CheckPoint 156-315.77 Online Practice Questions and Exam Preparation

CheckPoint 156-315.77 Online Questions & Answers

• Question 211:

  Which of these is a type of acceleration in SecureXL?

  A. FTP
  B. connection rate
  C. GRE
  D. QoS
  B. connection rate

• Question 212:

  Which of the following does IPSec use during IPSec key negotiation?

  A. IPSec SA
  B. RSA Exchange
  C. ISAKMP SA
  D. Diffie-Hellman exchange
  D. Diffie-Hellman exchange

• Question 213:

  Which of the following commands shows full synchronization status?

  A. cphaprob -a if
  B. fw ctl iflist
  C. fw hastat
  D. fw ctl pstat
  D. fw ctl pstat

• Question 214:

  How would you configure a rule in a Security Policy to allow SIP traffic from end point Net_Ato end point Net_B, through an NGX Security Gateway?

  A. Net_A/Net_B/sip/accept
  B. Net_A/Net_B/sip and sip_any/accept
  C. Net_A/Net_B/VolP_any/accept
  D. Net_A/Net_BM3lP/accept
  A. Net_A/Net_B/sip/accept

• Question 215:

  You are running a VPN-1 NG with Application Intelligence R54 SecurePlatform VPN-1 Pro Gateway. The Gateway also serves as a Policy Server. When you run patch add cd from the NGX CD, what does this command allow you to upgrade?

  A. Only VPN-1 Pro Security Gateway
  B. Both the operating system (OS) and all Check Point products
  C. All products, except the Policy Server
  D. Only the patch utility is upgraded using this command
  E. Only the OS
  B. Both the operating system (OS) and all Check Point products

• Question 216:

  Your customer wishes to useSmart WorkflowSoftware Blade, but he also wishes to install a policy during an emergency without an approval. Is it possible?

  A. Yes, it is possible but the administrator must receive special administrator permission,
  B. e., Can install in emergency. You can use the new GUI to set the administration security setting.
  C. Yes, it is possible, but this feature must be configured in the Global Properties. The administrator must provide a special password and the reason for this emergency installation.
  D. Yes, it is possible, but this feature must be configured in Global Properties and the administrator must provide a special password.
  E. No, if a customer uses theSmart WorkflowSoftware Blade, a policy must be approved.
  B. e., Can install in emergency. You can use the new GUI to set the administration security setting.

• Question 217:

  Paul has just joined the MegaCorp security administration team. Natalie, the administrator, creates a new administrator account for Paul in SmartDashboard and installs the policy. When Paul tries to login it fails. How can Natalie verify whether Paul's IP address is predefined on the security management server?

  A. Login to Smart Dashboard, access Properties of the SMS, and verify whether Paul's IP address is listed.
  B. Type cpconfig on the Management Server and select the option "GUI client List" to see if Paul's IP address is listed.
  C. Login in to Smart Dashboard, access Global Properties, and select Security Management, to verify whether Paul's IP address is listed.
  D. Access the WEBUI on the Security Gateway, and verify whether Paul's IP address is listed as a GUI client.
  B. Type cpconfig on the Management Server and select the option "GUI client List" to see if Paul's IP address is listed.

• Question 218:

  How does a standby SmartCenter Server receive logs from all Security Gateways, when an active SmartCenter Server fails over?

  A. The remote Gateways must set up SIC with the secondary SmartCenter Server, for logging.
  B. Establish Secure Internal Communications (SIC) between the primary and secondary Servers. The secondary Server can then receive logs from the Gateways, when the active Server fails over.
  C. On the Log Servers screen (from the Logs and Masters tree on the gateway object's General Properties screen), add the secondary SmartCenter Server object as the additional log server. Reinstall the Security Policy.
  D. Create a Check Point host object to represent the standby SmartCenter Server. Then select "Secondary SmartCenter Server" and Log Server", from the list of Check Point Products on the General properties screen.
  E. The secondary Server's host name and IP address must be added to the Masters file, on the remote Gateways.
  C. On the Log Servers screen (from the Logs and Masters tree on the gateway object's General Properties screen), add the secondary SmartCenter Server object as the additional log server. Reinstall the Security Policy.

• Question 219:

  Your users are defined in a Windows 2008 Active Directory server. You must add LDAP users to a Client Authentication rule. Which kind of user group do you need in the Client Authentication rule in R77?

  A. LDAP group
  B. All Users
  C. External-user group
  D. A group with a generic user
  A. LDAP group

• Question 220:

  Which protocol can be used to provide logs to third-party reporting?

  A. CPMI (Check Point Management Interface)
  B. LEA (Log Export API)
  C. AMON (Application Monitoring)
  D. ELA (Event Logging API)
  B. LEA (Log Export API)