CheckPoint 156-315.77 Online Practice Questions and Exam Preparation

CheckPoint 156-315.77 Online Questions & Answers

• Question 321:

  You are a SSL VPN administrator. Your users complain that their Outlook Web Access is running extremely slowly, and their overall browsing experience continues to worsen. You suspect it could be a logging problem. Which of the following logs does Check Point recommend you turn off?

  A. Alert
  B. Event
  C. Trace
  D. Traffic
  C. Trace

• Question 322:

  When migrating theSmart Eventdata base from one server to another, the last step is to save the files on the new server. Which of the following commands should you run to save theSmart Eventdata base files on the new server?

  A. cp
  B. migrate import
  C. eva_db_restore
  D. restore
  C. eva_db_restore

• Question 323:

  What is the offline CPSIZEME upload procedure?

  A. Find the cpsizeme_of_.pdf, attach it to an e-mail and send it to [email protected]
  B. Use the webbrowser version of cpsizeme and fax it to Check Point.
  C. Find the cpsizeme_of_.xml, attach it to an e-mail and send it to [email protected]
  D. There is no offline upload method.
  C. Find the cpsizeme_of_.xml, attach it to an e-mail and send it to [email protected]

• Question 324:

  Jacob is using a mesh VPN Community to create a sitE. to-site VPN. The VPN properties in this mesh Community display in this graphic: Which of the following statements is TRUE?

  

  A. If Jacob changes the setting, "Perform key exchange encryption with" from "3DES" to "DES", he will enhance the VPN Community's security and reduce encryption overhead.
  B. Jacob must change the datA. integrity settings for this VPN Community. MD5 is incompatible with AES.
  C. If Jacob changes the setting "Perform IPSec data encryption with" from "AES-128" to "3DES", he will increase the encryption overhead.
  D. Jacob's VPN Community will perform IKE Phase 1 key-exchange encryption, using the longest key VPN-1 NGX supports.
  C. If Jacob changes the setting "Perform IPSec data encryption with" from "AES-128" to "3DES", he will increase the encryption overhead.

• Question 325:

  Fill in the blank. To verify that a VPN Tunnel is properly established, use the command _________

  A. vpn tunnelutil
  A. vpn tunnelutil

  ---

  Which process should you debug if SmartDashboard login fails?

  A. sdm

  B. cpd

  C. fwd

  D. fwm

  Correct Answer: D

• Question 326:

  Which port is typically used by SSL Network Extender, if theConnecterPortal will also be used on the same IP address?

  A. SSL (TCP/900)
  B. SSL (TCP/443)
  C. SSL (TCP/444)
  D. SSL (TCP/80)
  C. SSL (TCP/444)

• Question 327:

  Which of the following is a supported Sticky Decision Function of Sticky Connections for Load Sharing?

  A. Multi-connection support for VPN-1 cluster members
  B. Support for all VPN deployments (except those with third-party VPN peers)
  C. Support forSecure Client/Secure mote/SSL Network Extender encrypted connections
  D. Support for Performance Pack acceleration
  C. Support forSecure Client/Secure mote/SSL Network Extender encrypted connections

• Question 328:

  What tools CANNOT be launched from SmartUpdate NGX R65?

  A. cpinfo
  B. SecurePlatform Web UI
  C. Nokia Voyager
  D. snapshot
  D. snapshot

• Question 329:

  If a SmartUpdate upgrade or distribution operation fails on SecurePlatform, how is the system recovered?

  A. SecurePlatform will reboot and automatically revert to the last snapshot version prior to upgrade.
  B. The Administrator must remove the rpm packages manually, and reattempt the upgrade.
  C. The Administrator can only revert to a previously created snapshot (if there is one) with the command cprinstall snapshot .
  D. The Administrator must reinstall the last version via the command cprinstall revert .
  A. SecurePlatform will reboot and automatically revert to the last snapshot version prior to upgrade.

• Question 330:

  In CoreXL, what process is responsible for processing incoming traffic from the network interfaces, securely accelerating authorized packets, and distributing non-accelerated packets among kernel instances?

  A. NAD (Network Accelerator Daemon)
  B. SND (Secure Network Distributor)
  C. SSD (Secure System Distributor)
  D. SNP (System Networking Process)
  B. SND (Secure Network Distributor)