CheckPoint Checkpoint Certifications 156-315.77 Questions & Answers

• Question 391:

  You are configuring the VoIP Domain object for a Skinny Client Control Protocol (SCCP) environment protected by VPN-1 NGX. Which VoIP Domain object type can you use?

  A. CallManager

  B. Gatekeeper

  C. Gateway

  D. Proxy

  E. Transmission Router

  Correct Answer: A

• Question 392:

  Which is the BEST configuration option to protect internal users from malicious Java code, without stripping Java scripts?

  A. Use the URI resource to block Java code

  B. Use CVP in the URI resource to block Java code

  C. Use the URI resource to strip applet tags

  D. Use the URI resource to strip ActiveX tags

  Correct Answer: A

• Question 393:

  Where is it necessary to configure historical records inSmart ViewMonitor to generate Express reports inSmart Reporter?

  A. InSmart ViewMonitor, under Global Properties > Log and Masters

  B. InSmart Reporter, under Express > Network Activity

  C. InSmart Dashboard, theSmart ViewMonitor page in theR76Security Gateway object

  D. InSmart Reporter, under Standard > Custom

  Correct Answer: C

• Question 394:

  Which statement about LDAP and Active Directory (AD) with SSL VPN is TRUE?

  A. SSL VPN does not support LDAP password remediation.

  B. SSL VPN is capable of administering or creating users and groups directly on an LDAP server.

  C. SSL VPN never stores the user records of LDAP/AD groups.

  D. By default. SSL VPN sends username and password credentials to LDAP servers in UTF-8 encoding

  Correct Answer: B

• Question 395:

  When migrating theSmart Eventdata base from one server to another, the last step is to save the files on the new server. Which of the following commands should you run to save theSmart Eventdata base files on the new server?

  A. cp

  B. migrate import

  C. eva_db_restore

  D. restore

  Correct Answer: C

• Question 396:

  To change the default port of the Management Portal:

  A. Edit the masters. conf file on the Portal server.

  B. Modify the file cp_httpd_admin .conf.

  C. Run sysconfig and change the management interface

  D. Re-initialize SIC

  Correct Answer: B

• Question 397:

  Stephanie wants to reduce the encryption overhead and improve performance for her mesh VPN Community. The Advanced VPN Properties screen below displays adjusted page settings:What can Stephanie do to achieve her goal?

  

  A. Check the box "Use Perfect Forward Secrecy"

  B. Change the setting "Use DiffiE. Hellman group" to "Group 5 (1536 bit)"

  C. Check the box "Use aggressive mode"

  D. Check the box "Support IP compression"

  E. Reduce the setting "Renegotiate IKE security associations every" to "720"

  Correct Answer: D

• Question 398:

  Which Check Point QoS feature is used to dynamically allocate relative portions of available bandwidth?

  A. Guarantees

  B. Weighted Fair Queuing

  C. Low Latency Queuing

  D. Differentiated Services

  Correct Answer: B

• Question 399:

  You are reviewing SmartView Tracker entries, and see a Connection Rejection on a Check Point QoS rule. What causes the Connection Rejection?

  A. The guarantee of one of the rule's sub-rules exceeds the guarantee in the rule itself.

  B. The number of guaranteed connections is exceeded. The rule's action properties are not set to accept additional connections.

  C. The Constant Bit Rate for a Low Latency Class has been exceeded by greater than 10%, and the Maximal Delay is set below requirements.

  D. Burst traffic matching the Default Rule is exhausting the Check Point QoS global packet buffers.

  Correct Answer: B

• Question 400:

  WhatSmart Consoleapplication allows you to change the Log Consolidation Policy?

  A. Smart Dashboard

  B. Smart Reporter

  C. Smart Update

  D. Smart EventServer

  Correct Answer: B