CheckPoint Checkpoint Certifications 156-215.77 Questions & Answers

• Question 51:

  What information is found in the SmartView Tracker Management log?

  A. Historical reports log

  B. Policy rule modification date/time stamp

  C. Destination IP address

  D. Most accessed Rule Base rule

  Correct Answer: B

• Question 52:

  An Administrator without access to SmartDashboard installed a new IPSO-based R77 Security Gateway over the weekend. He e-mailed you the SIC activation key and the IP address of the Security Gateway. You want to confirm communication between the Security Gateway and the Management Server by installing the Policy. What might prevent you from installing the Policy?

  A. B. You first need to run the command fw unloadlocal on the R77 Security Gateway appliance in order to remove the restrictive default policy.

  B. C. You first need to create a new Gateway object in SmartDashboard, establish SIC via the Communication button, and define the Gateway's topology.

  C. D. You have not established Secure Internal Communications (SIC) between the Security Gateway and Management Server. You must initialize SIC on the Security Management Server.

  Correct Answer: C

• Question 53:

  Your users are defined in a Windows 2008 R2 Active Directory server. You must add LDAP users to a Client Authentication rule. Which kind of user group do you need in the Client Authentication rule in R77?

  A. External-user group

  B. LDAP group

  C. A group with a generic user

  D. All Users

  Correct Answer: B

• Question 54:

  How are cached usernames and passwords cleared from the memory of a R77 Security Gateway?

  A. By using the Clear User Cache button in SmartDashboard.

  B. Usernames and passwords only clear from memory after they time out.

  C. By retrieving LDAP user information using the command fw fetchldap.

  D. By installing a Security Policy.

  Correct Answer: D

• Question 55:

  Sally has a Hot Fix Accumulator (HFA) she wants to install on her Security Gateway which operates with GAiA, but she cannot SCP the HFA to the system. She can SSH into the Security Gateway, but she has never been able to SCP files to it. What would be the most likely reason she cannot do so?

  A. She needs to edit /etc/SSHd/SSHd_config and add the Standard Mode account.

  B. She needs to run sysconfig and restart the SSH process.

  C. She needs to edit /etc/scpusers and add the Standard Mode account.

  D. She needs to run cpconfig to enable the ability to SCP files.

  Correct Answer: C

• Question 56:

  Which command displays the installed Security Gateway kernel version?

  A. B. fw ver

  B. C. fw ver -k

  C. D. cpstat -gw

  Correct Answer: C

• Question 57:

  Which feature in R77 permits blocking specific IP addresses for a specified time period?

  A. Suspicious Activity Monitoring

  B. HTTP Methods

  C. Local Interface Spoofing

  D. Block Port Overflow

  Correct Answer: A

• Question 58:

  One of your remote Security Gateway's suddenly stops sending logs, and you cannot install the Security Policy on the Gateway. All other remote Security Gateways are logging normally to the Security Management Server, and Policy installation is not affected. When you click the Test SIC status button in the problematic Gateway object, you receive an error message. What is the problem?

  A. The remote Gateway's IP address has changed, which invalidates the SIC Certificate.

  B. The time on the Security Management Server's clock has changed, which invalidates the remote Gateway's Certificate.

  C. The Internal Certificate Authority for the Security Management Server object has been removed from objects_5_0.C.

  D. There is no connection between the Security Management Server and the remote Gateway. Rules or routing may block the connection.

  Correct Answer: D

• Question 59:

  How can you most quickly reset Secure Internal Communications (SIC) between a Security Management Server and Security Gateway?

  A. From cpconfig on the Gateway, choose the Secure Internal Communication option and retype the activation key. Next, retype the same key in the Gateway object in SmartDashboard and reinitialize Secure Internal Communications (SIC).

  B. Use SmartUpdate to retype the Security Gateway activation key. This will automatically sync SIC to both the Security Management Server and Gateway.

  C. From the Security Management Server's command line, type fw putkey -p .

  D. Run the command fwm sic_reset to reinitialize the Security Management Server Internal Certificate Authority (ICA). Then retype the activation key on the Security Gateway from SmartDashboard.

  Correct Answer: A

• Question 60:

  How can you reset the Security Administrator password that was created during initial Security Management Server installation on GAiA?

  A. Launch SmartDashboard in the User Management screen, and edit the cpconfig administrator.

  B. As expert user Type fwm -a, and provide the existing administrator's account name. Reset the Security Administrator's password.

  C. Type cpm -a, and provide the existing administrator's account name. Reset the Security Administrator's password.

  D. Export the user database into an ASCII file with fwm dbexport. Open this file with an editor, and delete the Password portion of the file. Then log in to the account without a password. You will be prompted to assign a new password.

  Correct Answer: B