CheckPoint Checkpoint Certifications 156-315.77 Questions & Answers

• Question 111:

  Can the smallest appliance handle all Blades simultaneously?

  A. Depends on the number of protected clients and throughput.

  B. Depends on number of concurrent sessions.

  C. Firewall throughput is the only relevant factor.

  D. It depends on required SPU for customer environment.

  Correct Answer: D

• Question 112:

  The TotallyCoolSecurity Company has a large security staff. Bob configured a new IPS Chicago_Profile for fw-chicago using Detect mode. After reviewing logs, Matt noticed that fw-Chicago is not detecting any of the IPS protections that Bob had previously setup. Analyze the output below and determine how Matt can correct the problem.

  A. Matt should assign the fw-chicago Security Gateway to the Chicago_Profile.

  B. Matt should change the Chicago_Profile to use Protect mode because Detect mode will not work.

  C. Matt should re-create the Chicago_Profile and select Activate protections manually instead of per the IPS Policy.

  D. Matt should activate the Chicago_Profile as it is currently not activated.

  Correct Answer: A

• Question 113:

  When deploying a dedicated DLP Gateway behind a perimeter firewall on an interface leading to the internal network (there is only one internal network):

  A. The DLP Gateway can inspect SMTP traffic if a MS Exchange server is located on the internal network, and it either sends e-mails directly to the Internet using SMTP or sends e- mails to the Internet in SMTP via a mail relay that is located on the perimeter's firewall DMZ network.

  B. The DLP Gateway can inspect internal e-mails (e-mails between two users on the internal network) if the organization's internal mail server is located in the internal network and users are configured to send e-mails to this mail server using SMTP.

  C. User's HTTPS and FTP traffic can be inspected by the R71 DLP Gateway.

  D. The DLP Gateway can inspect e-mails (e-mails between two users on an internal or external network) if the organization's internal mail server is located on another network (not the internal network; for instance the DMZ or a different internal network) and users are configured to send e-mails to this mail server using SMTP.

  Correct Answer: A

• Question 114:

  Which of the following statements accurately describes the migrate command?

  A. upgrade_export is used when upgrading the Security Gateway, and allows certain files to be included or excluded before exporting.

  B. upgrade_export stores network-configuration data, objects, global properties, and the database revisions prior to upgrading the Security Management Server.

  C. Used primarily when upgrading the Security Management Server, migrate stores all object databases and the conf directories for importing to a newer version of the Security Gateway

  D. Used when upgrading the Security Gateway, upgrade_export includes modified files, such as in the directories /lib and /conf.

  Correct Answer: C

• Question 115:

  Use the table to match the BEST Management High Availability synchronication-status descriptions for your Security Management Server (SMS).

  

  A. A-3, B-1.C-4, D-2

  B. A-3, B-1.C-5, D-4

  C. A-5, B-3, C-1.D-2

  D. A-3, B-1.C-5, D-4

  Correct Answer: B

• Question 116:

  Which of the following is the preferred method for adding static routes in GAiA?

  A. In the CLI with the command "route add"

  B. In Web Portal, under Network Management > IPv4 Static Routes

  C. In the CLI via sysconfig

  D. In SmartDashboard under Gateway Properties > Topology

  Correct Answer: B

• Question 117:

  Type the command and syntax to view critical devices on a cluster member in a ClusterXL environment.

  A. cphaprob -ia list

  B.

  C.

  D.

  Correct Answer: A

• Question 118:

  A ClusterXL configuration is limited to ___ members.

  A. There is no limit.

  B. 16

  C. 6

  D. 2

  Correct Answer: C

• Question 119:

  Select the command set best used to verify proper failover function of a new ClusterXL configuration.

  A. reboot

  B. cphaprob -d failDevice -s problem -t 0 register / cphaprob -d failDevice unregister

  C. clusterXL_admin down / clusterXL_admin up

  D. cpstop/cpstart

  Correct Answer: C

• Question 120:

  MegaCorp is using SmartCenter Server with several gateways. Their requirements result in a heavy log load. Would it be feasible to add the SmartEvent Correlation Unit and SmartEvent Server to their SmartCenter Server?

  A. No. SmartCenter SIC will interfere with the function of SmartEvent.

  B. No. If SmartCenter is already under stress, the use of a separate server for SmartEvent is recommended.

  C. No, SmartEvent and Smartcenter cannot be installed on the same machine at the same time.

  D. Yes. SmartEvent must be installed on your SmartCenter Server.

  Correct Answer: B