CheckPoint 156-215.77 Online Practice Questions and Exam Preparation

CheckPoint 156-215.77 Online Questions & Answers

• Question 151:

  When attempting to connect with SecureClient Mobile you get the following error message:

  The certificate provided is invalid. Please provide the username and password.

  What is the probable cause of the error?

  A. Your user configuration does not have an office mode IP address so the connection failed.
  B. Your certificate is invalid.
  C. There is no connection to the server, and the client disconnected.
  D. Your user credentials are invalid.
  B. Your certificate is invalid.

• Question 152:

  You receive a notification that long-lasting Telnet connections to a mainframe are dropped after an hour of inactivity. Reviewing SmartView Tracker shows the packet is dropped with the error:

  Unknown established connection

  How do you resolve this problem without causing other security issues? Choose the BEST answer.

  A. Increase the service-based session timeout of the default Telnet service to 24-hours.
  B. Ask the mainframe users to reconnect every time this error occurs.
  C. Increase the TCP session timeout under Global Properties > Stateful Inspection.
  D. Create a new TCP service object on port 23 called Telnet-mainframe. Define a service- based session timeout of 24-hours. Use this new object only in the rule that allows the Telnet connections to the mainframe.
  D. Create a new TCP service object on port 23 called Telnet-mainframe. Define a service- based session timeout of 24-hours. Use this new object only in the rule that allows the Telnet connections to the mainframe.

• Question 153:

  Which SmartConsole tool would you use to see the last policy pushed in the audit log?

  A. SmartView Tracker
  B. None, SmartConsole applications only communicate with the Security Management Server.
  C. SmartView Status
  D. SmartView Server
  A. SmartView Tracker

• Question 154:

  You are the Security Administrator for MegaCorp. A Check Point firewall is installed and in use on a platform using GAiA. You have trouble configuring the speed and duplex settings of your Ethernet interfaces. Which of the following commands can be used in CLISH to configure the speed and duplex settings of an Ethernet interface and will survive a reboot? Give the BEST answer.

  A. ethtool
  B. set interface
  C. mii_tool
  D. ifconfig -a
  B. set interface

• Question 155:

  Which of the following commands can provide the most complete restoration of a R77 configuration?

  A. upgrade_import
  B. cpinfo -recover
  C. cpconfig
  D. fwm dbimport -p
  A. upgrade_import

• Question 156:

  You can include External commands in SmartView Tracker by the menu Tools > Custom Commands.

  The Security Management Server is running under GAiA, and the GUI is on a system running Microsoft Windows. How do you run the command traceroute on an IP address?

  A. There is no possibility to expand the three pre-defined options Ping, Whois, and Nslookup.
  B. Go to the menu Tools > Custom Commands and configure the Windows command tracert.exe to the list.
  C. Use the program GUIdbedit to add the command traceroute to the Security Management Server properties.
  D. Go to the menu, Tools > Custom Commands and configure the Linux command traceroute to the list.
  B. Go to the menu Tools > Custom Commands and configure the Windows command tracert.exe to the list.

• Question 157:

  UDP packets are delivered if they are ___________.

  A. a stateful ACK to a valid SYN-SYN/ACK on the inverse UDP ports and IP
  B. a valid response to an allowed request on the inverse UDP ports and IP
  C. bypassing the kernel by the forwarding layer of ClusterXL
  D. referenced in the SAM related dynamic tables
  B. a valid response to an allowed request on the inverse UDP ports and IP

• Question 158:

  All of the following are Security Gateway control connections defined by default implied rules, EXCEPT:

  A. Exclusion of specific services for reporting purposes.
  B. Acceptance of IKE and RDP traffic for communication and encryption purposes.
  C. Communication with server types, such as RADIUS, CVP, UFP, TACACS, and LDAP.
  D. Specific traffic that facilitates functionality, such as logging, management, and key exchange.
  A. Exclusion of specific services for reporting purposes.

• Question 159:

  Which of the following is a CLI command for Security Gateway R77?

  A. fw tab -u
  B. fw shutdown
  C. fw merge
  D. fwm policy_print
  A. fw tab -u

• Question 160:

  You have configured SNX on the Security Gateway. The client connects to the Security Gateway and the user enters the authentication credentials. What must happen after authentication that allows the client to connect to the Security Gateway's VPN domain?

  A. SNX modifies the routing table to forward VPN traffic to the Security Gateway.
  B. An office mode address must be obtained by the client.
  C. The SNX client application must be installed on the client.
  D. Active-X must be allowed on the client.
  A. SNX modifies the routing table to forward VPN traffic to the Security Gateway.