CheckPoint Checkpoint Certifications 156-315.77 Questions & Answers

• Question 421:

  In a UNIX environment,Smart ReporterData Base settings could be modified in:

  A. $FWDIR/Eventia/conf/ini.C

  B. $RTDIR/Database/conf/my.cnf

  C. $CPDIR/Database/conf/conf.C

  D. $ERDIR/conf/my.cnf

  Correct Answer: B

• Question 422:

  Which file defines the fields for each object used in the file objects.C (color, num/string, default value...)?

  A. $FWDIR/conf/classes.C

  B. $FWDIR/conf/scheam.C

  C. $FWDIR/conf/table.C

  D. $FWDIR/conf/fields.C

  Correct Answer: A

• Question 423:

  You want only RAS signals to pass through H.323 Gatekeeper and other H.323 protocols, passing directly between end points. Which routing mode in the VoIP Domain Gatekeeper do you select?

  A. Direct

  B. Direct and Call Setup

  C. Call Setup

  D. Call Setup and Call Control

  Correct Answer: A

• Question 424:

  The following graphic illustrates which command being issued on SecurePlatform?

  A. The administrator will have to open the old session and make the changes, no note is added automatically, however, the manager adds his notes stating the changes required.

  B. The same session is modified with a note automatically added stating under repair.

  C. The old status is removed and a new session is created with the same name, but with a note stating new session after repair.

  D. A new session is created by the name Repairing Session and the old session status is updated to Repaired with a note stating Repaired by Session < new id>

  Correct Answer: D

• Question 425:

  Which of the following deployment scenarios CANNOT be managed by Check Point QoS?

  A. Two lines connected to a single router, and the router is connected directly to the Gateway

  B. Two lines connected to separate routers, and each router is connected to separate interfaces on the Gateway

  C. One LAN line and one DMZ line connected to separate Gateway interfaces

  D. Two lines connected directly to the Gateway through a hub

  Correct Answer: A

• Question 426:

  Mark the configuration options that are available for Data Loss Prevention in R71.

  A. The DLP Gateway running only the Management Server on the same machine.

  B. The DLP Gateway running only the Firewall Software Blade

  C. The DLP as an integrated software blade which can be enabled on a Check Point Security Gateway running other software blades such as firewall, IPS and Management.

  D. A Dedicated DLP Gateway running only the DLP Software Blade.

  Correct Answer: D

• Question 427:

  What is the advantage for deploying SSL VPN in a DMZ, versus a LAN?

  A. SSL VPN adds another layer of access security to internal resources, when it resides in a DMZ.

  B. SSL Network Extender is ineffective in a LAN deployment.

  C. Traffic is in clear text when forwarded to internal servers, but the back connection is encrypted for remote users

  D. Traffic is authenticated without hiding behind Connectra's IP address

  Correct Answer: A

• Question 428:

  Which of the following statements is FALSE about the DLP Software Blade and Active Directory (AD) or LDAP?

  A. When a user authenticates in the DLP Portal to view all his unhandled incidents, the portal authenticates the user using only AD/LDAP.

  B. Check PointUser Checkclient authentication is based on AD.

  C. For SMTP traffic, each recipient e-mail address is translated using AD/LDAP to a user name and group that is checked vs. the destination column of the DLP rule base.

  D. For SMTP traffic, the sender e-mail address is translated using AD/LDAP to a user name and group that is checked vs. the source column of the DLP rule base.

  Correct Answer: A

• Question 429:

  When running DLP Wizard for the first time, which of the following is a mandatory configuration?

  A. Mail Server

  B. E-mail Domain in My Organization

  C. DLP Portal URL

  D. Active Directory

  Correct Answer: B

• Question 430:

  How does ClusterXL Unicast mode handle new traffic?

  A. All members receive all packets. The Security Management Server decides which member will process the packets. Other members delete the packets from memory.

  B. The pivot machine receives and inspects all new packets then synchronizes the connections with other members

  C. The pivot machine receives all the packets and runs an algorithm to determine which member should process the packets

  D. All cluster members' process all packets and members synchronize with each other. The pivot is responsible for the master sync catalog

  Correct Answer: C