CheckPoint 156-315.77 Online Practice Questions and Exam Preparation

CheckPoint 156-315.77 Online Questions & Answers

• Question 191:

  Laura notices the Microsoft Visual Basic Bits Protection is set to inactive. She wants to set the Microsoft Visual Basic Kill Bits Protection and all other Low Performance Impact Protections to Prevent. She asks her manager for approval and stated she can turn theses on. But he wants Laura to make sure no high Performance Impacted Protections are turned on while changing this setting.

  

  Using the out below, how would Laura change the Default_Protection on Performance Impact Protections classified as low from inactive to prevent until meeting her other criteria?

  A. Go to Profiles / Default_Protection and uncheck Do not activate protections with performance impact to medium or above
  B. Go to Profiles / Default_Protection and select Do not activate protections with performance impact to low or above
  C. Go to Profiles / Default_Protection and select Do not activate protections with performance impact to medium or above
  D. Go to Profiles / Default_Protection and uncheck Do not activate protections with performance impact to high or above
  C. Go to Profiles / Default_Protection and select Do not activate protections with performance impact to medium or above

• Question 192:

  You are running the license_upgrade tool on your SecurePlatform Gateway. Which of the following can you NOT do with the upgrade tool?

  A. Simulate the license-upgrade process.
  B. View the licenses in the SmartUpdate License Repository.
  C. Perform the actual license-upgrade process.
  D. View the status of currently installed licenses.
  B. View the licenses in the SmartUpdate License Repository.

• Question 193:

  Which method of load balancing describes "Round Robin"?

  A. Assigns service requests to the next server in a series.
  B. Assigns service requests to servers at random.
  C. Measures the load on each server to determine which server has the most available resources.
  D. Ensures that incoming requests are handled by the server with the fastest response time.
  A. Assigns service requests to the next server in a series.

• Question 194:

  You configure a Check Point QoS Rule Base with two rules: an HTTP rule with a weight of 40, and the Default Rule with a weight of 10. If the only traffic passing through your QoS Module is HTTP traffic, what percent of bandwidth will be allocated to the HTTP traffic?

  A. 80%
  B. 40%
  C. 100%
  D. 50%
  C. 100%

• Question 195:

  What firewall kernel table stores information about port allocations for Hide NAT connections?

  A. NAT_dst_any_list
  B. host_ip_addrs
  C. NAT_src_any_list
  D. fwx_alloc
  D. fwx_alloc

• Question 196:

  Fill in the blank. The command that typically generates the firewall application, operating system, and hardware specific drivers is _________ .

  A. snapshot
  A. snapshot

• Question 197:

  Your customer wishes to installSmart Workflowon top of R70 Security Management Server (Windows system). What is the required disk space?

  A. 1256 MB
  B. 1 GB
  C. 512 MB
  D. 880 MB
  D. 880 MB

• Question 198:

  When Load Sharing Multicast mode is defined in a ClusterXL cluster object, how are packets being handled by cluster members?

  A. All members receive all packets. The Security Management Server decides which member will process the packets. Other members delete the packets from memory.
  B. All cluster members process all packets and members synchronize with each other.
  C. All members receive all packets. All members run an algorithm which determines which member processes packets further and which members delete the packet from memory.
  D. Only one member at a time is active. The active cluster member processes all packets.
  C. All members receive all packets. All members run an algorithm which determines which member processes packets further and which members delete the packet from memory.

• Question 199:

  Jerry is concerned that a denial-oF. service (DoS) attack may affect his VPN Communities. He decides to implement IKE DoS protection. Jerry needs to minimize the performance impact of implementing this new protection. Which of the following configurations is MOST appropriate for Jerry?

  A. Set Support IKE DoS protection from identified source to "Puzzles", and Support IKE DoS protection from unidentified source to "Stateless".
  B. Set Support IKE Dos Protection from identified source, and Support IKE DoS protection from unidentified source to "Puzzles".
  C. Set Support IKE DoS protection from identified source to "Stateless," and Support IKE DoS protection from unidentified source to "Puzzles".
  D. Set "Support IKE DoS protection" from identified source, and "Support IKE DoS protection" from unidentified source to "Stateless".
  E. Set Support IKE DoS protection from identified source to "Stateless", and Support IKE DoS protection from unidentified source to "None".
  D. Set "Support IKE DoS protection" from identified source, and "Support IKE DoS protection" from unidentified source to "Stateless".

• Question 200:

  In a zero downtime scenario, which command do you run manually after all cluster members are upgraded?

  A. cphaconf set_ccp multicast
  A. cphaconf set_ccp multicast