CheckPoint 156-315.77 Online Practice Questions and Exam Preparation

CheckPoint 156-315.77 Online Questions & Answers

• Question 111:

  You are a SSL VPN Administrator. Your users complain that their Outlook Web Access is running extremely slowly, and their overall browsing experience continues to worsen. You suspect it could be a logging problem. Which of the following log files does Check Point recommend you purge?

  A. httpd*.log
  B. event_ws.log
  C. mod_ws_owd.log
  D. alert_owd.log
  A. httpd*.log

• Question 112:

  How many pre-defined exclusions are included by default inSmart EventR76as part of the product installation?

  A. 3
  C. 5
  D. 10
  A. 3

• Question 113:

  Where is it necessary to configure historical records inSmart ViewMonitor to generate Express reports inSmart Reporter?

  A. InSmart ViewMonitor, under Global Properties > Log and Masters
  B. InSmart Reporter, under Express > Network Activity
  C. InSmart Dashboard, theSmart ViewMonitor page in theR76Security Gateway object
  D. InSmart Reporter, under Standard > Custom
  C. InSmart Dashboard, theSmart ViewMonitor page in theR76Security Gateway object

• Question 114:

  You want VPN traffic to match packets from internal interfaces. You also want the traffic to exit the Security Gateway bound for all site-to-site VPN Communities, including Remote Access Communities. How should you configure the VPN match rule?

  A. Communities > Communities
  B. internal_clear > All_GwToGw
  C. internal_clear > All_communities
  D. Internal_clear > External_Clear
  C. internal_clear > All_communities

• Question 115:

  Which of the following manages Standard Reports and allows the administrator to specify automatic uploads of reports to a central FTP server?

  A. Smart Dashboard Log Consolidator
  B. Security Management Server
  C. Smart Reporter Database
  D. Smart Reporter
  D. Smart Reporter

• Question 116:

  How would you set the debug buffer size to 1024?

  A. Run fw ctl set buf 1024
  B. Run fw ctl kdebug 1024
  C. Run fw ctl debug -buf 1024
  D. Run fw ctl set int print_cons 1024
  C. Run fw ctl debug -buf 1024

• Question 117:

  Your customer asks you about Check PointSmart Workflow. His company must comply with various laws and regulations and therefore it is important for him to be able to see the changes made to a specific object0 How can the customer receive the required information?

  A. The customer can check compliance. This function compares the logs with the compliance requirements and automatically reports which part of the selected compliance is fulfilled and which is not.
  B. The customer can use the Check Point'sSmart ViewTracker to view the required information. He selects the log category Changed Objects.
  C. The customer can use the Record Details. This feature enables administrators to track changes that have been made to objects over an extended period of time. These changes are recorded inSmart viewTracker as audit logs.
  D. The customer can use the Check Point'sSmart ViewTracker directly to receive the required information. He selects the log categorySmart Workflow.
  C. The customer can use the Record Details. This feature enables administrators to track changes that have been made to objects over an extended period of time. These changes are recorded inSmart viewTracker as audit logs.

• Question 118:

  The following diagram illustrates how a VPN-1 SecureClient user tries to establish a VPN with hosts in the external_net and internal_net from the Internet. How is the Security Gateway VPN Domain created?

  

  A. Internal Gateway VPN Domain = internal_net; External VPN Domain = external net + external gateway object + internal_net.
  B. Internal Gateway VPN Domain = internal_net. External Gateway VPN Domain = external_net + internal gateway object
  C. Internal Gateway VPN Domain = internal_net; External Gateway VPN Domain = internal_net + external_net
  D. Internal Gateway VPN Domain = internal_net. External Gateway VPN Domain = internal VPN Domain + internal gateway object + external_net
  D. Internal Gateway VPN Domain = internal_net. External Gateway VPN Domain = internal VPN Domain + internal gateway object + external_net

• Question 119:

  How can you completely tear down a specific VPN tunnel in an intranet IKE VPN deployment?

  A. Run the command vpn tu on the Security Gateway, and choose the option "Delete all IPSec+IKE SAs for ALL peers and users".
  B. Run the command vpn tu on the SmartCenter Server, and choose the option "Delete all IPSec+IKE SAs for ALL peers and users".
  C. Run the command vpn tu on the Security Gateway, and choose the option "Delete all IPSec+IKE SAs for a given peer (GW)".
  D. Run the command vpn tu on the Security Gateway, and choose the option "Delete all IPSec SAs for a given user (Client)".
  E. Run the command vpn tu on the Security Gateway, and choose the option "Delete all IPSec SAs for ALL peers and users".
  C. Run the command vpn tu on the Security Gateway, and choose the option "Delete all IPSec+IKE SAs for a given peer (GW)".

• Question 120:

  Identify the correct step performed by SmartUpdate to upgrade a remote Security Gateway.

  A. After selecting "Packages > Distribute..." and choosing the target gateway, the selected package is copied from the Package Repository on the SmartCenter to the Security Gateway but the installation IS NOT performed.
  B. After selecting "Packages > Distribute..." and choosing the target gateway, the SmartUpdate wizard walks the Administrator through a Distributed Installation.
  C. After selecting "Packages > Distribute..." and choosing the target gateway, the selected package is copied from the Package Repository on the SmartCenter to the Security Gateway and the installation IS performed.
  D. After selecting "Packages > Distribute..." and choosing the target gateway, the selected package is copied from the CDROM of the SmartUpdate PC directly to the Security Gateway and the installation IS performed.
  A. After selecting "Packages > Distribute..." and choosing the target gateway, the selected package is copied from the Package Repository on the SmartCenter to the Security Gateway but the installation IS NOT performed.