CheckPoint 156-315.77 Online Practice Questions and Exam Preparation

CheckPoint 156-315.77 Online Questions & Answers

• Question 241:

  Which of these components does NOT require a VPN-1 NGX R65 license?

  A. SmartConsole
  B. Check Point Gateway
  C. SmartCenter Server
  D. SmartUpdate upgrading/patching
  A. SmartConsole

• Question 242:

  In Company XYZ, the DLP Administrator defined a new template Data Type that is based on an empty PDF form for an insurance claim. Which of the following statements about this new data type are CORRECT?

  A. Only completed insurance claim forms of PDF file-type that were based on the empty PDF form will be matched by this Data Type.
  B. If the empty PDF insurance claim form is sent, it will NOT be matched by this Data Type.
  C. Word, Excel, PDF filled in insurance claim forms that were based on the empty PDF insurance claim form will be matched by this Data Type.
  D. The Data Type will match only files where the name and file size is similar to that of the original insurance claim forms in PDF format.
  C. Word, Excel, PDF filled in insurance claim forms that were based on the empty PDF insurance claim form will be matched by this Data Type.

• Question 243:

  If a digital signature is used to achieve both data-integrity checking and verification of sender, digital signatures are only used when implementing:

  A. A symmetric-encryption algorithm
  B. CBL-DES
  C. Triple DES
  D. An asymmetric-encryption algorithm
  D. An asymmetric-encryption algorithm

• Question 244:

  MultiCorp is running Smartcenter R71 on an IPSO platform and wants to upgrade to a new Appliance with R77. Which migration tool is recommended?

  A. Download Migration Tool R77 for IPSO and Splat/Linux from Check Point website.
  B. Use already installed Migration Tool.
  C. Use Migration Tool from CD/ISO
  D. Fetch Migration Tool R71 for IPSO and Migration Tool R77 for Splat/Linux from CheckPoint website
  A. Download Migration Tool R77 for IPSO and Splat/Linux from Check Point website.

• Question 245:

  In R71, how would you define a rule to block all traffic sent to or from Germany?

  A. This action is not possible.
  B. Create a policy rule with destination being a custom dynamic object representing Germany and action block. You must also create a rule in the opposite direction.
  C. Create a country specific policy within IPS Geo Protections with Germany as the country, block as the action, and from and to country for direction.
  D. Go to Policy / Global Properties / Geographical Protection Enforcement and add Germany to the blocked countries list.
  C. Create a country specific policy within IPS Geo Protections with Germany as the country, block as the action, and from and to country for direction.

• Question 246:

  Which of the following is NOT a restriction for connection template generation?

  A. SYN Defender
  B. ISN Spoofing
  C. UDP services with no protocol type or source port mentioned in advanced properties
  D. VPN Connections
  C. UDP services with no protocol type or source port mentioned in advanced properties

• Question 247:

  The process that performs the authentication for legacy session authentication is:

  A. cvpnd
  B. fwm
  C. vpnd
  D. fwssd
  D. fwssd

• Question 248:

  What is the benefit to running SmartEvent in Learning Mode?

  A. To run SmartEvent, with a step-by-step online configuration guide for training/setup purposes
  B. There is no SmartEvent Learning Mode
  C. To run SmartEvent with preloaded sample data in a test environment
  D. To generate a report with system Event Policy modification suggestions
  D. To generate a report with system Event Policy modification suggestions

• Question 249:

  What does it mean when a Security Gateway is labeled Untrusted in theSmart ProvisioningStatus view?

  A. SIC has not been established between the Security Gateway and the Security Management.
  B. Smart Provisioningis not enabled on the Security Gateway,
  C. cpd is not running at the Security Gateway.
  D. The Security Gateway is down.
  A. SIC has not been established between the Security Gateway and the Security Management.

• Question 250:

  SmartWorkflow has been enabled with the following configuration:

  If a security administrator opens a new session and after making changes to policy, submits the session for approval will be displayed as:

  A. Approved
  B. In progress
  C. Not Approved
  D. Awaiting Approval
  B. In progress