CheckPoint 156-315.77 Online Practice Questions and Exam Preparation

CheckPoint 156-315.77 Online Questions & Answers

• Question 1:

  IfSmart Workflowis configured to work without Sessions or Role Segregation, how does theSmart Dashboardfunction?

  A. TheSmart Dashboardfunctions as ifSmart Workflowis not enabled but an automatic session exists in the background and fullSmart Viewtracker and audit trail functionality will be available.
  B. TheSmart Dashboardwill function withoutSmart Workflow, with no session and no audit trail functionality.
  C. TheSmart Dashboardwill have no session butSmart ViewTracker and audit trail will be available.
  D. All functions ofSmart Workflowwill be available on a per rule basis.
  A. TheSmart Dashboardfunctions as ifSmart Workflowis not enabled but an automatic session exists in the background and fullSmart Viewtracker and audit trail functionality will be available.

• Question 2:

  You want to block corporate internal-net and localnet from accessing Web sites containing inappropriate content. You are using WebTrends for URL filtering. You have disabled VPN- 1 Control connections in the Global properties. Review the diagram and the Security Policies for GW_A and GW_B in the exhibit provided.

  

  Corporate users and localnet users receive message "Web cannot be displayed". In SmartView Tracker, you see the connections are dropped with message "content security is not reachable". What is the problem, and how do you fix it?

  A. The connection from GW_B to the internal WebTrends server is not allowed in the Policy. Fix: Add a rule in GW_A's Policy to allow source WebTrends Server, destination GW_B, service TCP port 18182, and action accept.
  B. The connection from GW_B to the WebTrend server is not allowed in the Policy. Fix: Add a rule in GW_B's Policy with Source GW_B, destination WebTrends server, service TCP port 18182, and action accept.
  C. The connection from GW_Ato the WebTrends server is not allowed in the Policy. Fix: Add a rule in GW_B's Policy with source WebTrends server, destination GW_A, service TCP port 18182, and action accept.
  D. The connection from GW_A to the WebTrends server is not allowed in the Policy. Fix: Add a rule in GW_B's Policy with source GW_A, destination: WebTrends server, service TCP port 18182, and action accept.
  E. The connection from GW_A to the WebTrends server is not allowed in the Policy. Fix: Add a rule in GW_A's Policy to allow source GW_A, destination WebTrends server, service TCP port 18182, and action accept.
  E. The connection from GW_A to the WebTrends server is not allowed in the Policy. Fix: Add a rule in GW_A's Policy to allow source GW_A, destination WebTrends server, service TCP port 18182, and action accept.

• Question 3:

  Your network includes ClusterXL running Multicast mode on two members, as shown in this topology: Your network is expanding, and you need to add new interfaces:

  10.10.10.1/24 on Member A, and 10.10.10.2/24 on Member B. The virtual IP address for interface 10.10.10.0/24 is 10.10.10.3.

  What is the correct procedure to add these interfaces?

  A. 1. Use the ifconfig command to configure and enable the new interface. 2. Run cpstop and cpstart on both members at the same time. 3. Update the topology in the cluster object for the cluster and both members. 4. Install the Security Policy.
  B. 1. Disable "Cluster membership" from one Gateway via cpconfig. 2. Configure the new interface via sysconfig from the "non-member" Gateway. 3. RE. enable "Cluster membership" on the Gateway. 4. Perform the same step on the other Gateway. 5. Update the topology in the cluster object for the cluster and members. 6. Install the Security Policy.
  C. 1. Run cpstop on one member, and configure the new interface via sysconfig. 2. Run cpstart on the member. Repeat the same steps on another member. 3. Update the new topology in the cluster object for the cluster and members. 4. Install the Security Policy.
  D. 1. Use sysconfig to configure the new interfaces on both members. 2. Update the topology in the cluster object for the cluster and both members. 3. Install the Security Policy.
  C. 1. Run cpstop on one member, and configure the new interface via sysconfig. 2. Run cpstart on the member. Repeat the same steps on another member. 3. Update the new topology in the cluster object for the cluster and members. 4. Install the Security Policy.

• Question 4:

  Fill in the blank. In Load Sharing Unicast mode, the internal cluster IP address is 10.4.8.3. The internal interfaces on two members are 10.4.8.1 and 10.4.8.2. Internal host 10.4.8.108 Pings 10.4.8.3, and receives replies. The following is the ARP table from the internal Windows host 10.4.8.108.

  

  Review the exhibit and type the IP address of the member serving as the pivot machine in the space below.

  A. 10.4.8.2
  A. 10.4.8.2

• Question 5:

  In a Cluster, some features such as VPN only function properly when:

  A. all cluster members have the same number of interfaces configured.
  B. all cluster members' clocks are synchronized.
  C. all cluster members have the same policy.
  D. all cluster members have the same Hot Fix Accumulator pack installed.
  B. all cluster members' clocks are synchronized.

• Question 6:

  MegaCorp is using SmartCenter Server with several gateways. Their requirements result in a heavy log load. Would it be feasible to add the SmartEvent Correlation Unit and SmartEvent Server to their SmartCenter Server?

  A. No. SmartCenter SIC will interfere with the function of SmartEvent.
  B. No. If SmartCenter is already under stress, the use of a separate server for SmartEvent is recommended.
  C. No, SmartEvent and Smartcenter cannot be installed on the same machine at the same time.
  D. Yes. SmartEvent must be installed on your SmartCenter Server.
  B. No. If SmartCenter is already under stress, the use of a separate server for SmartEvent is recommended.

• Question 7:

  Which of the following commands shows full synchronization status?

  A. fw hastat
  B. cphaprob -i list
  C. cphaprob -a if
  D. fw ctl iflist
  B. cphaprob -i list

• Question 8:

  What is the router command to save your OSPF configuration?

  A. save memory
  B. write config
  C. save
  D. write mem
  D. write mem

• Question 9:

  WhatSmart Consoleapplication allows you to change the Log Consolidation Policy?

  A. Smart Dashboard
  B. Smart Reporter
  C. Smart Update
  D. Smart EventServer
  B. Smart Reporter

• Question 10:

  When do modifications to the Event Policy take effect?

  A. When saved on the Correlation Units, and pushed as a policy.
  B. As soon as the Policy Tab window is closed.
  C. When saved on theSmart EventClient, and installed on theSmart EventServer.
  D. When saved on theSmart EventServer and installed to the Correlation Units.
  D. When saved on theSmart EventServer and installed to the Correlation Units.