1. Home
  2. CheckPoint
  3. 156-115.77

Check Point Certified Security Master

Exam Details

  • Exam Code
    :156-115.77
  • Exam Name
    :Check Point Certified Security Master
  • Certification
    :CCSM
  • Vendor
    :CheckPoint
  • Total Questions
    :295 Q&As
  • Last Updated
    :May 14, 2024

CheckPoint CCSM 156-115.77 Questions & Answers

  • Question 31:

    You have to establish a VPN communication between 2 spokes, routed through the Hub gateway. Where do you configure VPN routing?

    A. Security Gateway Object

    B. WebUI

    C. vpn_route.conf

    D. VPN shell

  • Question 32:

    Where would an administrator set an email alert for a specific permanent VPN tunnel?

    A. Edit the file vpnconf.

    B. Run sysconfig.

    C. In the Tunnel Properties select Mail Alert.

    D. You can only enable logging or SNMP traps.

  • Question 33:

    Which of the these dynamic route protocols CANNOT be used along with VTI (VPN Tunnel Interface).

    A. OSPFR

    B. IGRP

    C. IPv1

    D. BGP4

  • Question 34:

    What is the prefix name for the interface when creating an unnumbered VTI in GAIA?

    A. VTii

    B. tun

    C. vpnt

    D. VTI

  • Question 35:

    How can an administrator stay up-to-date on the status of their VPN Tunnels?

    A. Tracking settings can be configured on the Tunnel Management screen of the Community Properties screen for all VPN tunnels.

    B. Make a change in /proc/net/tun.

    C. Run vpn tu and select the option Live Monitoring.

    D. In Smartview Tracker.

  • Question 36:

    You would like to configure unnumbered VTIs and your environment uses load sharing clustering. Would this clustering technology be supported by your unnumbered VTI's?

    A. No, unnumbered VTIs only support VRRP HA active-passive mode.

    B. Yes, unnumbered VTIs only support clustering load sharing.

    C. Yes, all HA modes are supported.

    D. No, unnumbered VTIs do not support any HA modes.

  • Question 37:

    You are configuring dynamic routing on Secure Platform, as the administrator you run the command pro enable and reboot. You are confident that your configuration has been done correctly. When you check, you find the dynamic routing daemon has not started. What is the likely cause of this issue?

    A. Secure Platform does not support dynamic routing.

    B. You need to apply the license and push the policy.

    C. Dynamic routing needs to be enabled in cpconfig.

    D. You must push the policy after your reboot.

  • Question 38:

    What operating systems support unnumbered VTIs?

    A. GAIA and Secure Platform

    B. Solaris and IPSO

    C. GAIA and IPSO

    D. Secure Platform and IPSO

  • Question 39:

    Which technology is not supported with route-based VPNs?

    A. Unnumbered VTI

    B. Numbered VTI

    C. IKEv2

    D. OSPF

  • Question 40:

    Which feature is not supported with unnumbered VTI?

    A. Proxy interfaces

    B. High availability

    C. Policy based routing

    D. Anti-spoofing

Related Exams:

Tips on How to Prepare for the Exams

Nowadays, the certification exams become more and more important and required by more and more enterprises when applying for a job. But how to prepare for the exam effectively? How to prepare for the exam in a short time with less efforts? How to get a ideal result and how to find the most reliable resources? Here on Vcedump.com, you will find all the answers. Vcedump.com provide not only CheckPoint exam questions, answers and explanations but also complete assistance on your exam preparation and certification application. If you are confused on your 156-115.77 exam preparations and CheckPoint certification application, do not hesitate to visit our Vcedump.com to find your solutions here.