CheckPoint 156-215.77 Online Practice Questions and Exam Preparation

CheckPoint 156-215.77 Online Questions & Answers

• Question 121:

  You are running the license_upgrade tool on your GAiA Gateway. Which of the following can you NOT do with the upgrade tool?

  A. Perform the actual license-upgrade process
  B. Simulate the license-upgrade process
  C. View the licenses in the SmartUpdate License Repository
  D. View the status of currently installed licenses
  C. View the licenses in the SmartUpdate License Repository

• Question 122:

  Your company's Security Policy forces users to authenticate to the Gateway explicitly, before they can use any services. The Gateway does not allow the Telnet service to itself from any location. How would you configure authentication on the Gateway? With a:

  A. Client Authentication rule using the manual sign-on method, using HTTP on port 900
  B. Client Authentication rule, using partially automatic sign on
  C. Client Authentication for fully automatic sign on
  D. Session Authentication rule
  A. Client Authentication rule using the manual sign-on method, using HTTP on port 900

• Question 123:

  The customer has a small Check Point installation which includes one Windows 2008 server as SmartConsole and Security Management Server with a second server running GAiA as Security Gateway. This is an example of a(n):

  A. Stand-Alone Installation.
  B. Distributed Installation.
  C. Unsupported configuration.
  D. Hybrid Installation.
  B. Distributed Installation.

• Question 124:

  How do you use SmartView Monitor to compile traffic statistics for your company's Internet Web activity during production hours?

  A. Select Tunnels view, and generate a report on the statistics.
  B. Configure a Suspicious Activity Rule which triggers an alert when HTTP traffic passes through the Gateway.
  C. Use Traffic settings and SmartView Monitor to generate a graph showing the total HTTP traffic for the day.
  D. View total packets passed through the Security Gateway.
  C. Use Traffic settings and SmartView Monitor to generate a graph showing the total HTTP traffic for the day.

• Question 125:

  A third-shift Security Administrator configured and installed a new Security Policy early this morning. When you arrive, he tells you that he has been receiving complaints that Internet access is very slow. You suspect the Security Gateway virtual memory might be the problem. Which SmartConsole component would you use to verify this?

  A. Eventia Analyzer
  B. SmartView Tracker
  C. SmartView Monitor
  D. This information can only be viewed with the command fw ctl pstat from the CLI.
  C. SmartView Monitor

• Question 126:

  Which command would provide the most comprehensive diagnostic information to Check Point Technical Support?

  A. fw cpinfo
  B. cpinfo -o date.cpinfo.txt
  C. diag
  D. cpstat - date.cpstat.txt
  B. cpinfo -o date.cpinfo.txt

• Question 127:

  Sally has a Hot Fix Accumulator (HFA) she wants to install on her Security Gateway which operates with GAiA, but she cannot SCP the HFA to the system. She can SSH into the Security Gateway, but she has never been able to SCP files to it. What would be the most likely reason she cannot do so?

  A. She needs to edit /etc/SSHd/SSHd_config and add the Standard Mode account.
  B. She needs to run sysconfig and restart the SSH process.
  C. She needs to edit /etc/scpusers and add the Standard Mode account.
  D. She needs to run cpconfig to enable the ability to SCP files.
  C. She needs to edit /etc/scpusers and add the Standard Mode account.

• Question 128:

  You need to completely reboot the Operating System after making which of the following changes on the Security Gateway? (i.e. the command cprestart is not sufficient.)

  1.

  Adding a hot-swappable NIC to the Operating System for the first time.

  2.

  Uninstalling the R77 Power/UTM package.

  3.

  Installing the R77 Power/UTM package.

  4.

  Re-establishing SIC to the Security Management Server.

  5.

  Doubling the maximum number of connections accepted by the Security Gateway.

  A. 3 only
  B. 1, 2, 3, 4, and 5
  C. 2, 3 only
  D. 3, 4, and 5 only
  C. 2, 3 only

• Question 129:

  Which rule is responsible for the client authentication failure? Exhibit:

  

  A. Rule 4
  B. Rule 6
  C. Rule 3
  D. Rule 5
  A. Rule 4

• Question 130:

  Which of the following is NOT useful to verify whether or not a Security Policy is active on a Gateway?

  A. fw ctl get string active_secpol
  B. fw stat
  C. cpstat fw -f policy
  D. Check the Security Policy name of the appropriate Gateway in SmartView Monitor.
  A. fw ctl get string active_secpol