CheckPoint Checkpoint Certifications 156-315.77 Questions & Answers

• Question 171:

  Network applications accessed using SSL Network Extender have been found to fail after one of their TCP connections has been left idle for more than one hour. You determine that you must enable sending reset (RST) packets upon TCP time-out expiration. Where is it necessary to change the setting?

  A. $FWDIR/conf/objects_5_0.C

  B. $FWDIR/conf/objects.C

  C. $WEBISDIR/conf/cpadmin.elg

  D. $CVPNDIR/conf/cvpnd.C

  Correct Answer: A

• Question 172:

  Domain name can NOT be changed inSmart Provisioningand Domain Name is grayed out. What is a possible reason for this?

  A. There is noSmart Provisioninglicense installed.

  B. Profile is not assigned to any Gateway.

  C. Override profile setting on device level is set to Mandatory.

  D. Domain name settings are always fetched from firewall object.

  Correct Answer: C

• Question 173:

  Which of the following statements about SSL VPN is TRUE?

  A. Traffic is not encrypted in a LAN deployment, where clear text requests are forwarded to internal servers.

  B. All traffic is always encrypted.

  C. Traffic is encrypted, when it is initiated from a LAN.

  D. Administration traffic is not encrypted.

  Correct Answer: A

• Question 174:

  Which operating system(s) support(s) unnumbered VPN Tunnel Interfaces (VTIs) for route- based VPNs?

  A. Red Hat Linux

  B. SecurePlatform for NCjX and higher

  C. Solaris 9 and higher

  D. IPSO 3.9 and higher

  Correct Answer: D

• Question 175:

  You need to determine if your company's Web servers are accessed an excessive number of times from the same host. How would you configure this in the IPS tab?

  A. Successive alerts

  B. Successive DoS attacks

  C. Successive multiple connections

  D. HTTP protocol inspection

  Correct Answer: C

• Question 176:

  Your company is planning on moving their server farm to a new datacenter which requires IP changes to important network services including DNS, DHCP, and TFTP. Rather than manually logging in to all your firewalls and modifying the settings individually, you decide to purchase and enableSmart Provisioning. Assuming all your firewalls are on SPLAT, what is the minimum version required to update the firewalls' DNS and backup settings viaSmart Provisioning?

  A. R62

  B. R60 HFA 02

  C. R65 HFA 40

  D. R71

  Correct Answer: C

• Question 177:

  You have to uninstall the Check PointSmart WorkflowSoftware Blade on aSecure Platformsystem. How can you perform this procedure?

  A. To uninstall theSmart WorkflowSoftware Blade you can connect to theSecure PlatformWebUI ( ) and select: Device > Upgrade.

  You will be asked if you want uninstall theSmart WorkflowSoftware Blade.

  B. To uninstall theSmart WorkflowSoftware Blade you must first connect to your Security Management System on command line level. Then in the directory /opt/CPUninstall/Check_Point_Workflow, run the command ./UnixInstallScript -u. Afterwards, follow the screen instructions and change to the directory /opt/CPUninstall/R70_HFA_10 and repeat the previous command.

  C. To uninstall theSmart WorkflowSoftware Blade, you useSmart Update. Click on the symbol of the Security Management Server, right-click, select Get Gateway Data, selectSmart Workflow, right -click uninstall Smart Workflow. You will see the progress in theOpera rationStatus windows.

  D. To uninstall theSmart WorkflowSoftware Blade, you must first connect to your Security Management System on the command line level. Then in the directory /opt/CPuninstall/Check_Point_Workflow, run the command ./UnixInstallScript -u.

  Correct Answer: B

• Question 178:

  You are a SSL VPN Administrator. Your users complain that their Outlook Web Access is running extremely slowly, and their overall browsing experience continues to worsen. You suspect it could be a logging problem. Which of the following log files does Check Point recommend you purge?

  A. httpd*.log

  B. event_ws.log

  C. mod_ws_owd.log

  D. alert_owd.log

  Correct Answer: A

• Question 179:

  Which port is typically used by SSL Network Extender, if theConnecterPortal will also be used on the same IP address?

  A. SSL (TCP/900)

  B. SSL (TCP/443)

  C. SSL (TCP/444)

  D. SSL (TCP/80)

  Correct Answer: C

• Question 180:

  What is the best method for scheduling backup's on multiple firewalls?

  A. WebUI

  B. SmartProvisioning

  C. Smart Dashboard

  D. SmartUpdate

  Correct Answer: B