CheckPoint Checkpoint Certifications 156-315.77 Questions & Answers

• Question 261:

  What port is used for communication to the UserCenter with SmartUpdate?

  A. HTTP

  B. HTTPS

  C. TCP 8080

  D. CPMI

  Correct Answer: B

• Question 262:

  Assume an intruder has compromised your current IKE Phase 1 and Phase 2 keys. Which of the following options will end the intruder's access, after the next Phase 2 exchange occurs?

  A. Phase 3 Key Revocation

  B. Perfect Forward Secrecy

  C. MD5 Hash Completion

  D. SHA1 Hash Completion

  E. DES Key Reset

  Correct Answer: B

• Question 263:

  Which of the following are valid PKI architectures?

  A. mesh architecture

  B. Bridge architecture

  C. Gateway architecture

  D. Hierarchical architecture

  Correct Answer: ACD

• Question 264:

  What is the greatest benefit derived from VPNs compared to frame relay, leased lines any other types of dedicated networks?

  A. lower cost

  B. stronger authentication

  C. Less failure/downtime

  D. Greater performance

  Correct Answer: A

• Question 265:

  You receive an alert indicating a suspicious FTP connection is trying to connect to one of your internal hosts. How do you block the connection in real time and verify the connection is successfully blocked?

  A. Highlight the suspicious connection in SmartView Tracker > Active mode. Block the connection using the Tools > Block Intruder menu. Use the Active mode to confirm that the suspicious connection does not reappear.

  B. Highlight the suspicious connection in SmartView Tracker > Log mode. Block the connection using Tools > Block Intruder menu. Use Log mode to confirm that the suspicious connection does not reappear.

  C. Highlight the suspicious connection in SmartView Tracker > Active mode. Block the connection using Tools > Block Intruder menu. Use Active mode to confirm that the suspicious connection is dropped.

  D. Highlight the suspicious connection in SmartView Tracker > Log mode. Block the connection using Tools > Block Intruder menu. Use the Log mode to confirm that the suspicious connection is dropped.

  Correct Answer: A

• Question 266:

  Your company has two headquarters, one in London, one in New York. Each headquarters includes several branch offices. The branch offices only need to communicate with the headquarters in their country, not with each other, and only the headquarters need to communicate directly. What is the BEST configuration for VPN Communities among the branch offices and their headquarters, and between the two headquarters? VPN Communities comprised of:

  A. Two stars and one mesh Community; each star Community is set up for each site, with headquarters as the center of the Community, and branches as satellites. The mesh Communities are between the New York and London headquarters

  B. Three mesh Communities: one for London headquarters and its branches, one for New York headquarters and its branches, and one for London and New York headquarters.

  C. Two mesh Communities, one for each headquarters and their branch offices; and one star Community, in which London is the center of the Community and New York, is the satellite.

  D. Two mesh Communities, one for each headquarters and their branch offices; and one star Community, where New York is the center of the Community and London is the satellite.

  Correct Answer: A

• Question 267:

  VPN access control would fall under which VPN component?

  A. QoS

  B. Performance

  C. Management

  D. Security

  Correct Answer: D

• Question 268:

  When upgrading to NGX R65, which Check Point products do not require a license upgrade to be current?

  A. VPN-1 NGX (R64) and later

  B. VPN-1 NGX (R60) and later

  C. VPN-1 NG with Application Intelligence (R54) and later

  D. None, all versions require a license upgrade

  Correct Answer: B

• Question 269:

  What action can be run from SmartUpdate NGX R65?

  A. remote_uninstall_verifier

  B. upgrade_export

  C. mds_backup

  D. cpinfo

  Correct Answer: D

• Question 270:

  You are preparing to configure your VoIP Domain Gatekeeper object. Which two other objects should you have created first?

  A. An object to represent the IP phone network, AND an object to represent the host on which the proxy is installed

  B. An object to represent the PSTN phone network, AND an object to represent the IP phone network

  C. An object to represent the IP phone network, AND an object to represent the host on which the gatekeeper is installed

  D. An object to represent the Q.931 service origination host, AND an object to represent the H.245 termination host

  E. An object to represent the call manager, AND an object to represent the host on which the transmission router is installed

  Correct Answer: C