CheckPoint 156-315.77 Online Practice Questions and Exam Preparation

CheckPoint 156-315.77 Online Questions & Answers

• Question 161:

  A Smart ProvisioningGateway could be a member of which VPN communities?

  (i)

  Center In Star Topology

  (ii)

  Satellite in Star Topology

  (iii) Carter in Remote Access Community

  (iv)

  Meshed Community

  A. (ii) and (iii)
  B. All
  C. (i), (ii) and (iii)
  D. (ii) only
  A. (ii) and (iii)

• Question 162:

  Which of these four Check Point QoS technologies prevents the transmission of redundant packets when multiple copies of a packet are concurrently queued on the same flow?

  A. Weighted Flow Random Early Drop (WFRED)
  B. Intelligent Queuing Engine
  C. Retransmission Detection Early Drop (RDED)
  D. Stateful Inspection
  C. Retransmission Detection Early Drop (RDED)

• Question 163:

  The connection to the ClusterXL member `A' breaks. The ClusterXL member `A' status is now `down'. Afterwards the switch admin set a port to ClusterXL member `B' to `down'. What will happen?

  A. ClusterXL member `B' also left the cluster.
  B. ClusterXL member `B' stays active as last member.
  C. Both ClusterXL members share load equally.
  D. ClusterXL member `A' is asked to come back to cluster.
  B. ClusterXL member `B' stays active as last member.

• Question 164:

  The relay mail server configured under Email Notifications is used by the DLP Gateway to: (Choose the BEST answer.)

  A. IfUser Checkis configured, there is no need to configure this relay server if there are no Ask User rules and there is no need to notify any Data Owners.
  B. Send e-mail notifications to users and Data Owners.
  C. Define My Organization / DLP Gateway and scan only e-mails that originate from this relay server.
  D. Synchronize with other mail servers in the network.
  B. Send e-mail notifications to users and Data Owners.

• Question 165:

  You are reviewing SmartView Tracker entries, and see a Connection Rejection on a Check Point QoS rule. What causes the Connection Rejection?

  A. The guarantee of one of the rule's sub-rules exceeds the guarantee in the rule itself.
  B. The number of guaranteed connections is exceeded. The rule's action properties are not set to accept additional connections.
  C. The Constant Bit Rate for a Low Latency Class has been exceeded by greater than 10%, and the Maximal Delay is set below requirements.
  D. Burst traffic matching the Default Rule is exhausting the Check Point QoS global packet buffers.
  B. The number of guaranteed connections is exceeded. The rule's action properties are not set to accept additional connections.

• Question 166:

  You are preparing to configure your VoIP Domain Gatekeeper object. Which two other objects should you have created first?

  A. An object to represent the IP phone network, AND an object to represent the host on which the proxy is installed
  B. An object to represent the PSTN phone network, AND an object to represent the IP phone network
  C. An object to represent the IP phone network, AND an object to represent the host on which the gatekeeper is installed
  D. An object to represent the Q.931 service origination host, AND an object to represent the H.245 termination host
  E. An object to represent the call manager, AND an object to represent the host on which the transmission router is installed
  C. An object to represent the IP phone network, AND an object to represent the host on which the gatekeeper is installed

• Question 167:

  Your expanding network currently includes ClusterXL running Multicast mode on two members, as shown in this topology:

  

  A. You need to add interfaces: 10.10.10.1/24 on Member A, and 10.10.10.2/24 on Member
  B. The virtual IP address for these interfaces is 10.10.10.3/24. Both cluster gateways have a Quad card with an available eth3 interface. What is the correct procedure to add these interfaces?
  C. 1. Disable "Cluster membership" from one Gateway via cpconfig. 2. Configure the new interface via sysconfig from the "non-member" Gateway. 3. Re-enable "Cluster membership" on the Gateway. 4. Perform the same steps on the other Gateway. 5. Update the topology in the cluster object. 6. Install the Security Policy.
  D. 1. Configure the new interface on both members using WebUI. 2. Update the new topology in the cluster object from SmartDashboard. 3. Define virtual IP in the Dashboard 4. Install the Security Policy.
  E. 1. Use WebUI to configure the new interfaces on both member. 2. Update the topology in the cluster object. 3. Reboot both gateways. 4. Install the Security Policy.
  F. 1. Use the command ifconfig to configure and enable the new interface on both members. 2. Update the topology in the cluster object for the cluster and both members. 3. Install the Security Policy. 4. Reboot the gateway.
  B. The virtual IP address for these interfaces is 10.10.10.3/24. Both cluster gateways have a Quad card with an available eth3 interface. What is the correct procedure to add these interfaces?

• Question 168:

  Which command can be used to verify SecureXL statistics?

  A. fwaccel top
  B. fwaccel stats
  C. fw ctl pstat
  D. cphaprob stat
  B. fwaccel stats

• Question 169:

  Fill in the blank. In New Mode HA, the internal cluster IP VIP address is 10.4.8.3. An internal host 10.4.8.108 successfully pings its Cluster and receives replies.

  

  Review the ARP table from the internal Windows host 10.4.8.108. Based on this information, what is the active cluster member's IP address?

  A. 10.4.8.2
  A. 10.4.8.2

• Question 170:

  A Zero Downtime Upgrade of a cluster:

  A. Upgrades all cluster members except one at the same time.
  B. Is only supported in major releases (R70 to R71, R71 toR76).
  C. Treats each individual cluster member as an individual gateway.
  D. Is not a valid upgrade method inR76.
  A. Upgrades all cluster members except one at the same time.