CheckPoint Checkpoint Certifications 156-315.77 Questions & Answers

• Question 201:

  Even after configuring central logging onConnecter,Connecterlogs are not displaying inSmart ViewTracker. What could be the cause of this problem?

  A. You must reestablish logging fromConnecterto the Management Server, using a dummy log-server object.

  B. R70 does not support a host object with the same IP address as a Management Server used as secondary log server or management station.

  C. You must install the Management Server database.

  D. You must install the Security Policy, and try again.

  Correct Answer: C

• Question 202:

  When does theSmart WorkflowPolicy Installation window appear?

  A. When the administrator installs an approved policy

  B. When the manager approves a session

  C. When the administrator installs an unapproved policy

  D. When the administrator submits a session for approval

  Correct Answer: C

• Question 203:

  Which of the following software blades can be used to provide centralized backup management?

  A. Smart Dashboard

  B. Smart Provisioning

  C. Smart Gateway D. Smart Backup

  Correct Answer: B

• Question 204:

  Among the authentication schemes SSL VPN employs for users, which scheme does Check Point recommend so all servers are replicated?

  A. User certificates

  B. LDAP

  C. Username and password

  D. RADIUS

  Correct Answer: D

• Question 205:

  Which of the following load-balancing methods is not valid?

  A. Domain

  B. They are all valid

  C. Round trip

  D. Random

  Correct Answer: B

• Question 206:

  Smart Provisioningcan provision the Operating System and network settings on which of the following?

  A. IPSO 4.2 Security Gateways

  B. Edge firmware 6.x and above

  C. R65 HFA 40 Security Gateways arid above

  D. NGX Security Appliances

  Correct Answer: C

• Question 207:

  When two or more DLP rules are matched, the action taken is the most restrictive action. Rank the following items from the lowest restriction level (1) to the highest (4).

  1.

  Ask User

  2.

  Prevent

  3.

  Detect

  4.

  Inform User

  A. 3,4,1,2

  B. 3,1,4,2

  C. 4,3,1,2

  D. 4,1,3,2

  Correct Answer: B

• Question 208:

  You are usingtrace loggerto debug SSL VPN's server side and obtain a textual traffic dump. Which type of traffic will you NOT see in the output?

  A. Traffic outbound from the internal networks

  B. Traffic to the portal

  C. Traffic outbound to the external networks

  D. Traffic inbound from the external networks

  Correct Answer: B

• Question 209:

  When selecting a backup target usingSmart Provisioning, which target is NOT available?

  A. Locally on device

  B. FTP

  C. SCP

  D. TFTP

  Correct Answer: B

• Question 210:

  When Converting Gateways to SmartLSM Security Gateways, you can:

  A. do nothing, the conversion is automatic.

  B. delete the device and re-install it inSmart Provisioning.

  C. reset SIC and re-establish communication with the newSmart Provisioning.

  D. convert a Security Gateway or UTM-1 Edge Gateway managed withSmart Dashboardto a SmartLSM Security Gateway managed withSmart Provisioning.

  Correct Answer: D