

  B. Wrong user and password

  C. Wrong password

  D. Wrong user

  Correct Answer: D

• Question 272:

  When troubleshooting and trying to understand which chain is causing a problem on the Security Gateway, you should use the command:

  A. fw ctl zdebug drop

  B. fw tab t connections

  C. fw monitor -e "accept;" -p all

  D. fw ctl chain

  Correct Answer: C

• Question 273:

  Which of the following items is NOT part of the columns of the chain modules?

  A. Inbound/Outbound chain

  B. Function Pointer

  C. Chain position

  D. Module location

  Correct Answer: A

• Question 274:

  John is a Security Administrator of a Check Point platform. He has a mis-configuration issue that points to the Rule Base. To obtain information about the issue, John runs the command:

  A. fw debug fw on and checks the file fwm.elg.

  B. fw kdebug fwm on and checks the file fwm.elg.

  C. fw debug fwm on and checks the file fwm.elg.

  D. fw kdebug fwm on and checks the file fw.elg.

  Correct Answer: C

• Question 275:

  When finished running a debug on the Management Server using the command fw debug fwm on how do you turn this debug off?

  A. fwm debug off

  B. fw ctl debug off

  C. fw debug off

  D. fw debug fwm off

  Correct Answer: D

• Question 276:

  Which commands will properly set the debug level to maximum and then run a policy install in debug mode for the policy Standard on gateway A-GW from an R77 GAiA Management Server?

  A. setenv TDERROR_ALL_ALL=5 fwm d load A-GW Standard

  B. setenv TDERROR_ALL_ALL=5 fwm d load Standard A-GW

  C. export TDERROR_ALL_ALL=5 fwm d load Standard A-GW

  D. export TDERROR_ALL_ALL=5 fwm d load A-GW Standard

  Correct Answer: C

• Question 277:

  What causes the SIP Early NAT chain module to appear in the chain?

  A. The SIP traffic is trying to pass through the firewall.

  B. SIP is configured in IPS.

  C. A VOIP domain is configured.

  D. The default SIP service is used in the Rule Base.

  Correct Answer: D

• Question 278:

  When you perform an install database, the status window is filled with large amounts of text. What could be the cause?

  A. There is an active fw monitor running.

  B. There is an environment variable of TDERROR_ALL_ALL set on the gateway.

  C. There is an active debug on the SmartConsole.

  D. There is an active debug on the FWM process.

  Correct Answer: D

• Question 279:

  You are running a debugging session and you have set the debug environment to TDERROR_ALL_ALL=5 using the command export TDERROR_ALL_ALL=5. How do you return the debug value to defaults?

  A. fw ctl debug 0x1ffffe0

  B. fw debug 0x1ffffe0

  C. export TDERROR_ALL_ALL

  D. unset TDERROR_ALL_ALL

  Correct Answer: D

• Question 280:

  What command would you use to view which debugs are set in your current working environment?

  A. "env" and "fw ctl debug"

  B. "cat /proc/etc"

  C. "fw ctl debug all"

  D. "export"

  Correct Answer: A