CheckPoint 156-315.77 Online Practice Questions and Exam Preparation

CheckPoint 156-315.77 Online Questions & Answers

• Question 271:

  What happens in relation to the CRL cache after a cpstop;spstart has been initiated?

  A. The gateway continues to use the old CRL even if it is not valid, until a new CRL is cached
  B. The gateway continues to use the old CRL, as long as it is valid.
  C. The gateway issues a crl_zap on startup, which empties the cache and forces Certificate retrieval.
  D. The gateway retrieves a new CRL on startup, then discards the old CRL as invalid.
  B. The gateway continues to use the old CRL, as long as it is valid.

• Question 272:

  What could be a reason why synchronization between primary and secondary Security Management Servers does not occur?

  A. You did not activate synchronization within Global Properties.
  B. You are using different time zones.
  C. You have installed both Security Management Servers on different server systems (e. g. one machine on HP hardware and the other one on DELL).
  D. If the set of installed products differ from each other, the Security Management Servers do not synchronize the database to each other.
  D. If the set of installed products differ from each other, the Security Management Servers do not synchronize the database to each other.

• Question 273:

  Which OPSEC server is used to prevent users from accessing certain Web sites?

  A. LEA
  B. URI
  C. UFP
  D. AMON
  E. CVP
  C. UFP

• Question 274:

  With the User Directory Software Blade, you can createR76user definitions on a(n) _________ Server.

  A. SecureID
  B. LDAP
  C. NT Domain
  D. Radius
  B. LDAP

• Question 275:

  Identify the correct step performed by SmartUpdate to upgrade a remote Security Gateway.

  A. After selecting "Packages: Add... from CD", the entire contents of the CD are copied to the packages directory on the selected remote Security Gateway.
  B. After selecting "Packages: Add... from CD", the entire contents of the CD are copied to the Package Repository on the SmartCenter Server.
  C. After selecting "Packages: Add... from CD", the selected package is copied to the packages directory on the selected remote Security Gateway.
  D. After selecting "Packages: Add... from CD", the selected package is copied to the Package Repository on the SmartCenter Server.
  D. After selecting "Packages: Add... from CD", the selected package is copied to the Package Repository on the SmartCenter Server.

• Question 276:

  When you check Web Server in a host-node object, what happens to the host?

  A. The Web server daemon is enabled on the host.
  B. More granular controls are added to the host, in addition to Web Intelligence tab settings.
  C. You can specify allowed ports in the Web server's node-object properties. You then do not need to list all allowed ports in the Rule Base.
  D. IPS Web Intelligence is enabled to check on the host.
  B. More granular controls are added to the host, in addition to Web Intelligence tab settings.

• Question 277:

  You want to upgrade an NG with Application Intelligence R55 Security Gateway running on SecurePlatform to VPN-1 NGX R65 via SmartUpdate. Which package(s) is(are) needed in the Repository prior to upgrade?

  A. SecurePlatform NGX R65 package
  B. VPN-1 Power/UTM NGX R65 package
  C. SecurePlatform and VPN-1 Power/UTM NGX R65 packages
  D. SVN Foundation and VPN-1 Power/UTM packages
  A. SecurePlatform NGX R65 package

• Question 278:

  You have a production implementation of Management High Availability, at version VPN-1 NG with Application Intelligence R55. You must upgrade your two SmartCenter Servers to VPN-1 NGX. What is the correct procedure?

  A. 1. Synchronize the two SmartCenter Servers. 2. Upgrade the secondary SmartCenter Server. 3. Upgrade the primary SmartCenter Server. 4. Configure both SmartCenter Server host objects version to VPN-1 NGX. 5. Synchronize the Servers again.
  B. 1. Synchronize the two SmartCenter Servers. 2. Perform an advanced upgrade on the primary SmartCenter Server. 3. Upgrade the secondary SmartCenter Server. 4. Configure both SmartCenter Server host objects to version VPN-1 NGX. 5. Synchronize the Servers again.
  C. 1. Perform an advanced upgrade on the primary SmartCenter Server. 2. Configure the primary SmartCenter Server host object to version VPN-1 NGX. 3. Synchronize the primary with the secondary SmartCenter Server. 4. Upgrade the secondary SmartCenter Server. 5. Configure the secondary SmartCenter Server host object to version VPN-1 NGX. 6. Synchronize the Servers again.
  D. 1. Synchronize the two SmartCenter Servers. 2. Perform an advanced upgrade on the primary SmartCenter Server. 3. Configure the primary SmartCenter Server host object to version VPN-1 NGX. 4. Synchronize the two Servers again. 5. Upgrade the secondary SmartCenter Server. 6. Configure the secondary SmartCenter Server host object to version VPN-1 NGX. 7. Synchronize the Servers again.
  B. 1. Synchronize the two SmartCenter Servers. 2. Perform an advanced upgrade on the primary SmartCenter Server. 3. Upgrade the secondary SmartCenter Server. 4. Configure both SmartCenter Server host objects to version VPN-1 NGX. 5. Synchronize the Servers again.

• Question 279:

  For an initial installation ofConnecter, which of the following statements is TRUE?

  A. You must configure theConnecterusername and password before running the First Time Wizard.
  B. It is possible to run the First Time Wizard from Expert Mode on theConnecterserver.
  C. It is not possible to use the sysconfig and cpconfig utilities, until the First Time Wizard in the Administration Web GUI is successfully completed.
  D. It is not necessary to set up the Rule Base before completingConnector'sinstallation.
  C. It is not possible to use the sysconfig and cpconfig utilities, until the First Time Wizard in the Administration Web GUI is successfully completed.

• Question 280:

  A VPN Tunnel Interface (VTI) is defined onSecure PlatformPro as: vpn shell interface add numbered 10.10.0.1 10.10.0.2 madrid.cp What do you know about this VTI?

  A. 10.10.0.1 is the local Gateway's internal interface, and 10.10.0.2 is the internal interface of the remote Gateway.
  B. The peer Security Gateway's name is madrid.cp.
  C. The VTI name is madrid.cp.
  D. The local Gateway's object name is madrid.cp.
  B. The peer Security Gateway's name is madrid.cp.