CheckPoint 156-115.77 Online Practice Questions and Exam Preparation

CheckPoint 156-115.77 Online Questions & Answers

• Question 271:

  While troubleshooting a VPN issue between your gateway and a partner site you see an entry in Smartview Tracker that states "Info: encryption failure: Different community ID: possible NAT problem". Which of the following is the most likely cause?

  A. You have an encryption method mismatch.
  B. Implied rules in global properties such as ICMP and DNS are set to first instead of before last.
  C. You have not created a specific rule allowing VPN traffic.
  D. You have the wrong encryption domains configured.
  B. Implied rules in global properties such as ICMP and DNS are set to first instead of before last.

• Question 272:

  Which program could you use to analyze Phase I and Phase II packet exchanges?

  A. vpnView
  B. Check PointView
  C. IKEView
  D. vpndebugView
  C. IKEView

• Question 273:

  In an HA cluster, you modify the number of cores given to CoreXL on only one member using cpconfig and then issue a reboot. What is the expected ClusterXL status of this member when it comes up?

  A. Standby
  B. Ready
  C. Active
  D. Down
  A. Standby

• Question 274:

  What is the log file that shows the processes that participate in the tunnel initiation stage?

  A. $FWDIR/log/ikev2.xmll
  B. $FWDIR/log/ike.xmll
  C. $FWDIR/log/vpnd.elg
  D. $FWDIR/log/ike.elg
  C. $FWDIR/log/vpnd.elg

• Question 275:

  You are experiencing an issue where Endpoint Connect client connects successfully however, it disconnects every 20 seconds. What is the most likely cause of this issue?

  A. The Accept Remote Access control connections is not enabled in Global Properties > FireWall Implied Rules.
  B. You have selected IKEv2 only in Global Properties > Remote Access > VPN Authentication and Encryption.
  C. You are not licensed for Endpoint Connect client.
  D. Your remote access community is not configured.
  A. The Accept Remote Access control connections is not enabled in Global Properties > FireWall Implied Rules.

• Question 276:

  What command would you use to check if CoreXL is enabled?

  A. fw ctl multik stat
  B. cpconfig
  C. fw ctl affinity -1
  D. fw ctl pstat
  A. fw ctl multik stat

• Question 277:

  Ann wants to hide FTP traffic behind the virtual IP of her cluster. Where is the relevant file table.def located to make this modification?

  A. $FWDIR/log/table.def
  B. $FWDIR/conf/table.def
  C. $FWDIR/bin/table.def
  D. $FWDIR/lib/table.def
  D. $FWDIR/lib/table.def

• Question 278:

  What is the limit to the number of VPN directions that can be configured in a single rule?

  A. There is no limit.
  B. It is limited to the number of communities that exist in your dashboard.
  C. You may only configure one direction per rule.
  D. After configuring ten you must use a standard bi-directional condition.
  A. There is no limit.

• Question 279:

  What is the corresponding connection template entered into the SecureXL connection table from the connection: "10.0.0.100:1024 > 216.239.59.59:80"

  A. "10.0.0.100:1024 > 216.239.59.59:80"
  B. "10.0.0.100:1024 > 216.239.59.59:*"
  C. "10.0.0.100:* > 216.239.59.59:*"
  D. "10.0.0.100:* > 216.239.59.59:80"
  D. "10.0.0.100:* > 216.239.59.59:80"

• Question 280:

  Which information CANNOT be displayed by issuing the command cat /proc/cpuinfo?

  A. CPU family
  B. NFS_Unstable
  C. fpu
  D. vendor_id
  B. NFS_Unstable