CheckPoint Checkpoint Certifications 156-315.77 Questions & Answers

• Question 331:

  What can be said about RSA algorithms? Select all that apply.

  A. Long keys can be used in RSA for enhances security

  B. Short keys can be used for RSA efficiency.

  C. RSA is faster to compute than DES

  D. RSA's key length is variable.

  Correct Answer: ABD

• Question 332:

  You are running a VPN-1 NG with Application Intelligence R54 SecurePlatform VPN-1 Pro Gateway. The Gateway also serves as a Policy Server. When you run patch add cd from the NGX CD, what does this command allow you to upgrade?

  A. Only VPN-1 Pro Security Gateway

  B. Both the operating system (OS) and all Check Point products

  C. All products, except the Policy Server

  D. Only the patch utility is upgraded using this command

  E. Only the OS

  Correct Answer: B

• Question 333:

  Regarding QoS guarantees and limits, which of the following statements is FALSE?

  A. If both a limit and a guarantee per rule are defined in a QoS rule, then the limit must be smaller than the guarantee.

  B. If both a rule limit and a per connection limit are defined for a rule, the per connection limit must not be greater than the rule limit.

  C. A rule guarantee must not be less than the sum the guarantees defined in its sub-rules.

  D. If a guarantee is defined in a sub-rule, then a guarantee must be defined for the rule above it.

  Correct Answer: A

• Question 334:

  When synchronizing clusters, which of the following statements are true?

  Select all that apply.

  A. Only cluster members running on the same OS platform can be synchronized.

  B. Client Auth or Session Auth connections through a cluster member will be lost of the cluster member fails.

  C. The state of connections using resources is maintained by a Security Server, so these connections cannot be synchronized.

  D. In the case of a failover, accounting information on the failed member may be lost despite a properly

  Correct Answer: ABC

• Question 335:

  For object-based VPN routing to succeed, what must be configured?

  A. A single rule in the Rule Base must cover traffic in both directions, inbound and outbound on the central (HUB) Security Gateway.

  B. No rules need to be created, implied rules that cover inbound and outbound traffic on the central (HUB) Gateway are already in place from Policy > Properties > Accept VPN-1 Control Connections.

  C. At least two rules in the Rule Base must created, one to cover traffic inbound and the other to cover traffic outbound on the central (HUB) Security Gateway.

  D. VPN routing is not configured in the Rule Base or Community objects. Only the native- routing mechanism on each Gateway can direct the traffic via its VTI configured interfaces.

  Correct Answer: C

• Question 336:

  How should Check Point packages be uninstalled?

  A. In the same order in which the installation wrapper initially installed from.

  B. In the opposite order in which the installation wrapper initially installed them.

  C. In any order, CPsuite must be the last package uninstalled

  D. In any order as long as all packages are removed

  Correct Answer: B

• Question 337:

  Which procedure creates a new administrator inSmart Workflow?

  A. Run cpconfig, supply the Login Name. Profile Properties, Name, Access Applications and Permissions.

  B. InSmart Dashboard, clickSmart Workflow/ EnableSmart Workflowand the EnableSmart Workflowwizard will start. Supply the Login Name, Profile Properties, Name, Access Applications and Permissions when prompted.

  C. On the Provider-1 primary MDS, run cpconfig, supply the Login Name, Profile Properties, Name, Access Applications and Permissions.

  D. InSmart Dashboard, click Users and Administrators right click Administrators / New Administrator and supply the Login Name. Profile Properties, Name, Access Applications and Permissions.

  Correct Answer: D

• Question 338:

  Your organization has many VPN-1 Edge gateways at various branch offices, to allow VPN-1 Secure Client users to access company resources. For security reasons, your organization's Security Policy requires all Internet traffic initiated behind the VPN-1 Edge gateways first be inspected by your headquarters' VPN-1 Pro Security Gateway. How do you configure VPN routing in this star VPN Community?

  A. To the Internet and other targets only

  B. To the center and other satellites, through the center

  C. To the center only

  D. To the center; or through the center to other satellites, then to the Internet and other VPN targets

  Correct Answer: D

• Question 339:

  You are preparing to deploy a VPN-1 Pro Gateway for VPN-1 NGX. You have five systems to choose from for the new Gateway, and you must conform to the following requirements: Operating-system vendor's license agreement

  Check Point's license agreement

  Minimum operating-system hardware specification

  Minimum Gateway hardware specification

  Gateway installed on a supported operating system (OS)

  Which machine meets ALL of the following requirements?

  A. Processor: 1.1 GHz RAM: 512MB Hard disk: 10 GB OS: Windows 2000 Workstation

  B. Processor: 2.0 GHz RAM: 512MB Hard disk: 10 GB OS: Windows ME

  C. Processor: 1.5 GHz RAM: 256 MB Hard disk: 20 GB OS: Red Hat Linux 8.0

  D. Processor: 1.67 GHz RAM: 128 MB Hard disk: 5 GB OS: FreeBSD

  E. Processor: 2.2 GHz RAM: 256 MB Hard disk: 20 GB OS: Windows 2000 Server

  Correct Answer: E

• Question 340:

  Management Portal should be installed on:

  (i)

  Management Server

  (ii)

  Security Gateway

  (iii)

  Dedicated Server

  A.

  All are possible solutions

  B.

  (ii) only

  C.

  (iii) only

  D.

  (i) or (ii) only

  Correct Answer: D