CheckPoint Checkpoint Certifications 156-315.77 Questions & Answers

• Question 211:

  Where do Gateways managed bySmart Provisioningfetch their assigned profiles?

  A. TheSmart viewMonitor

  B. The standaloneSmart Provisioningserver

  C. The Security Management server or CMA

  D. They are fetched locally from the individual device

  Correct Answer: C

• Question 212:

  In the following command,

  LSMcli [-d] "server"

  should be replaced with:

  A. Hostname of ROBO gateway

  B. Hostname DAIP device

  C. IP address of the Security Management server

  D. GUIclient

  Correct Answer: C

• Question 213:

  Which application is used to create a File-Share Application?

  A. Smart Dashboard(SSL VPN Tab)

  B. Smart PortalWebUI (File-Share Tab)

  C. SSL VPN Portal WebUI (File-Share Tab)

  D. Provider-1 MDG (Global VPNs Tab)

  Correct Answer: A

• Question 214:

  Which internal user authentication protocols are supported in SSL VPN?

  A. Check Point Password, SecurID, LDAP, RADIUS, TACACS

  B. Check Point Password, SecurID, L2TP, RADIUS, TACACS

  C. Check Point Password, SecurID, Active Directory, RADIUS, TACACS

  D. Point Password, SecurID, OS Password, RADIUS, TACACS

  Correct Answer: D

• Question 215:

  A Security Administrator opens a new session, makes changes to the policy and submits the session for approval. The Security Manager may approve the session or request repair. If a manager opens a new session and submits it for approval, can he approve his session as a Security Manager?

  A. It depends on theSmart Workflowsettings in Global Properties.

  B. Yes, he can always approve his own session.

  C. No, he can never approve his own session.

  D. It depends on the type of changes made in the session.

  Correct Answer: A

• Question 216:

  Susan needs to change the DNS settings on herSecure PlatformGateway. Using the output below,

  

  Which Gateway could she edit directly from the Devices view using Edit Gateway, then selecting the DNS tab?

  A. Seoul-Edge

  B. Prague-GW

  C. Berlin-GW

  D. Paris-GW

  Correct Answer: D

• Question 217:

  IfSmart Workflowis configured to work without Sessions or Role Segregation, how does theSmart Dashboardfunction?

  A. TheSmart Dashboardfunctions as ifSmart Workflowis not enabled but an automatic session exists in the background and fullSmart Viewtracker and audit trail functionality will be available.

  B. TheSmart Dashboardwill function withoutSmart Workflow, with no session and no audit trail functionality.

  C. TheSmart Dashboardwill have no session butSmart ViewTracker and audit trail will be available.

  D. All functions ofSmart Workflowwill be available on a per rule basis.

  Correct Answer: A

• Question 218:

  Assuming all connections that are allocated bandwidth in your Check Point QoS Rule Base are open, what would be the corresponding bandwidth percentage of the Kazaa Rule in the following example?

  

  A. 5%

  B. 20%

  C. 8%

  D. 14%

  Correct Answer: D

• Question 219:

  To force clients to use Integrity Secure Workspace when accessing sensitive applications, the Administrator can configure Connectra:

  A. Via protection levels

  B. To implement Integrity Clientless Security

  C. To force the user to re-authenticate at login

  D. Without a special setting. Secure Workspace is automatically configured.

  Correct Answer: A

• Question 220:

  Which procedure enables the SSL VPN blade on the gateway?

  A. Log intoSmart Dashboard, Create a new rule with the source and destination addresses of the needed remote network, set the action to Encrypt and push the policy to that gateway.

  B. Log intoSmart Dashboard, edit the properties of the Gateway, and select the SSL VPN check box.

  C. Log intoSmart Dashboard, Select the VPN Communities tab and add the gateway to the appropriate community.

  D. Log into WebUI on the gateway and check the SSL VPN Blade check box.

  Correct Answer: B