CheckPoint Checkpoint Certifications 156-315.77 Questions & Answers

• Question 441:

  Which of the following is TRUE concerning numbered VPN Tunnel Interfaces (VTIs)?

  A. VTIs are assigned only local addresses, not remote addresses

  B. VTIs are only supported on IPSO

  C. VTIs cannot share IP addresses

  D. VTIs cannot use an already existing physical-interface IP address

  Correct Answer: D

• Question 442:

  After Travis added new processing cores on his server, CoreXL did not use them. What would be the most plausible reason why? Travis did not:

  A. Edit the Gateway Properties and increase the kernel instances.

  B. Run cpconfig to increase the number of CPU cores.

  C. Edit the Gateway Properties and increase the number of CPU cores.

  D. Run cpconfig to increase the kernel instances.

  Correct Answer: D

• Question 443:

  Which type of routing relies on a VPN Tunnel Interface (VTI) to route traffic?

  A. Domain-based VPN

  B. Route-based VPN

  C. Subnet-based VPN

  D. Host-based VPN

  Correct Answer: B

• Question 444:

  What is theSmart EventClient's function?

  A. Display received threats and tune the Events Policy.

  B. Generate a threat analysis report from the Reporter database.

  C. Invoke and define automatic reactions and add events to the database.

  D. Assign severity levels to events.

  Correct Answer: A

• Question 445:

  You are reviewing computer information collected in ClientInfo. You can NOT:

  A. Enter new credential for accessing the computer information.

  B. Save the information in the active tab to an .exe file.

  C. Copy the contents of the selected cells.

  D. Run Google.com search using the contents of the selected cell.

  Correct Answer: B

• Question 446:

  Which of the following statements is TRUE concerning MEP VPN's?

  A. State synchronization betweenSecurityGateways is required.

  B. MEP VPN's are not restricted to the location of the gateways.

  C. The VPN Client is assigned a Security Gateway to connect to based on a priority list, should the first connection fail.

  D. MEP Security Gateways cannot be managed by separate Management Servers.

  Correct Answer: B

• Question 447:

  A trackedSmart EventCandidate in a Candidate Pool becomes an Event. What does NOT happen in the Analyzer Server?

  A. Smart Eventprovides the beginning and end time of the Event.

  B. The Correlation Unit keeps adding matching logs to the Event.

  C. The Event is kept open, but condenses many instances into one Event.

  D. Smart Eventstops tracking logs related to the Candidate.

  Correct Answer: D

• Question 448:

  Your organization maintains several IKE VPN's. Executives in your organization want to know which mechanism Security GatewayR76uses to guarantee the authenticity and integrity of messages. Which technology should you explain to the executives?

  A. Digital signatures

  B. Certificate Revocation Lists

  C. Key-exchange protocols

  D. Application Intelligence

  Correct Answer: A

• Question 449:

  To back up all events stored in theSmart EventServer, you should back up the contents of which folder(s)?

  A. $RTDIR/distrib

  B. $RTDIR/distrib_db and $FWDIR/events

  C. $RTDIR/distrib and $RTDIR/events_db

  D. $RTDIR/events_db

  Correct Answer: C

• Question 450:

  There are times when you want to use Link Selection to manage high-traffic VPN connections. With Link Selection you can:

  A. Use links based on Day/Time.

  B. Set up links for Remote Access.

  C. Assign links to specific VPN communities.

  D. Assign links to use Dynamic DNS.

  Correct Answer: B