CheckPoint 156-315.77 Online Practice Questions and Exam Preparation

CheckPoint 156-315.77 Online Questions & Answers

• Question 251:

  Which component receives events and assigns severity levels to the events; invokes any defined automatic reactions, and adds the events to the Events Data Base?

  A. Smart EventAnalysisData Server
  B. Smart EventClient
  C. Smart EventCorrelation Unit
  D. Smart EventServer
  D. Smart EventServer

• Question 252:

  A Minimal Effort Upgrade of a cluster:

  A. Is only supported in major releases (R70 to R71, R71 to R76).
  B. Is not a valid upgrade method inR76.
  C. Treats each individual cluster member as an individual gateway.
  D. Upgrades all cluster members except one at the same time.
  C. Treats each individual cluster member as an individual gateway.

• Question 253:

  When synchronizing clusters, which of the following statements is NOT true?

  A. The state of connections using resources is maintained by a Security Server, so these connections cannot be synchronized.
  B. In the case of a failover, accounting information on the failed member may be lost despite a properly working synchronization.
  C. Only cluster members running on the same OS platform can be synchronized.
  D. Client Authentication or Session Authentication connections through a cluster member will be lost if the cluster member fails.
  D. Client Authentication or Session Authentication connections through a cluster member will be lost if the cluster member fails.

• Question 254:

  Review the cphaprob state command output from one New Mode High Availability ClusterXL cluster member.

  

  Which member will be active after member 192.168.1.2 fails over and is rebooted?

  A. 192.168.1.2
  B. Both members' state will be in collision.
  C. 192.168.1.1
  D. Both members' state will be active.
  C. 192.168.1.1

• Question 255:

  Which of the following commands can be used to troubleshoot ClusterXL sync issues?

  A. fw debug cxl connections > file_name
  B. fw tab -s -t connections > file_name
  C. fw tab -u connections > file_name
  D. fw ctl -s -t connections > file_name
  B. fw tab -s -t connections > file_name

• Question 256:

  Included in the customer's network are some firewall systems with the Performance Pack in use. The customer wishes to use these firewall systems in a cluster (Load Sharing mode). He is not sure if he can use the Sticky Decision Function in this cluster. Explain the situation to him.

  A. Sticky Decision Function is not supported when employing either Performance Pack or a hardware-based accelerator card. Enabling the Sticky Decision Function disables these acceleration products.
  B. ClusterXL always supports the Sticky Decision Function in the Load Sharing mode.
  C. The customer can use the firewalls with Performance Pack inside the cluster, which should support the Sticky Decision Function. It is just necessary to enable the Sticky Decision Function in theSmart Dashboardcluster object in the ClusterXL page, Advanced Load Sharing Configuration window.
  D. The customer can use the firewalls with Performance Pack inside the cluster, which should support the Sticky Decision Function. It is just necessary to configure it with the clusterXL_SDF_enable command.
  A. Sticky Decision Function is not supported when employing either Performance Pack or a hardware-based accelerator card. Enabling the Sticky Decision Function disables these acceleration products.

• Question 257:

  Your organization's disaster recovery plan needs an update to the backup and restore section to reap the benefits of the new distributedR76installation. Your plan must meet the following required and desired objectives:

  

  Upon evaluation, your plan:

  A. Meets the required objective and only one desired objective
  B. Meets the required objective and both desired objectives
  C. Meets the required objective but does not meet either desired objective
  D. Does not meet the required objective
  B. Meets the required objective and both desired objectives

• Question 258:

  Which Protection Mode does not exist in IPS?

  A. Allow
  B. Detect
  C. Prevent
  D. Inactive
  A. Allow

• Question 259:

  Robert has configured a Common Internet File System (CIFS) resource to allow access to the public partition of his company's file server, on \\erisco\goldenapple\files\public. Robert receives reports that users are unable to access the shared partition, unless they use the file server's IP address.

  Which of the following is a possible cause?

  A. Mapped shares do not allow administrative locks.
  B. The CIFS resource is not configured to use Windows name resolution
  C. Access violations are not logged.
  D. Remote registry access is blocked.
  E. Null CIFS sessions are blocked.
  B. The CIFS resource is not configured to use Windows name resolution

• Question 260:

  The process _______ executes the authentication for logging in to SmartDashboard.

  A. fwm
  B. vpnd
  C. cpd
  D. cvpnd
  A. fwm