CheckPoint 156-215.77 Online Practice Questions and Exam Preparation

CheckPoint 156-215.77 Online Questions & Answers

• Question 1:

  How can you recreate the Security Administrator account, which was created during initial Management Server installation on GAiA?

  A. Export the user database into an ASCII file with fwm dbexport. Open this file with an editor, and delete the Administrator Account portion of the file. You will be prompted to create a new account.
  B. Type cpm -a, and provide the existing Administrator's account name. Reset the Security Administrator's password.
  C. Launch cpconfig and delete the Administrator's account. Recreate the account with the same name.
  D. Launch SmartDashboard in the User Management screen, and delete the cpconfig administrator.
  C. Launch cpconfig and delete the Administrator's account. Recreate the account with the same name.

• Question 2:

  Which of the following allows administrators to allow or deny traffic to or from a specific network based on the user's credentials?

  A. Access Policy
  B. Access Role
  C. Access Rule
  D. Access Certificate
  B. Access Role

• Question 3:

  Message digests use which of the following?

  A. DES and RC4
  B. IDEA and RC4
  C. SSL and MD4
  D. SHA-1 and MD5
  D. SHA-1 and MD5

• Question 4:

  A digital signature:

  A. Guarantees the authenticity and integrity of a message.
  B. Automatically exchanges shared keys.
  C. Decrypts data to its original form.
  D. Provides a secure key exchange mechanism over the Internet.
  A. Guarantees the authenticity and integrity of a message.

• Question 5:

  Why are certificates preferred over pre-shared keys in an IPsec VPN?

  A. Weak performancE. PSK takes more time to encrypt than Diffie-Hellman.
  B. Weak Security: PSK are static and can be brute-forced.
  C. Weak security: PSKs can only have 112 bit length.
  D. Weak scalability: PSKs need to be set on each and every Gateway.
  B. Weak Security: PSK are static and can be brute-forced.

• Question 6:

  You review this Security Policy because Rule 4 is inhibited. Which Rule is responsible? Exhibit:

  

  A. No rule inhibits Rule 4.
  B. Rule 1
  C. Rule 2
  D. Rule 3
  C. Rule 2

• Question 7:

  When using LDAP as an authentication method for Identity Awareness, the query:

  A. Requires client and server side software.
  B. Prompts the user to enter credentials.
  C. Requires administrators to specifically allow LDAP traffic to and from the LDAP Server and the Security Gateway.
  D. Is transparent, requiring no client or server side software, or client intervention.
  D. Is transparent, requiring no client or server side software, or client intervention.

• Question 8:

  Which Check Point address translation method allows an administrator to use fewer ISP- assigned IP addresses than the number of internal hosts requiring Internet connectivity?

  A. Hide
  B. Static Destination
  C. Static Source
  D. Dynamic Destination
  A. Hide

• Question 9:

  You are running a R77 Security Gateway on GAiA. In case of a hardware failure, you have a server with the exact same hardware and firewall version installed. What back up method could be used to quickly put the secondary firewall into production?

  A. manual backup
  B. upgrade_export
  C. backup
  D. snapshot
  D. snapshot

• Question 10:

  How do you recover communications between your Security Management Server and Security Gateway if you lock yourself out through a rule or policy mis-configuration?

  A. fw unload policy
  B. fw unloadlocal
  C. fw delete all.all@localhost
  D. fwm unloadlocal
  B. fw unloadlocal