CheckPoint Checkpoint Certifications 156-315.77 Questions & Answers

• Question 101:

  Your primary SmartCenter Server is installed on aSecure PlatformPro machine, which is also a VPN-1 Pro Gateway. You want to implement Management High Availability (HA). You have a spare machine to configure as the secondary SmartCenter Server. How do you configure the new machine to be the standby SmartCenter Server, without making any changes to the existing primary SmartCenter Server? (Changes can include uninstalling and reinstalling.)

  A. You cannot configure Management HA, when either the primary or secondary SmartCenter Server is running on a VPN-1 Pro Gateway.

  B. The new machine cannot be installed as the Internal Certificate Authority on its own.

  C. The secondary Server cannot be installed on a SecurePlatform Pro machine alone.

  D. Install the secondary Server on the spare machine. Add the new machine to the same network as the primary Server.

  Correct Answer: A

• Question 102:

  In R76, My Organization e-mail addresses or domains are used for:

  A. Scanning e-mails only if its sender e-mail address is part of this definition, by default.

  B. Defining the e-mail address of the SMTP relay server.

  C. FTP traffic sent from a user where his e-mail is part of this definition scanned by DLP, by default.

  D. HTTP traffic sent from a user where his e-mail is part of this definition scanned by DLP, by default.

  Correct Answer: A

• Question 103:

  You are troubleshooting a HTTP connection problem. You've started fw monitor -o http.pcap. When you openhttp. capwithWire sharkthere is only one line. What is the most likely reason?

  A. fw monitor was restricted to the wrong interface.

  B. Like SmartView Tracker only the first packet of a connection will be captured by fw monitor.

  C. By default only SYN pakets are captured.

  D. Acceleration was turned on and therefore fw monitor sees only SYN.

  Correct Answer: D

• Question 104:

  All of the following are used by the DLP engine to match a message during a scan, EXCEPT:

  A. Message Body

  B. Protocol

  C. Data Type

  D. Destination

  Correct Answer: A

• Question 105:

  Which Check Point tool allows you to open a debug file and see the VPN packet exchange details.

  A. PacketDebug.exe

  B. VPNDebugger.exe

  C. IkeView.exe

  D. IPSECDebug.exe

  Correct Answer: C

• Question 106:

  What is the meaning of the option Connect to the Internet?

  A. Smart Dashboardwill retrieve information from Check Point over the Internet. No information will be sent.

  B. Smart Dashboardwill retrieve information from Check Point over the Internet. Your information will be sent anonymously to Check Point.

  C. Smart Dashboardwill retrieve information from Check Point over the Internet using your User Center login.

  D. Smart Dashboardwill retrieve information from Check Point over the Internet.

  Correct Answer: C

• Question 107:

  What is a task of theSmart EventServer?

  A. Assign a severity level to an event.

  B. Display the received events.

  C. Analyze each IPS log entry as it enters the Log server.

  D. Forward what is known as an event to theSmart EventServer.

  Correct Answer: A

• Question 108:

  How frequently does CPSIZEME run by default?

  A. weekly

  B. 12 hours

  C. 24 hours

  D. 1 hour

  Correct Answer: C

• Question 109:

  Type the command and syntax that you would use to view the virtual cluster interfaces of a ClusterXL environment.

  A. cphaprob -a if

  B.

  C.

  D.

  Correct Answer: A

• Question 110:

  Which three of the following are ClusterXL member requirements?

  1) same operating systems

  2) same Check Point version

  3) same appliance model

  4) same policy

  A. 1, 2, and 4

  B. 1, 2, and 3

  C. 1, 3, and 4

  D. 2, 3, and 4

  Correct Answer: A