CheckPoint Checkpoint Certifications 156-315.77 Questions & Answers

• Question 281:

  The following configuration is for VPN-1 NGX:1s this configuration correct for Management High Availability (HA)?

  

  A. No, the SmartCenter Servers must be installed on the same operating system.

  B. No, a VPN-1 NGX SmartCenter Server cannot run on Red Hat Linux 7.3.

  C. No, the SmartCenter Servers must reside on the same network.

  D. No, A VPN-1 NGX SmartCenter Server can only be in a Management HA configuration, if the operating system is Solaris.

  E. No, the SmartCenter Servers do not have the same number of NICs.

  Correct Answer: A

• Question 282:

  What is a requirement for setting up Management High Availability?

  A. All SmartCenter Servers must reside in the same Local Area Network (LAN).

  B. All SmartCenter Servers must have the same amount of memory.

  C. You can only have one Secondary SmartCenter Server.

  D. All SmartCenter Servers must have the BIOS release.

  E. All SmartCenter Servers must have the same operating system.

  Correct Answer: E

• Question 283:

  Damon enables an SMTP resource for content protection. He notices that mail seems to slow down on occasion, sometimes being delivered late. Which of the following might improve throughput performance?

  A. Configuring the SMTP resource to bypass the CVP resource

  B. Increasing the Maximum number of mail messages in the Gateway's spool directory

  C. Configuring the Content Vector Protocol (CVP) resource to forward the mail to the internal SMTP server, without waiting for a response from the Security Gateway

  D. Configuring the CVP resource to return the mail to the Gateway

  E. Configuring the SMTP resource to only allow mail with Damon's company's domain name in the header

  Correct Answer: C

• Question 284:

  The following rule contains an FTP resource object in the Service field:

  Source: local_net

  Destination: Any

  Service: FTP-resource object

  Action: Accept

  How do you define the FTP Resource Properties > Match tab to prevent internal users from receiving corporate files from external FTP servers, while allowing users to send files?

  A. Enable "Put" and "Get" methods.

  B. Disable the "Put" method globally.

  C. Enable the "Put" method only on the Match tab.

  D. Enable the "Get" method on the Match tab.

  E. Disable "Get" and "Put" methods on the Match tab.

  Correct Answer: C

• Question 285:

  Central License management allows a Security Administrator to perform which of the following? Select all that apply.

  A. Attach and/or delete only NGX Central licenses to a remote module (not Local licenses)

  B. Check for expired licenses

  C. Add or remove a license to or from the license repository

  D. Sort licenses and view license properties

  E. Delete both NGX Local licenses and Central licenses from a remote module

  F. Attach both NGX Central and Local licenses to a remote module

  Correct Answer: ABCD

• Question 286:

  Which type of service should a Security Administrator use in a Rule Base to control access to specific shared partitions on target machines?

  A. Telnet

  B. CIFS

  C. HTTP

  D. FTP

  E. URI

  Correct Answer: B

• Question 287:

  Which of the following commands shows full synchronization status?

  A. cphaprob.i list

  B. cphastop

  C. fw ctl pstat

  D. cphaprob.a if

  E. fwhastat

  Correct Answer: A

• Question 288:

  What is the bit size of DES?

  A. 56

  B. 112

  C. 168

  D. 128

  E. 32

  F. 64

  Correct Answer: A

• Question 289:

  Choose all correct statements. SmartUpdate, located on a VPN-1 NGX SmartCenter Server, allows you to:

  (1)

  Remotely perform a first time installation of VPN-1 NGX on a new machine

  (2)

  Determine OS patch levels on remote machines

  (3)

  Update installed Check Point and any OPSEC certified software remotely

  (4)

  Update installed Check Point software remotely

  (5)

  Track installed versions of Check Point and OPSEC products

  (6)

  Centrally manage licenses

  A.

  4, 5, and 6

  B.

  2, 4, 5, and 6

  C.

  1 and 4

  D.

  1, 3, 4, and 6

  Correct Answer: B

• Question 290:

  Which of the following is an example of the hash function?

  A. DES and CBC

  B. DAC and MAC

  C. SHA and 3DES

  D. MD5 and SHA-1

  Correct Answer: D