CheckPoint 156-315.77 Online Practice Questions and Exam Preparation

CheckPoint 156-315.77 Online Questions & Answers

• Question 131:

  MultiCorp is located in Atlanta. It has a branch office in Europe, Asia, and Africa. Each location has its own AD controller for local user login. How many ADqueries have to be configured?

  A. 3
  B. 1
  C. 4
  D. 2
  C. 4

• Question 132:

  Stephanie wants to reduce the encryption overhead and improve performance for her mesh VPN Community. The Advanced VPN Properties screen below displays adjusted page settings:What can Stephanie do to achieve her goal?

  

  A. Check the box "Use Perfect Forward Secrecy"
  B. Change the setting "Use DiffiE. Hellman group" to "Group 5 (1536 bit)"
  C. Check the box "Use aggressive mode"
  D. Check the box "Support IP compression"
  E. Reduce the setting "Renegotiate IKE security associations every" to "720"
  D. Check the box "Support IP compression"

• Question 133:

  Assume an intruder has compromised your current IKE Phase 1 and Phase 2 keys. Which of the following options will end the intruder's access, after the next Phase 2 exchange occurs?

  A. Phase 3 Key Revocation
  B. Perfect Forward Secrecy
  C. MD5 Hash Completion
  D. SHA1 Hash Completion
  E. DES Key Reset
  B. Perfect Forward Secrecy

• Question 134:

  MegaCorps' disaster recovery plan is past due for an update to the backup and restore section to enjoy the benefits of the new distributed R77 installation. You must propose a plan that meets the following required and desired objectives:

  Required. Security Policy repository must be backed up no less frequently than every 24 hours.

  Desired. Back up R77 components enforcing the Security Policies at least once a week.

  Desired. Back up R77 logs at least once a week.

  You develop a disaster recovery plan proposing the following:

  *

  Use the utility cron to run the command upgrade_export each night on the Security Management Servers.

  *

  Configure the organization's routine backup software to back up files created by the command upgrade_export.

  *

  Configure GAiA back up utility to back up Security Gateways every Saturday night.

  *

  Use the utility cron to run the command upgrade_export each Saturday night on the log servers.

  *

  Configure an automatic, nightly logswitch.

  *

  Configure the organization's routine back up software to back up the switched logs every night. The corporate IT change review committee decides your plan:

  A. meets the required objective and only one desired objective.
  B. meets the required objective and both desired objectives.
  C. meets therequiredobjective but does not meet eitherdesiredobjective.
  D. does not meet the required objective.
  B. meets the required objective and both desired objectives.

• Question 135:

  What is a Sticky Connection?

  A. A Sticky Connection is one in which a reply packet returns through the same gateway as the original packet.
  B. A Sticky Connection is a connection that remains the same.
  C. A Sticky Connection is a VPN connection that remains up until you manually bring it down.
  D. A Sticky Connection is a connection that always chooses the same gateway to set up the initial connection.
  A. A Sticky Connection is one in which a reply packet returns through the same gateway as the original packet.

• Question 136:

  You have two IP Appliances: one IP565 and one IP395. Both appliances have IPSO 6.2 andR76installed in a distributed deployment. Can they be members of a Gateway Cluster?

  A. No, because the Security Gateways must be installed in a stand-alone installation.
  B. No, because IP does not have a cluster option.
  C. Yes, as long as they have the same IPSO and Check Point versions.
  D. No, because the appliances must be of the same model (both should be IP565 or IP395).
  C. Yes, as long as they have the same IPSO and Check Point versions.

• Question 137:

  Which of the following is NOT part of the policy installation process?

  A. Code compilation
  B. Code generation
  C. Initiation
  D. Validation
  D. Validation

• Question 138:

  Your users are defined in a Windows 2008 Active Directory server. You must add LDAP users to a Client Authentication rule. Which kind of user group do you need in the Client Authentication rule inR76?

  A. LDAP group
  B. External-user group
  C. A group with a generic user
  D. All Users
  A. LDAP group

• Question 139:

  To change the default port of the Management Portal:

  A. Edit the masters. conf file on the Portal server.
  B. Modify the file cp_httpd_admin .conf.
  C. Run sysconfig and change the management interface
  D. Re-initialize SIC
  B. Modify the file cp_httpd_admin .conf.

• Question 140:

  What is the correct policy installation process order? 1.Verification 2.Code generation and compilation 3.Initiation 4.Commit

  5.

  Conversion

  6.

  CPTA

  A. 1, 2, 3, 4, 5, 6
  B. 3, 1, 5, 2, 6, 4
  C. 4, 2, 3, 5, 6, 1
  D. 6, 5, 4, 3, 2, 1
  B. 3, 1, 5, 2, 6, 4