CheckPoint 156-315.77 Online Practice Questions and Exam Preparation

CheckPoint 156-315.77 Online Questions & Answers

• Question 281:

  Which command will only show the number of entries in the connection table?

  A. fw tab -t connections -s
  B. fw tab -t connections -u
  C. fw tab -t connections
  D. fw tab
  A. fw tab -t connections -s

• Question 282:

  In ClusterXL, _______ is defined by default as a critical device.

  A. fw.d
  B. protect.exe
  C. PROT_SRV.EXE
  D. Filter
  D. Filter

• Question 283:

  While authorization for users managed by SmartDirectory is performed by the gateway, the authentication mostly occurs in __________.

  A. ldapauth
  B. cpauth
  C. ldapd
  D. cpShared
  B. cpauth

• Question 284:

  Which of the following statements about SSL VPN is TRUE?

  A. Traffic is not encrypted in a LAN deployment, where clear text requests are forwarded to internal servers.
  B. All traffic is always encrypted.
  C. Traffic is encrypted, when it is initiated from a LAN.
  D. Administration traffic is not encrypted.
  A. Traffic is not encrypted in a LAN deployment, where clear text requests are forwarded to internal servers.

• Question 285:

  John is configuring a new R76Gateway cluster but he can not configure the cluster as Third Party IP Clustering because this option is not available in Gateway Cluster Properties.

  

  What's happening?

  A. Third Party Clustering is not available for R76Security Gateways.
  B. John is not using third party hardware as IP Clustering is part of Check Point's IP Appliance.
  C. ClusterXL needs to be unselected to permit 3rd party clustering configuration.
  D. John has an invalid ClusterXL license.
  C. ClusterXL needs to be unselected to permit 3rd party clustering configuration.

• Question 286:

  John is the MegaCorp Security Administrator, and is using Check Point R71. Malcolm is the Security Administrator of a partner company and is using a different vendor's product and both have to build a VPN tunnel between their companies. Both are using clusters with Load Sharing for their firewalls and John is using ClusterXL as a Check Point clustering solution. While trying to establish the VPN, they are constantly noticing problems and the tunnel is not stable and then Malcolm notices that there seems to be 2 SPIs with the same IP from the Check Point site. How can they solve this problem and stabilize the tunnel?

  A. This can be solved by running the command Sticky VPN on the Check Point CLI. This keeps the VPN Sticky to one member and the problem is resolved.
  B. This is surely a problem in the ISPs network and not related to the VPN configuration.
  C. This can be solved when using clusters; they have to use single firewalls.
  D. This can easily be solved by using the Sticky decision function in ClusterXL.
  D. This can easily be solved by using the Sticky decision function in ClusterXL.

• Question 287:

  In ClusterXL, _______ is defined by default as a critical device.

  A. fwd
  B. fwm
  C. assld
  D. cpp
  A. fwd

• Question 288:

  Problems sometimes occur when distributing IPSec packets to a few machines in a Load Sharing Multicast mode cluster, even though the machines have the same source and destination IP addresses. What is the best Load Sharing method for preventing this type of problem?

  A. Load Sharing based on IP addresses, ports, and serial peripheral interfaces (SPI)
  B. Load Sharing based on SPIs only
  C. Load Sharing based on IP addresses only
  D. Load Sharing based on SPIs and ports only
  E. Load Sharing based on IP addresses and ports
  E. Load Sharing based on IP addresses and ports

• Question 289:

  Choose the BEST sequence for configuring user management inSmart Dashboard, using an LDAP server.

  A. Configure a workstation object for the LDAP server, configure a server object for the LDAP Account Unit, and enable LDAP in Global Properties.
  B. Configure a server object for the LDAP Account Unit, and create an LDAP resource object.
  C. Enable LDAP in Global Properties, configure a host-node object for the LDAP server, and configure a server object for the LDAP Account Unit.
  D. Configure a server object for the LDAP Account Unit, enable LDAP in Global Properties, and create an LDAP resource object.
  C. Enable LDAP in Global Properties, configure a host-node object for the LDAP server, and configure a server object for the LDAP Account Unit.

• Question 290:

  What can be said about RSA algorithms? Select all that apply.

  A. Long keys can be used in RSA for enhances security
  B. Short keys can be used for RSA efficiency.
  C. RSA is faster to compute than DES
  D. RSA's key length is variable.
  A. Long keys can be used in RSA for enhances security
  B. Short keys can be used for RSA efficiency.
  D. RSA's key length is variable.