CheckPoint Checkpoint Certifications 156-215.77 Questions & Answers

• Question 321:

  A digital signature:

  A. Guarantees the authenticity and integrity of a message.

  B. Automatically exchanges shared keys.

  C. Decrypts data to its original form.

  D. Provides a secure key exchange mechanism over the Internet.

  Correct Answer: A

• Question 322:

  Where can an administrator configure the notification action in the event of a policy install time change?

  A. SmartView Monitor > Gateways > Thresholds Settings

  B. SmartView Monitor > Gateway Status > System Information > Thresholds

  C. SmartDashboard > Policy Package Manager

  D. SmartDashboard > Security Gateway Object > Advanced Properties Tab

  Correct Answer: A

• Question 323:

  Your company is running Security Management Server R77 on GAiA, which has been migrated through each version starting from Check Point 4.1. How do you add a new administrator account?

  A. Using SmartDashboard, under Users, select Add New Administrator

  B. Using SmartDashboard or cpconfig

  C. Using the Web console on GAiA under Product configuration, select Administrators

  D. Using cpconfig on the Security Management Server, choose Administrators

  Correct Answer: A

• Question 324:

  Tom has been tasked to install Check Point R77 in a distributed deployment. Before Tom installs the systems this way, how many machines will he need if he does NOT include a SmartConsole machine in his calculations?

  A. Three machines

  B. One machine

  C. Two machines

  D. One machine, but it needs to be installed using SecurePlatform for compatibility purposes

  Correct Answer: C

• Question 325:

  Where is the easiest and BEST place to find information about connections between two machines?

  A. All options are valid.

  B. On a Security Gateway using the command fw log.

  C. On a Security Management Server, using SmartView Tracker.

  D. On a Security Gateway Console interface; it gives you detailed access to log files and state table information.

  Correct Answer: C

• Question 326:

  After filtering a fw monitor trace by port and IP, a packet is displayed three times; in the i, I, and o inspection points, but not in the O inspection point. Which is the likely source of the issue?

  A. The packet has been sent out through a VPN tunnel unencrypted.

  B. An IPSO ACL has blocked the packet's outbound passage.

  C. A SmartDefense module has blocked the packet.

  D. It is due to NAT.

  Correct Answer: D

• Question 327:

  What happens when you select File > Export from the SmartView Tracker menu?

  A. Current logs are exported to a new *.log file.

  B. Exported log entries are not viewable in SmartView Tracker.

  C. Logs in fw.log are exported to a file that can be opened by Microsoft Excel.

  D. Exported log entries are deleted from fw.log.

  Correct Answer: C

• Question 328:

  Which SmartView Tracker selection would most effectively show who installed a Security Policy blocking all traffic from the corporate network?

  A. Management tab

  B. Custom filter

  C. Network and Endpoint tab

  D. Active tab

  Correct Answer: A

• Question 329:

  Which SmartConsole tool would you use to see the last policy pushed in the audit log?

  A. SmartView Tracker

  B. None, SmartConsole applications only communicate with the Security Management Server.

  C. SmartView Status

  D. SmartView Server

  Correct Answer: A

• Question 330:

  Which feature or command provides the easiest path for Security Administrators to revert to earlier versions of the same Security Policy and objects configuration?

  A. Database Revision Control

  B. Policy Package management

  C. dbexport/dbimport

  D. upgrade_export/upgrade_import

  Correct Answer: A