CheckPoint Checkpoint Certifications 156-315.77 Questions & Answers

• Question 451:

  You want VPN traffic to match packets from internal interfaces. You also want the traffic to exit the Security Gateway bound for all site-to-site VPN Communities, including Remote Access Communities. How should you configure the VPN match rule?

  A. Communities > Communities

  B. internal_clear > All_GwToGw

  C. internal_clear > All_communities

  D. Internal_clear > External_Clear

  Correct Answer: C

• Question 452:

  How can you disable SecureXL via the command line (it does not need to survive a reboot)?

  A. cphaprob off

  B. fw ctl accel off

  C. securexl off

  D. fwaccel off

  Correct Answer: D

• Question 453:

  How many Events can be shown at one time in the Event preview pane?

  A. 5,000

  B. 30,000

  C. 15,000

  D. 1,000

  Correct Answer: B

• Question 454:

  TheSmart EventServer:

  A. displays the received events

  B. adds events to the events database

  C. invokes defined automatic reactions

  D. analyzes each IPS log entry as it enters the Log server

  Correct Answer: C

• Question 455:

  Frank is concerned with performance and wants to configure the affinities settings. His gateway does not have the Performance Pack running. What would Frank need to perform in order configure those settings?

  A. Edit $FWDIR/conf/fwaffinity.conf and change the settings.

  B. Edit affinity.conf and change the settings.

  C. Run fw affinity and change the settings.

  D. Run sim affinity and change the settings.

  Correct Answer: A

• Question 456:

  _______________ manages Standard Reports and allows the administrator to specify automatic uploads of reports to a central FTP server.

  A. Smart DashboardLog Consolidator

  B. Smart Reporter

  C. Security Management Server

  D. Smart ReporterDatabase

  Correct Answer: B

• Question 457:

  Your customer complains of the weak performance of his systems. He has heard that Connection Templates accelerate traffic. How do you explain to the customer about template restrictions and how to verify that they are enabled?

  A. To enhance connection-establishment acceleration, a mechanism attempts to "group together" all connections that match a particular service and whose sole discriminating element is the source port. To test if connection templates are enabled, use the command fwaccel stat.

  B. To enhance connection-establishment acceleration, a mechanism attempts to "group together" all connections that match a particular service and whose sole discriminating element is the destination port. To test if connection templates are enabled, use the command fwacel templates.

  C. To enhance connection-establishment acceleration, a mechanism attempts to "group together" all connections that match a particular service and whose sole discriminating element is the destination port. To test if connection templates are enabled, use the command fw ctl templates.

  D. To enhance connection-establishment acceleration, a mechanism attempts to "group together" all connections that match a particular service and whose sole discriminating element is the source port. To test if connection templates are enabled, use the command fw ctl templates.

  Correct Answer: A

• Question 458:

  How many pre-defined exclusions are included by default inSmart EventR76as part of the product installation?

  B. 0

  C. 5

  D. 10

  Correct Answer: A

• Question 459:

  There are times when you want to use Link Selection to manage high-traffic VPN connections. With Link Selection you can:

  A. Assign links to use Dynamic DNS.

  B. Use links based on authentication method.

  C. Use links based on Day/Time.

  D. Use Load Sharing to distribute VPN traffic.

  Correct Answer: D

• Question 460:

  The following graphic illustrates which command being issued onSecure Platform?

  

  A. fwaccel stats

  B. fw accel stats

  C. fw securexl stats

  D. fwsecurexl stats

  Correct Answer: A