CheckPoint Checkpoint Certifications 156-315.77 Questions & Answers

• Question 371:

  One profile in SmartProvisioning can update:

  A. Potentially hundreds and thousands of gateways.

  B. Only Clustered Gateways.

  C. Specific gateways.

  D. Profiles are not used for updating, just reporting.

  Correct Answer: A

• Question 372:

  Math the SmartDashboard session status icons with the appropriate SmartWorkflow session status:

  

  A. 1-A, 2-B, 3-C, 4-D, 5-E

  B. 1-B, 2-A, 3-D, 4-E, 5-C

  C. 1-C, 2-B, 3-A, 4-D, 5-E

  D. 1-E, 2-D, 3-C, 4-B, 5-A

  Correct Answer: B

• Question 373:

  You configure a Check Point QoS Rule Base with two rules: an H.323 rule with a weight of 10, and the Default Rule with a weight of 10. The H.323 rule includes a per-connection guarantee of 384 Kbps. and a per-connection limit of 512 Kbps. The per-connection guarantee is for four connections, and no additional connections are allowed in the Action properties. If traffic is passing through the QoS Module matches both rules, which of the following statements is TRUE?

  A. Each H.323 connection will receive at least 512 Kbps of bandwidth.

  B. The H.323 rule will consume no more than 2048 Kbps of available bandwidth.

  C. 50% of available bandwidth will be allocated to the Default Rule.

  D. Neither rule will be allocated more than 10% of available bandwidth.

  Correct Answer: B

• Question 374:

  Which specific R76GUI would you use to view the length of time a TCP connection was open?

  A. Smart Reporter

  B. Smart ViewMonitor

  C. Smart ViewStatus

  D. Smart ViewTracker

  Correct Answer: D

• Question 375:

  When migrating theSmart Eventdata base from one server to another, the first step is to back up the files on the original server. Which of the following commands should you run to back up theSmart Eventdata base?

  A. migrate export

  B. snapshot

  C. backup

  D. eva_db_backup

  Correct Answer: D

• Question 376:

  How can you completely tear down a specific VPN tunnel in an intranet IKE VPN deployment?

  A. Run the command vpn tu on the Security Gateway, and choose the option "Delete all IPSec+IKE SAs for ALL peers and users".

  B. Run the command vpn tu on the SmartCenter Server, and choose the option "Delete all IPSec+IKE SAs for ALL peers and users".

  C. Run the command vpn tu on the Security Gateway, and choose the option "Delete all IPSec+IKE SAs for a given peer (GW)".

  D. Run the command vpn tu on the Security Gateway, and choose the option "Delete all IPSec SAs for a given user (Client)".

  E. Run the command vpn tu on the Security Gateway, and choose the option "Delete all IPSec SAs for ALL peers and users".

  Correct Answer: C

• Question 377:

  What is the command to upgrade a SecurePlatform NG with Application Intelligence (Al) R55 SmartCenter Server to VPN-1 NGX using a CD?

  A. cd patch add

  B. fwm upgrade_tool

  C. cppkg add

  D. patch add

  E. patch add cd

  Correct Answer: E

• Question 378:

  In a Windows environment,Smart ReporterData Base settings could be modified in:

  A. %RTDIR%\Database\conf\my.ini

  B. $ERDIR/conf/my.cnf

  C. $CPDIR/Database/conf/conf.C

  D. $FWDIR/Eventia/conf/ini.C

  Correct Answer: A

• Question 379:

  How does a standby SmartCenter Server receive logs from all Security Gateways, when an active SmartCenter Server fails over?

  A. The remote Gateways must set up SIC with the secondary SmartCenter Server, for logging.

  B. Establish Secure Internal Communications (SIC) between the primary and secondary Servers. The secondary Server can then receive logs from the Gateways, when the active Server fails over.

  C. On the Log Servers screen (from the Logs and Masters tree on the gateway object's General Properties screen), add the secondary SmartCenter Server object as the additional log server. Reinstall the Security Policy.

  D. Create a Check Point host object to represent the standby SmartCenter Server. Then select "Secondary SmartCenter Server" and Log Server", from the list of Check Point Products on the General properties screen.

  E. The secondary Server's host name and IP address must be added to the Masters file, on the remote Gateways.

  Correct Answer: C

• Question 380:

  If traffic requires preferential treatment by other routers on the network, in addition to the QoS module, which Check Point QoS feature should be used?

  A. Guarantees

  B. Differentiated Services

  C. Weighted Fair Queuing

  D. Low Latency Queuing

  Correct Answer: B