CheckPoint Checkpoint Certifications 156-315.77 Questions & Answers

• Question 351:

  Which of the following manages Standard Reports and allows the administrator to specify automatic uploads of reports to a central FTP server?

  A. Smart Dashboard Log Consolidator

  B. Security Management Server

  C. Smart Reporter Database

  D. Smart Reporter

  Correct Answer: D

• Question 352:

  What could the following regular expression be used for in a DLP rule?

  \$([0-9]*,[0-9] [0-9] [0-9]. [0-9] [0-9]

  Select the best answer

  A. As a Data Type to prevent programmers from leaking code outside the company

  B. As a compound data type representation.

  C. As a Data Type to prevent employees from sending an email that contains a complete price-list of nine products.

  D. As a Data Type to prevent the Finance Department from leaking salary information to employees

  Correct Answer: D

• Question 353:

  What is not available for Express Reports compared to Standard Reports?

  A. Filter

  B. Period

  C. Content

  D. Schedule

  Correct Answer: A

• Question 354:

  Given the following protection detailed and the enforcing gateways list, is the Tool many DNS queries with the RD flag set protection enabled on the Gateway R76?

  

  Please choose the answer with the correct justification.

  A. yes because it is set to prevent on the Default_Protrction, which R76gateway has applied.

  B. No because the protection is only supported on IPS-1 Sensor

  C. No enough information to determine one way or other

  D. No, because the Too many DNS queries with the flag set protection is not a valid protection in R76

  Correct Answer: B

• Question 355:

  You are running R71 and using the new IPS Software Blade. To maintain the highest level of security, you are doing IPS updates regularly. What kind of problems can be caused by the automatic updates?

  A. None; updates will not add any new security checks causing problematicbehavioron the systems.

  B. None, all new updates will be implemented in Detect only mode to avoid unwanted traffic interruptions. They have to be activated manually later.

  C. None, all the checks will be activated from the beginning, but will only detect attacks and not disturb any non-malicious traffic in the network.

  D. All checks will be activated from the beginning and might cause unwanted traffic outage due to false positives of the new checks and non-RFC compliant self-written applications.

  Correct Answer: B

• Question 356:

  Which technology is responsible for assembling packet streams and passing ordered data to the protocol parsers in IPS?

  A. Pattern Matcher

  B. Content Management Infrastructure

  C. Accelerated INSPECT

  D. Packet Streaming Layer

  Correct Answer: D

• Question 357:

  Which Security Servers can perform Content Security tasks, but CANNOT perform authentication tasks?

  A. Telnet

  B. FTP

  C. SMTP

  D. HTTP

  Correct Answer: C

• Question 358:

  What is the lowest possible version a Security Gateway may be running in order to use it as an LSM enabled Gateway?

  A. NG-AI R55 HFAJ7

  B. NGX R60

  C. NGXR65HFA_50

  D. NGX R71

  Correct Answer: A

• Question 359:

  Which of the following is the default port for Management Portal?

  A. 4434

  B. 443

  C. 444

  D. 4433

  Correct Answer: D

• Question 360:

  The following diagram illustrates how a VPN-1 SecureClient user tries to establish a VPN with hosts in the external_net and internal_net from the Internet. How is the Security Gateway VPN Domain created?

  

  A. Internal Gateway VPN Domain = internal_net; External VPN Domain = external net + external gateway object + internal_net.

  B. Internal Gateway VPN Domain = internal_net. External Gateway VPN Domain = external_net + internal gateway object

  C. Internal Gateway VPN Domain = internal_net; External Gateway VPN Domain = internal_net + external_net

  D. Internal Gateway VPN Domain = internal_net. External Gateway VPN Domain = internal VPN Domain + internal gateway object + external_net

  Correct Answer: D