CheckPoint Checkpoint Certifications 156-315.77 Questions & Answers

• Question 341:

  If Jack was concerned about the number of log entries he would receive in the SmartReporter system, which policy would he need to modify?

  A. Consolidation Policy

  B. Log Consolidator Policy

  C. Log Sequence Policy

  D. Report Policy

  Correct Answer: A

• Question 342:

  Check Point recommends deploying SSL VPN:

  A. In parallel to the firewall

  B. In a DMZ

  C. In front of the firewall with a LAN connection

  D. On the Primary cluster member

  Correct Answer: C

• Question 343:

  Jacob is using a mesh VPN Community to create a sitE. to-site VPN. The VPN properties in this mesh Community display in this graphic: Which of the following statements is TRUE?

  

  A. If Jacob changes the setting, "Perform key exchange encryption with" from "3DES" to "DES", he will enhance the VPN Community's security and reduce encryption overhead.

  B. Jacob must change the datA. integrity settings for this VPN Community. MD5 is incompatible with AES.

  C. If Jacob changes the setting "Perform IPSec data encryption with" from "AES-128" to "3DES", he will increase the encryption overhead.

  D. Jacob's VPN Community will perform IKE Phase 1 key-exchange encryption, using the longest key VPN-1 NGX supports.

  Correct Answer: C

• Question 344:

  Robert has configured a Common Internet File System (CIFS) resource to allow access to the public partition of his company's file server, on \\erisco\goldenapple\files\public. Robert receives reports that users are unable to access the shared partition, unless they use the file server's IP address.

  Which of the following is a possible cause?

  A. Mapped shares do not allow administrative locks.

  B. The CIFS resource is not configured to use Windows name resolution

  C. Access violations are not logged.

  D. Remote registry access is blocked.

  E. Null CIFS sessions are blocked.

  Correct Answer: B

• Question 345:

  What is NOT true about Management Portal?

  A. Choosing Accept control connections in Implied Rules includes Management Portal access

  B. Management Portal requires a license

  C. Default Port for Management Portal access is 4433

  D. Management Portal could be reconfigured for using HTTP instead of HTTPS

  Correct Answer: A

• Question 346:

  How could you compare the Fingerprint shown to the Fingerprint on the server?

  

  A. Run cpconfig, select the Certificate's Fingerprint option and view the fingerprint

  B. Run cpconfig, select the GUI Clients option and view the fingerprint

  C. Run cpconfig, select the Certificate Authority option and view the fingerprint

  D. Run sysconfig, select the Server Fingerprint option and view the fingerprint

  Correct Answer: A

• Question 347:

  Smart Reporterreports can be used to analyze data from a penetration-testing regimen in all of the following examples, EXCEPT:

  A. Possible worm/malware activity.

  B. Analyzing traffic patterns against public resources.

  C. Analyzing access attempts via social-engineering.

  D. Tracking attempted port scans.

  Correct Answer: C

• Question 348:

  A user cannot authenticate to SSL VPN. You have verified the user is assigned a user group and reproduced the problem, confirming a failed-login session. You do not see an indication of this attempt in the traffic log. The user is not using a client certificate for login. To debug this error, where in the authentication process could the solution be found?

  A. apache

  B. admin

  C. cvpnd

  D. cpauth

  Correct Answer: C

• Question 349:

  How isSmart Workflowenabled?

  A. InSmart ViewMonitor, click onSmart Workflow/ EnableSmart Workflow. The EnablingSmart Workflowwizard launches and prompts forSmart WorkflowOperation Mode. Once a mode is selected, the wizard finishes.

  B. InSmart ViewTracker, click onSmart Workflow/ EnableSmart Workflow. The EnablingSmart Workflowwizard launches and prompts forSmart WorkflowOperation Mode Once a mode is selected, the wizard finishes.

  C. InSmart Dashboard, click onSmart Workflow/ EnableSmart WorkflowThe EnablingSmart Workflowwizard launches and prompts forSmart WorkflowOperation Mode. Once a mode is selected, the wizard finishes.

  D. InSmart Event, click onSmart Workflow/ EnableSmart Workflow. The EnablingSmart Workflowwizard launches and prompts forSmart WorkflowOperation Mode. Once a mode is selected, the wizard finishes.

  Correct Answer: C

• Question 350:

  Which Security Server can perform authentication tasks, but CANNOT perform content security tasks?

  A. Telnet

  B. HTTP

  C. rlogin

  D. FTP

  E. SMTP

  Correct Answer: C