CheckPoint Checkpoint Certifications 156-315.77 Questions & Answers

• Question 181:

  When configuring a Web Application for SSL VPN remote access, you have given the following definition for the application along with its protection level.

  

  Which of the following is the best match for the above application?

  A. dmz.example.com/extranet

  B. www.dmz.example/extranet

  C. www.example.com/intranet

  D. hr.dmz.example.com/intranet

  Correct Answer: C

• Question 182:

  Which protocol is not supported for DLP?

  A. ftp

  B. https

  C. http

  D. smtp

  Correct Answer: B

• Question 183:

  SSL termination takes place:

  A. In a LAN deployment on a Security Gateway

  B. In a DMZ and LAN deployment scenario on a Security Gateway

  C. In a DMZ and LAN deployment scenario on aConnecterGateway

  D. In a DMZ deployment on aConnecterGateway

  Correct Answer: B

• Question 184:

  Which of the following items can be provisioned via a Profile throughSmart Provisioning? i) Backup Schedule ii) DNS Entries iii) Hosts Table iv) Domain Name v) Interface IP's

  A. i, ii, iii, iv, v

  B. i, ii, iii, iv

  C. i

  D. i, ii, iv

  Correct Answer: B

• Question 185:

  When using IPS, what does Geo protection do?

  A. To block traffic from and to a specific country

  B. To block traffic from and to a specific person

  C. To block traffic from and to a specific company

  D. To block traffic from and to a specific city

  Correct Answer: A

• Question 186:

  While using theSmart ProvisioningWizard to create a new profile, you cannot continue because there are no devices to select. What is a possible reason for this?

  i) All devices already have a profile assigned to them

  ii) Provisioning Blade is not enabled on the devices

  iii) No UTM- 1/Power- 1/Secure Platform devices are defined inSmart Dashboard

  iv) SIC is not established on the devices.

  A. (ii), (iii) or (iv)

  B. (ii) only

  C. (iii) or (iv)

  D. (i) or (iii)

  Correct Answer: D

• Question 187:

  To configure a client to properly log in to the user portal using a certificate, the Administrator MUST:

  A. Create an internal user in the admin portal.

  B. Install an R71 internal Certificate Authority certificate.

  C. Create a client certificate fromSmart Dashboard.

  D. Store the client certificate on the SSL VPN Gateway.

  Correct Answer: A

• Question 188:

  Your customer asks you about the Performance Pack. You explain to him that a Performance Pack is a software acceleration product which improves the performance of the Security Gateway. There are two ways to enable or disable this acceleration. The first one is to use the command cpconfig (see the Figure 1).

  The second one is to use the command fwaccel on off (see the Figure 2).

  What is the difference between those two commands?

  A. The command cpconfig works on the Security Platform only. The command fwaccel can be used on all platforms.

  B. The fwaccel command determines the default setting. The command cpconfig can dynamically change the setting, but after the reboot it reverts to the default setting.

  C. Both commands have the same function.

  D. The cpconfig command enables acceleration. The command fwaccel can dynamically change the setting, but after the reboot it reverts to the default setting.

  Correct Answer: D

• Question 189:

  Smart Provisioninguses different types of profiles to manage and provision the gateways. These types are:

  A. SmartLSM Security Profiles and Provisioning Profiles

  B. Provisioning Profiles and Gateways Profiles

  C. SmartLSM Security Profiles and SmartDashboard Profiles

  D. SmartConsole Profiles and SmartFilter Profiles

  Correct Answer: A

• Question 190:

  Smart Provisioningis an integral part of the Security Management or Provider-1 CMA. To enableSmart Provisioningon the Security Management server:

  A. Obtain aSmart Provisioninglicense, add the License to the Security Management server or CMA, turn onSmart Provisioningon each Gateway to be controlled.

  B. Obtain aSmart Provisioninglicense, add the License to the Security Management server or CMA, disable SecureXL.

  C. Obtain aSmart Provisioninglicense, add the License to the Security Management server or CMA.

  D. Obtain aSmart Provisioninglicense, add the License to the Security Management server or CMA, select the box under Policy forSmart Provisioning.

  Correct Answer: C