CheckPoint 156-315.77 Online Practice Questions and Exam Preparation

CheckPoint 156-315.77 Online Questions & Answers

• Question 171:

  What happens when an Administrator activates the DLP Portal for Self Incident Handling and enters its fully qualified domain name (DNS name)?

  A. Connections created between the user and the DLP Gateway when clicking links within e-mail notifications to send or discard quarantined e-mails (matched for an Ask User rule) are encrypted.
  B. The daemon running DLP Portal starts to run and can cater requests from users' browsers (following links from e-mail notifications) and from Check PointUser Check.
  C. The DLP Gateway can now notify Data Owners about DLP incidents.
  D. User Checkis activated.
  B. The daemon running DLP Portal starts to run and can cater requests from users' browsers (following links from e-mail notifications) and from Check PointUser Check.

• Question 172:

  Your current stands alone VPN-1 NG with Application Intelligence (Al) R55 installation is running on SecurePlatform. You plan to implement VPN-1 NGX in a distributed environment, where the existing machine will be the VPN-1 Pro Gateway. An additional machine will serve as the SmartCenter Server. The new machine runs on a Windows Server 2003. You need to upgrade the NG with Al R55 SmartCenter Server configuration to VPN-1 NGX.

  How do you upgrade to VPN-1 NGX?

  A. Insert the NGX CD in the existing NGwithAI R55 SecurePlatform machine, and answer yes to backup the configuration. Copy the backup file to the Windows Server 2003. Continue the upgrade process. Reboot after upgrade is finished. After SecurePlatform NGX reboots, run sysconfig, select VPN-1 Pro Gateway, and finish the sysconfig process. Reboot again. Use the NGX CD to install the primary SmartCenter on the Windows Server 2003. Import the backup file.
  B. Run the backup command in the existing SecurePlatform machine, to create a backup file. Copy the file to the Windows Server 2003. Uninstall all Check Point products on SecurePlatform by running rpm CPsuitE. R55 command. Reboot. Install new VPN-1 NGX on the existing SecurePlatform machine. Run sysconfig, select VPN-1 Pro Gateway, and reboot. Use VPN-1 NGX CD to install primary SmartCenter Server on the Windows Server 2003. Import the backup file.
  C. Copy the $FWDIR\conf and $FWDIR\lib files from the existing SecurePlatform machine. Create a tar.gzfile, and copy it to the Windows Server 2003. Use VPN-1 NGX CD on the existing SecurePlatform machine to do a new installation. Reboot. Run sysconfig and select VPN-1 Pro Gateway. Reboot. Use the NGX CD to install the primary SmartCenter Server on the Windows Server 2003. On the Windows Server 2003, run upgradeimport command to import $FWDIR\conf and $FWDIR\lib from the SecurePlatform machine.
  D. Run backup command on the existing SecurePlatform machine to create a backup file. Copy the file to the Windows Server 2003. Uninstall the primary SmartCenter Server package from NG with Al R55 SecurePlatform using sysconfig. Reboot. Install the NGX primary SmartCenter Server and import the backup file. Open the NGX SmartUpdate, and select "upgrade all packages" on the NG with Al R55 Security Gateway.
  A. Insert the NGX CD in the existing NGwithAI R55 SecurePlatform machine, and answer yes to backup the configuration. Copy the backup file to the Windows Server 2003. Continue the upgrade process. Reboot after upgrade is finished. After SecurePlatform NGX reboots, run sysconfig, select VPN-1 Pro Gateway, and finish the sysconfig process. Reboot again. Use the NGX CD to install the primary SmartCenter on the Windows Server 2003. Import the backup file.

• Question 173:

  The command useful for debugging by capturing packet information, including verifying LDAP authentication on all Check Point platforms is

  A. fw monitor
  A. fw monitor

• Question 174:

  Type the command and syntax to view critical devices on a cluster member in a ClusterXL environment.

  A. cphaprob -ia list
  A. cphaprob -ia list

• Question 175:

  Which of the following is supported with Office Mode?

  A. Secure mote
  B. Secure Client
  C. SSL Network Extender
  D. Connect Mode
  A. Secure mote

• Question 176:

  You configure a Check Point QoS Rule Base with two rules: an H.323 rule with a weight of 10, and the Default Rule with a weight of 10. The H.323 rule includes a per-connection guarantee of 384 Kbps. and a per-connection limit of 512 Kbps. The per-connection guarantee is for four connections, and no additional connections are allowed in the Action properties. If traffic is passing through the QoS Module matches both rules, which of the following statements is TRUE?

  A. Each H.323 connection will receive at least 512 Kbps of bandwidth.
  B. The H.323 rule will consume no more than 2048 Kbps of available bandwidth.
  C. 50% of available bandwidth will be allocated to the Default Rule.
  D. Neither rule will be allocated more than 10% of available bandwidth.
  B. The H.323 rule will consume no more than 2048 Kbps of available bandwidth.

• Question 177:

  After repairing aSmart Workflowsession:

  A. The session moves to status Repaired and a new session can be started.
  B. The session moves to status Awaiting Repair and must be resubmitted.
  C. The session is continued with status Not approved and a new session must be started.
  D. The session is discarded and a new session is automatically started.
  A. The session moves to status Repaired and a new session can be started.

• Question 178:

  Check Point recommends that you back up systems running Check Point products. Run your back ups during maintenance windows to limit disruptions to services, improve CPU usage, and simplify time allotment. Which back up method does Check Point recommend before major changes, such as upgrades?

  A. snapshot
  B. upgrade export
  C. backup
  D. migrate export
  A. snapshot

• Question 179:

  You are running aR76Security Gateway onSecure Platform. In case of a hardware failure, you have a server with the exact same hardware and firewall version installed. What backup method could be used to quickly put the secondary firewall into production?

  A. upgrade export
  B. manual backup
  C. snapshot
  D. backup
  C. snapshot

• Question 180:

  Damon enables an SMTP resource for content protection. He notices that mail seems to slow down on occasion, sometimes being delivered late. Which of the following might improve throughput performance?

  A. Configuring the SMTP resource to bypass the CVP resource
  B. Increasing the Maximum number of mail messages in the Gateway's spool directory
  C. Configuring the Content Vector Protocol (CVP) resource to forward the mail to the internal SMTP server, without waiting for a response from the Security Gateway
  D. Configuring the CVP resource to return the mail to the Gateway
  E. Configuring the SMTP resource to only allow mail with Damon's company's domain name in the header
  C. Configuring the Content Vector Protocol (CVP) resource to forward the mail to the internal SMTP server, without waiting for a response from the Security Gateway