CheckPoint 156-315.77 Online Practice Questions and Exam Preparation

CheckPoint 156-315.77 Online Questions & Answers

• Question 421:

  For a dedicated DLP Gateway that runs in inline bridge mode, why is it important to properly define the topology?

  A. Topology definition is necessary for correct anti-spoofing.
  B. Topology is used for Hide NAT.
  C. By default. My Organization is defined by the internal interfaces of a DLP Gateway.
  D. Topology definition is used for VPN communities definition.
  C. By default. My Organization is defined by the internal interfaces of a DLP Gateway.

• Question 422:

  Which of the following is NOT a LDAP server option inSmart Directory?

  A. Novell_DS
  B. Netscape_DS
  C. OPSEC_DS
  D. Standard_DS
  D. Standard_DS

• Question 423:

  Which of the following commands can provide the most complete restore of an R76configuration?

  A. upgrade import
  B. fwm dbimport -p
  C. cpconfig
  D. cpinfo -recover
  A. upgrade import

• Question 424:

  What command will allow you to disable sync on a cluster firewall member?

  A. fw ctl syncstat stop
  B. fw ctl setsync off
  C. fw ctl setsync 0
  D. fw ctl syncstat off
  B. fw ctl setsync off

• Question 425:

  Steve is troubleshooting a connection problem with an internal application. If he knows the source IP address is 192.168.4.125, how could he filter this traffic?

  A. Run fw monitor -e "accept dsrc=192.168.4.125;"
  B. Run fw monitor -e "accept dst=192.168.4.125;"
  C. Run fw monitor -e "accept ip=192.168.4.125;"
  D. Run fw monitor -e "accept src=192.168.4.125;"
  D. Run fw monitor -e "accept src=192.168.4.125;"

• Question 426:

  Where do Gateways managed bySmart Provisioningfetch their assigned profiles?

  A. TheSmart viewMonitor
  B. The standaloneSmart Provisioningserver
  C. The Security Management server or CMA
  D. They are fetched locally from the individual device
  C. The Security Management server or CMA

• Question 427:

  From the following output of cphaprob state,

  

  which ClusterXL mode is this?

  A. Load Balancing Mode
  B. Multicast mode
  C. Unicast mode
  D. New mode
  E. Legacy mode
  C. Unicast mode

• Question 428:

  You are preparing computers for a new ClusterXL deployment. For your cluster, you plan to use three machines with the following configurations:

  

  Are these machines correctly configured for a ClusterXL deployment?

  A. No, the Security Gateway cannot be installed on the Security Management Server.
  B. No, the Security Management Server is not running the same operating system as the cluster members.
  C. Yes, these machines are configured correctly for a ClusterXL deployment.
  D. No, Cluster Member 3 does not have the required memory.
  A. No, the Security Gateway cannot be installed on the Security Management Server.

• Question 429:

  Which of the following does NOT happen when using Pivot Mode in ClusterXL?

  A. The Security Gateway analyzes the packet and forwards it to the Pivot.
  B. The packet is forwarded through the same physical interface from which it originally came, not on the sync interface.
  C. The Pivot's Load Sharing decision function decides which cluster member should handle the packet.
  D. The Pivot forwards the packet to the appropriate cluster member.
  A. The Security Gateway analyzes the packet and forwards it to the Pivot.

• Question 430:

  You must set up SIP with a proxy for your network. IP phones are in the 172.16.100.0 network. The Registrar and proxy are installed on host 172.16.100.100. To allow handover enforcement for outbound calls from SIP-net to network Net_B on the Internet, you have defined the following objects: Network object: SIP-net: 172.16.100.0/24 SIP-gateway: 172.16.100.100 VoIP Domain object: VolP_domain_A 1.Endpoint domain: SIP-net 2.VoIP gateway installed at: SIP-gateway host object How would you configure the rule?

  A. SIP- G ateway/N et_B/s i p_a ny/a c c e pt
  B. VolP_domain_A/Net_B/sip/accept
  C. SIP-Gateway/Net_B/sip/accept
  D. VolP_domain_A/Net_B/sip_any, and sip/accept
  E. VolP_Gateway_MJet_B/sip_any/accept
  B. VolP_domain_A/Net_B/sip/accept