CheckPoint Checkpoint Certifications 156-315.77 Questions & Answers

• Question 321:

  You want to upgrade a SecurePlatform NG with Application Intelligence (Al) R55 Gateway to SecurePlatform NGX R60 via SmartUpdate. Which package is needed in the repository before upgrading?

  A. SVN Foundation and VPN-1 Express/Pro

  B. VPN-1 and Firewall-1

  C. SecurePlatform NGX R60

  D. SVN Foundation 3 E. VPN-1 Pro/Express NGXR60

  Correct Answer: C

• Question 322:

  Which of the following is a TRUE statement concerning contract verification?

  A. Your contract file is stored on the User Center and fetched by the Gateway as needed.

  B. Your contract file is stored on the SmartConsole and downloaded to the SmartCenter Server.

  C. Your contract file is stored on the SmartConsole and downloaded to the Gateway.

  D. Your contract file is stored on the SmartCenter Server and downloaded to the Security Gateway.

  Correct Answer: D

• Question 323:

  What proprietary Check Point protocol is the basis of the functionality of Check Point ClusterXL inter-module communication?

  A. RDP

  B. IPSec

  C. CCP

  D. HA OPCODE

  E. CKPP

  Correct Answer: C

• Question 324:

  What is the command to upgrade an NG with Application Intelligence R55Smart Centerrunning onSecure Platformto VPN-1 NGX R65?

  A. fw install_mgmt

  B. upgrade_mgmt

  C. patch add cd

  D. fwm upgrade_tool

  Correct Answer: C

• Question 325:

  Which of the following is part of the PKI? Select all that apply.

  A. User certificate

  B. Attribute Certificate

  C. Certificate Revocation Lists

  D. Public-key certificate

  Correct Answer: ACD

• Question 326:

  Your current VPN-1 NG with Application Intelligence (AI) R55 stand-alone VPN-1 Pro Gateway and SmartCenter Server runs on SecurePlatform. You plan to implement VPN-1 NGX R65 in a distributed environment, where the new machine will be the SmartCenter Server, and the existing machine will be the VPN-1 Pro Gateway only. You need to migrate the NG with AI R55 SmartCenter Server configuration, including licensing.

  How do you handle licensing for this NGX R65 upgrade?

  A. Request an NGX R65 SmartCenter Server license, using the new server's IP address. Request a new central NGX R65 VPN-1 Gateway license also licensed to the new SmartCenter Server's IP address.

  B. Leave the current license on the gateway to be upgraded during the software upgrade. Purchase a new license for the VPN-1 NGX R65 SmartCenter Server.

  C. Request an NGX R65 SmartCenter Server license, using the existing gateway machine's IP address. Request a new local license for the NGX R65 VPN-1 Gateway using the new server's IP address.

  D. Request an NGX R65 SmartCenter Server license, using the new server's IP address. Request a new central NGX R65 VPN-1 Gateway license for the existing gateway server's IP address.

  Correct Answer: A

• Question 327:

  What happens in relation to the CRL cache after a cpstop;spstart has been initiated?

  A. The gateway continues to use the old CRL even if it is not valid, until a new CRL is cached

  B. The gateway continues to use the old CRL, as long as it is valid.

  C. The gateway issues a crl_zap on startup, which empties the cache and forces Certificate retrieval.

  D. The gateway retrieves a new CRL on startup, then discards the old CRL as invalid.

  Correct Answer: B

• Question 328:

  What is the behavior of ClusterXL in a High Availability environment?

  A. Both members respond to the virtual IP address, and both members pass traffic when using their physical addresses.

  B. Both members respond to the virtual IP address, but only the active member is able to pass traffic.

  C. The active member responds to the virtual IP address.nd both members pass traffic when using their physical addresses.

  D. The active member responds to the virtual IP address.nd is the only member that passes traffic

  E. The passive member responds to the virtual IP address, and both members route traffic when using their physical addresses.

  Correct Answer: D

• Question 329:

  Public-key cryptography is considered which of the following?

  A. two-key/symmetric

  B. one-key/asymmetric

  C. two-key/asymmetric

  D. one-key/symmetric

  Correct Answer: C

• Question 330:

  You are a Security Administrator preparing to deploy a new HFA (Hot fix Accumulator) to ten Security Gateways at five geographically separated locations. What is the BEST method to implement this HFA?

  A. Send a Certified Security Engineer to each site to perform the update

  B. Use SmartUpdate to install the packages to each of the Security Gateways remotely

  C. Use a SSH connection to SCP the HFA to each Security Gateway. Once copied locally, initiate a remote installation command and monitor the installation progress with SmartView Monitor.

  D. Send a CDROM with the HFA to each location and have local personnel install it

  Correct Answer: B