CheckPoint 156-315.77 Online Practice Questions and Exam Preparation

CheckPoint 156-315.77 Online Questions & Answers

• Question 461:

  When using ClusterXL in Load Sharing, what is the default method?

  A. IPs, Ports, SPIs
  B. IPs
  C. IPs, Ports
  D. IPs, SPIs
  A. IPs, Ports, SPIs

• Question 462:

  You logged in to your firewall and discovered that the scheduled backup has been modified. Which of the below options is NOT a reason for the change?

  A. Another administrator pushed aSmart Provisioningprofile to the firewall
  B. Another administrator issued a new backup command through the command line
  C. Another administrator logged in to the WebUI and changed the setting without your knowledge
  D. Another administrator updated the Backup Schedule usingSmart Update
  D. Another administrator updated the Backup Schedule usingSmart Update

• Question 463:

  You receive an alert indicating a suspicious FTP connection is trying to connect to one of your internal hosts. How do you block the connection in real time and verify the connection is successfully blocked?

  A. Highlight the suspicious connection in SmartView Tracker > Active mode. Block the connection using the Tools > Block Intruder menu. Use the Active mode to confirm that the suspicious connection does not reappear.
  B. Highlight the suspicious connection in SmartView Tracker > Log mode. Block the connection using Tools > Block Intruder menu. Use Log mode to confirm that the suspicious connection does not reappear.
  C. Highlight the suspicious connection in SmartView Tracker > Active mode. Block the connection using Tools > Block Intruder menu. Use Active mode to confirm that the suspicious connection is dropped.
  D. Highlight the suspicious connection in SmartView Tracker > Log mode. Block the connection using Tools > Block Intruder menu. Use the Log mode to confirm that the suspicious connection is dropped.
  A. Highlight the suspicious connection in SmartView Tracker > Active mode. Block the connection using the Tools > Block Intruder menu. Use the Active mode to confirm that the suspicious connection does not reappear.

• Question 464:

  What is a "sticky" connection?

  A. A Sticky Connection is one in which a reply packet returns through the same gateway as the original packet.
  B. A Sticky Connection is a VPN connection that remains up until you manually bring it down.
  C. A Sticky Connection is a connection that remains the same.
  D. A Sticky Connection is a connection that always chooses the same gateway to set up the initial connection.
  A. A Sticky Connection is one in which a reply packet returns through the same gateway as the original packet.

• Question 465:

  When a security administrator logs in toSmart Dashboardand selects Continue without session from the followingwindow,whatkind of access will be granted to him inSmart Dashboard?

  

  A. He will get read-only access to the policy, network objects and session management.
  B. He will get read-only access to the policy and network objects; however, he can still manage the sessions, i.e. Approve, Request Repair etc.
  C. A new session will automatically be created with a default session name along with date and time. All changes made by the manager will be saved in this new session.
  D. No access will be granted, he will be logged out ofSmart Dashboard.
  B. He will get read-only access to the policy and network objects; however, he can still manage the sessions, i.e. Approve, Request Repair etc.

• Question 466:

  Which of the following is NOT an advantage ofSmart Log?

  A. Smart Loghas a "Top Results" pane showing things like top sources, rules, and users.
  B. Smart Logdisplays query results across multiple log files, reducing the need to open previous files to view results.
  C. Smart Logrequires less disk space by consolidating log entries into fewer records.
  D. Smart Logcreates an index of log entries, increasing query speed.
  C. Smart Logrequires less disk space by consolidating log entries into fewer records.

• Question 467:

  In which case is a Sticky Decision Function relevant?

  A. Load Sharing - Unicast
  B. Load Balancing - Forward
  C. High Availability
  D. Load Sharing - Multicast
  C. High Availability

• Question 468:

  Which of the following log files contains information about the negotiation process for encryption?

  A. ike.elg
  B. iked.elg
  C. vpnd.elg
  D. vpn.elg
  A. ike.elg

• Question 469:

  Which of the following is a TRUE statement concerning contract verification?

  A. Your contract file is stored on the User Center and fetched by the Gateway as needed.
  B. Your contract file is stored on the SmartConsole and downloaded to the SmartCenter Server.
  C. Your contract file is stored on the SmartConsole and downloaded to the Gateway.
  D. Your contract file is stored on the SmartCenter Server and downloaded to the Security Gateway.
  D. Your contract file is stored on the SmartCenter Server and downloaded to the Security Gateway.

• Question 470:

  What is used to validate a digital certificate?

  A. S/MIME
  B. CRL
  C. IPsec
  D. PKCS
  B. CRL