CheckPoint Checkpoint Certifications 156-315.77 Questions & Answers

• Question 231:

  Please review the following QoS policy:

  

  Assume you have 200 Kbps bandwidth available at all times. Which statement would describe this policy?

  A. The un-named rule has a total Guarantee of 5 Kbps, which should be 50 and lower the other Guarantees.

  B. Guarantee values are set too high, you have no bandwidth available for anything else besides traffic describe in first rules.

  C. All traffic matching the default rule will have priority

  D. All traffic will receive sufficient bandwidth because the default rule has a low weight value.

  Correct Answer: B

• Question 232:

  What happens to the session information after they are approved and a policy installation is done?

  A. Session information is never deleted from the database.

  B. It depends on theSmart Workflowsettings in Global Properties.

  C. An option is given to retain the session information, default being deletion of session information from the database.

  D. Session information can only be deleted before a policy is installed.

  Correct Answer: C

• Question 233:

  How is Smart Workflow disabled?

  A. In cpconfig, choose Disable Smart Workflow from the menu

  B. InSmart ViewTracker, click onSmart Workflow> Disable Smart Workflow

  C. InSmart Dashboard, click on View > Smart Workflow > Disable Smart Workflow

  D. Open Smart Workflow as admin. Create new session and name it Disable Smart Workflow. InSmart Dashboardclick Smart Workflow > Disable Smart Workflow, click OK in the warning box, click Save and Continue

  Correct Answer: D

• Question 234:

  The Management Portal allows all of the following EXCEPT:

  A. Manage firewall logs

  B. Schedule policy installation

  C. View administrator activity

  D. View the status of Check Point products

  Correct Answer: B

• Question 235:

  Which of the following files is used to allow only specific IPs or networks to access the Management Portal?

  A. hosts. Allow

  B. portal.ips

  C. cpportal_allowips

  D. allowedips.portal

  Correct Answer: A

• Question 236:

  You have configured an LDAP account unit and confirmed the Apply and Fetch Branches option works in SSL VPN, but end users still cannot be authenticated. What is the MOST LIKELY cause?

  A. The Administrator's login is incorrect.

  B. The LDAP server is incorrectly configured.

  C. The user is not defined in Active Directory.

  D. The LDAP account unit's login Distinguished Name is incorrectly configured.

  Correct Answer: D

• Question 237:

  How many events are shown by default in the Event preview pane?

  A. 30,000

  B. 5,000

  C. 1,000

  D. 15,000

  Correct Answer: B

• Question 238:

  David is the MultiCorp Security Manager and approves the proposals submitted by the Security Administrator Peter. One day, David believes he has detected a vulnerability in the Security Policy. He submits a change proposal and tries to approve his own submission. The system does not allow him to perform this procedure.

  

  What is the reason for this behavior?

  A. The company does not allow David to submit and also approve the same policy change. David was assigned the Approve only permission (instead of Submit and Approve).

  B. The company does not allow David to submit and approve the same policy change. The setting Manager cannot approve their submitted sessions in Global Properties was set to On.

  C. The company does not allow David to submit and approve the same policy change. The setting Manager cannot approve their submitted sessions in theSmart Workflowsection of the Firewall object properties was set to On.

  D. The proposal contains some logical contradictions. The Check Point verification control does not permit this change to be carried out.

  Correct Answer: B

• Question 239:

  The Management Portal Software Blade allows users to

  A. View Security Policies

  B. Monitor traffic flows

  C. Add/Delete rules

  D. Create/Modify objects

  Correct Answer: A

• Question 240:

  When connecting to the SSL VPN portal, you receive a pop-up message indicating that the server hostname does not match the certificate hostname, and the certificate is not signed by a known Certificate Authority (CA). How would you solve this problem?

  A. Acquire and install an SSL server certificate from a known CA.

  B. Ignore the message. It only occurs before the portal synchronizes with the GUI.

  C. Resolve the certificate-hostname conflict between the Connectra portal and the administration GUI.

  D. The administration GUI is pointing to the wrong certificate-hostname location.

  Correct Answer: A