CheckPoint Checkpoint Certifications 156-315.77 Questions & Answers

• Question 291:

  What is the most typical type of configuration for VPNs with several externally managed Gateways?

  A. star community

  B. mesh community

  C. domain community

  D. Hybrid community

  E. SAT community

  Correct Answer: A

• Question 292:

  Why should the upgrade_export configuration file (.tgz) be deleted after you complete the import process?

  A. It will prevent a future successful upgrade_export since the .tgz file cannot be overwritten.

  B. It will conflict with any future upgrades run from SmartUpdate.

  C. SmartUpdate will start a new installation process if the machine is rebooted.

  D. It contains your security configuration, which could be exploited.

  Correct Answer: D

• Question 293:

  Which of these components does NOT require a VPN-1 NGX R65 license?

  A. SmartConsole

  B. Check Point Gateway

  C. SmartCenter Server

  D. SmartUpdate upgrading/patching

  Correct Answer: A

• Question 294:

  DShield is a Check Point feature used to block which of the following threats?

  A. Cross Site Scripting

  B. SQL injection

  C. DDOS

  D. Buffer overflows

  E. Trojan horses

  Correct Answer: C

• Question 295:

  From the following output of cphaprob state,

  

  which ClusterXL mode is this?

  A. Load Balancing Mode

  B. Multicast mode

  C. Unicast mode

  D. New mode

  E. Legacy mode

  Correct Answer: C

• Question 296:

  Which of the following provides a unique user ID for a digital Certificate?

  A. Username

  B. User-message digest

  C. User e-mail

  D. User organization

  Correct Answer: B

• Question 297:

  How do you control the maximum mail messages in a spool directory?

  A. In the Security Server window in Global Properties

  B. In SmartDefense SMTP settings

  C. In the smtp.conf file on the SmartCenter Server

  D. In the gateway object's SMTP settings in the Advanced window

  E. In the SMTP resource object

  Correct Answer: D

• Question 298:

  Which service type does NOT invoke a Security Server?

  A. HTTP

  B. FTP

  C. Telnet

  D. CIFS

  E. SMTP

  Correct Answer: D

• Question 299:

  Public keys and digital certificates provide which of the following? Select three.

  A. Non repudiation

  B. Data integrity

  C. Availability

  D. Authentication

  Correct Answer: ABD

• Question 300:

  In a distributed VPN-1 Pro NGX environment, where is the Internal Certificate Authority (ICA) installed?

  A. On the Security Gateway

  B. Certificate Manager Server

  C. On the Policy Server

  D. On the Smart View Monitor

  E. On the primary SmartCenter Server

  Correct Answer: E