CheckPoint Checkpoint Certifications 156-215.77 Questions & Answers

• Question 111:

  Which command line interface utility allows the administrator to verify the Security Policy name and timestamp currently installed on a firewall module?

  A. cpstat fwd

  B. fw ver

  C. fw stat

  D. fw ctl pstat

  Correct Answer: C

• Question 112:

  Which of the following statements accurately describes the command upgrade_export?

  A. upgrade_export stores network-configuration data, objects, global properties, and the database revisions prior to upgrading the Security Management Server.

  B. Used primarily when upgrading the Security Management Server, upgrade_export stores all object databases and the /conf directories for importing to a newer Security Gateway version.

  C. upgrade_export is used when upgrading the Security Gateway, and allows certain files to be included or excluded before exporting.

  D. This command is no longer supported in GAiA.

  Correct Answer: B

• Question 113:

  MegaCorp's security infrastructure separates Security Gateways geographically. You must request a central license for one remote Security Gateway. How do you apply the license?

  A. Using the remote Gateway's IP address, and attaching the license to the remote Gateway via SmartUpdate.

  B. Using your Security Management Server's IP address, and attaching the license to the remote Gateway via SmartUpdate.

  C. Using the remote Gateway's IP address, and applying the license locally with the command cplic put.

  D. Using each of the Gateways' IP addresses, and applying the licenses on the Security Management Server with the command cprlic put.

  Correct Answer: B

• Question 114:

  You intend to upgrade a Check Point Gateway from R71 to R77. Prior to upgrading, you want to back up the Gateway should there be any problems with the upgrade. Which of the following allows for the Gateway configuration to be completely backed up into a manageable size in the least amount of time?

  A. database revision

  B. snapshot

  C. upgrade_export

  D. backup

  Correct Answer: D

• Question 115:

  Where do you verify that UserDirectory is enabled?

  A. Verify that Security Gateway > General Properties > Authentication > Use UserDirectory (LDAP) for Security Gateways is checked

  B. Verify that Global Properties > Authentication > Use UserDirectory (LDAP) for Security Gateways is checked

  C. Verify that Security Gateway > General Properties > UserDirectory (LDAP) > Use UserDirectory (LDAP) for Security Gateways is checked

  D. Verify that Global Properties > UserDirectory (LDAP) > Use UserDirectory (LDAP) for Security Gateways is checked

  Correct Answer: D

• Question 116:

  Which command allows you to view the contents of an R77 table?

  A. fw tab -a

  B. fw tab -t

  C. fw tab -s

  D. fw tab -x

  Correct Answer: B

• Question 117:

  In which Rule Base can you implement an Access Role?

  A. DLP

  B. Mobile Access

  C. IPS

  D. Firewall

  Correct Answer: D

• Question 118:

  The London Security Gateway Administrator has just installed the Security Gateway and Management Server. He has not changed any default settings. As he tries to configure the Gateway, he is unable to connect.

  

  Which troubleshooting suggestion will NOT help him?

  A. Check if some intermediate network device has a wrong routing table entry, VLAN assignment, duplex-mismatch, or trunk issue.

  B. Test the IP address assignment and routing settings of the Security Management Server, Gateway, and console client.

  C. Verify the SIC initialization.

  D. Verify that the Rule Base explicitly allows management connections.

  Correct Answer: D

• Question 119:

  ALL of the following options are provided by the GAiA sysconfig utility, EXCEPT:

  A. Export setup

  B. DHCP Server configuration

  C. Time and Date

  D. GUI Clients

  Correct Answer: D

• Question 120:

  Which of the following authentication methods can be configured in the Identity Awareness setup wizard?

  A. TACACS

  B. Captive Portal

  C. Check Point Password

  D. Windows password

  Correct Answer: B