CheckPoint 156-315.77 Online Practice Questions and Exam Preparation

CheckPoint 156-315.77 Online Questions & Answers

• Question 431:

  When two or more DLP rules are matched, the action taken is the most restrictive action. Rank the following items from the lowest restriction level (1) to the highest (4).

  1.

  Ask User

  2.

  Prevent

  3.

  Detect

  4.

  Inform User

  A. 3,4,1,2
  B. 3,1,4,2
  C. 4,3,1,2
  D. 4,1,3,2
  B. 3,1,4,2

• Question 432:

  To configure a Security Management Server for an SSL VPN Gateway, you can set up log forwarding from that Gateway. All of the following tasks must be performed to accomplish this, EXCEPT:

  A. Defining a remote log server in the "Remote Log Server" box.
  B. Establishing SIC between the Security Management Server and the SSL VPN Gateway.
  C. Initiating the put key process in order to facilitate Secure Internal Communications (SIC).
  D. Providing the Security Management Server's IP address.
  A. Defining a remote log server in the "Remote Log Server" box.

• Question 433:

  In a Management High Availability (HA) configuration, you can configure synchronization to occur automatically, when:

  1.

  The Security Policy is installed.

  2.

  The Security Policy is saved.

  3.

  The Security Administrator logs in to the secondary SmartCenter Server, and changes its status to active.

  4.

  A scheduled event occurs.

  5.

  The user database is installed.

  Select the BEST response for the synchronization sequence. Choose one.

  A. 1, 2, 3
  B. 1, 2, 3, 4
  C. 1, 3, 4
  D. 1, 2, 5
  E. 1, 2, 4
  E. 1, 2, 4

• Question 434:

  When distributing IPSec packets to gateways in a Load Sharing Multicast mode cluster, which valid Load Sharing method will consider VPN information?

  A. Load Sharing based on IP addresses, ports, and serial peripheral interfaces
  B. Load Sharing based on SPIs
  C. Load Sharing based on ports, VTI, and IP addresses
  D. Load Sharing based on IP addresses, ports, and security parameter indexes
  D. Load Sharing based on IP addresses, ports, and security parameter indexes

• Question 435:

  What action CANNOT be run from SmartUpdate NGX R65?

  A. Get all Gateway Data
  B. Reboot gateway
  C. Preinstall verifier
  D. Fetch sync status
  D. Fetch sync status

• Question 436:

  You run cphaprob -a if. When you review the output, you find the word DOWN. What does DOWN mean?

  A. The cluster link is down.
  B. The physical interface is administratively set to DOWN.
  C. The physical interface is down.
  D. CCP pakets couldn't be sent to or didn't arrive from neighbor member.
  D. CCP pakets couldn't be sent to or didn't arrive from neighbor member.

• Question 437:

  Which of the following is a valid Active Directory designation for user Jane Doe in the MIS department of AcmeCorp.com?

  A. Cn= jane_doe,ou=MIS,DC=acmecorp,dc=com
  B. Cn= jane_doe,ou=MIS,cn=acmecorp,dc=com
  C. Cn=jane_doe,ou=MIS,dc=acmecorp,dc=com
  D. Cn= jane_doe,ou=MIS,cn=acme,cn=corp,dc=com
  C. Cn=jane_doe,ou=MIS,dc=acmecorp,dc=com

• Question 438:

  Which of the following statements is TRUE concerning MEP VPN's?

  A. State synchronization between Security Gateways is NOT required.
  B. MEP Security Gateways cannot be managed by separate Management Servers.
  C. The VPN Client is assigned a Security Gateway to connect to based on a priority list, should the first connection fail.
  D. MEP VPN's are restricted to the location of the gateways.
  A. State synchronization between Security Gateways is NOT required.

• Question 439:

  Which of the following statements is TRUE concerning MEP VPN's?

  A. State synchronization betweenSecurityGateways is required.
  B. MEP VPN's are not restricted to the location of the gateways.
  C. The VPN Client is assigned a Security Gateway to connect to based on a priority list, should the first connection fail.
  D. MEP Security Gateways cannot be managed by separate Management Servers.
  B. MEP VPN's are not restricted to the location of the gateways.

• Question 440:

  Which of the following commands would you run to remove site-to-site IKE and IPSec Keys?

  A. vpn tu
  B. ikeoff
  C. vpn export_p12
  D. vpn accel off
  A. vpn tu