CheckPoint Checkpoint Certifications 156-315.77 Questions & Answers

• Question 221:

  A user attempts to initialize a network application using SSL Network Extender. The application fails to start. What is the MOST LIKELY solution?

  A. Select the option Auto-detect client capabilities.

  B. Select the option Enable SSL Network Extender Application Mode only.

  C. Select the option Turn off all SSL tunneling clients.

  D. Select the option Enable SSL Network Extender Network Mode only.

  Correct Answer: B

• Question 222:

  Your customer wishes to install theSmart WorkflowSoftware Blade on a R70 Security Management server (Secure Platform). Which is the correct method?

  A. When you install the R70.1 package on an R70 Security Management server, it will be upgraded to version R70.1 withSmart Workflow.

  B. TheSmart Workflowworks directly on the version R70. Install theSmart Workflowas an add-on. The version of the Management server remains R70.

  C. You must upgrade the Management Server to the version R70.1 first before you start the installation of theSmart WorkflowSoftware Blade plug-in.

  D. TheSmart WorkflowSoftware Blade is included in the standard R70 version. You need to enable it via cpconfig.

  Correct Answer: A

• Question 223:

  What command will stop all (and only) Management Portal services?

  A. cpstop

  B. spstop

  C. sportalstop

  D. smartportalstop

  Correct Answer: D

• Question 224:

  You just upgraded to R71 and are using the IPS Software Blade. You want to enable all critical protections while keeping the rate of false positive very low. How can you achieve this?

  A. new IPS system is based on policies, but it has no ability to calculate or change the confidence level, so it always has a high rate of false positives.

  B. As inSmart Defense, this can be achieved by activating all the critical checks manually.

  C. The new IPS system is based on policies and gives you the ability to activate al checks with critical severity and a high confidence level.

  D. This can't be achieved; activating any IPS system always causes a high rate of false positives.

  Correct Answer: C

• Question 225:

  TheSmart Provisioningmanagement concept is based on:

  A. Zones

  B. Groups

  C. Regions

  D. Profiles

  Correct Answer: D

• Question 226:

  Which changes are tracked bySmart Workflow?

  A. Smart Dashboard,Smart ViewTracker andSmart ViewMonitor logins and logouts

  B. Security Policies and the Rule Base, Network Objects, Network Services, VPN Communities.

  C. Users, Administrators, Groups and VPN Communities

  D. Security Policies and the Rule Base, Network Objects, Network Services, Resources, Users, Administrators, Groups, VPN Communities and Servers and OPSEC Applications.

  Correct Answer: D

• Question 227:

  Which of the following can NOT be done on the Management Portal?

  A. Set the Management Portal to use HTTP instead of HTTPS

  B. Configure Management Portal to bypass authentication when connecting from a specific IP address

  C. Restrict hosts / networks that can access the portal

  D. Run the Management Portal on a port other than the default port 4433

  Correct Answer: D

• Question 228:

  You logged in to your firewall and discovered that the scheduled backup has been modified. Which of the below options is NOT a reason for the change?

  A. Another administrator pushed aSmart Provisioningprofile to the firewall

  B. Another administrator issued a new backup command through the command line

  C. Another administrator logged in to the WebUI and changed the setting without your knowledge D. Another administrator updated the Backup Schedule usingSmart Update

  Correct Answer: D

• Question 229:

  You start the configuration ofSmart Workflow.Smart Workflowis enabled, but you are not able to select Open New Session because it is greyed out. What must be done to open a new session? Choose the BEST answer.

  A. Sessions in the Manage menu ofSmart Dashboardmust be selected and enabled.

  B. The use of sessions must be enabled by the CLI command: SWF_session start.

  C. A rule which allows theSmart Workflowtraffic must be placed on the top of the Rule Base.

  D. The Work with sessions in Global Properties must be set.

  Correct Answer: D

• Question 230:

  InSmart Workflow, what is NOT a valid possibility?

  A. Task Flow without Session and without Role Segregation

  B. Task Flow without Session but with Role Segregation

  C. Task Flow with Session but without Role Segregation

  D. Task Flow with Session and with Role Segregation

  Correct Answer: B