CheckPoint Checkpoint Certifications 156-315.77 Questions & Answers

• Question 471:

  Which of the following is NOT accelerated by SecureXL?

  A. Telnet

  B. FTP

  C. SSH

  D. HTTPS

  Correct Answer: B

• Question 472:

  Which of the following is TRUE concerning unnumbered VPN Tunnel Interfaces (VTIs)?

  A. They are only supported on the IPSO Operating System.

  B. VTIs cannot be assigned a proxy interface.

  C. VTIs can only be physical, not loopback.

  D. Local IP addresses are not configured, remote IP addresses are configured.

  Correct Answer: A

• Question 473:

  What is the command to enter the router shell?

  A. gated

  B. routerd

  C. clirouter

  D. router

  Correct Answer: D

• Question 474:

  You need to publishGAiAroutes using theOSPFrouting protocol. What is the correct command structure, once entering the route command, to implementOSPFsuccessfully?

  A. Run cpconfig utility to enable ospf routing

  B. ip route ospf ospf network1 ospf network2

  C. Enable Configure terminal Router ospf [id] Network [network] [wildmask] area [id]

  D. Use DBedit utility to either the objects_5_0.c file

  Correct Answer: C

• Question 475:

  TheSmart EventCorrelation Unit:

  A. adds events to the events database.

  B. assigns a severity level to an event.

  C. forwards what is identified as an event to theSmart Eventserver.

  D. displays the received events.

  Correct Answer: C

• Question 476:

  What is the benefit to runningSmart Eventin Learning Mode?

  A. There is noSmart EventLearning Mode

  B. To runSmart Eventwith preloaded sample data in a test environment

  C. To runSmart Event, with a step-by-step online configuration guide for training/setup purposes

  D. To generate a report with system Event Policy modification suggestions

  Correct Answer: D

• Question 477:

  TheSmart EventServer:

  A. analyzes each IPS log entry as it enters the Log server.

  B. displays the received events.

  C. forwards what is known as an event to theSmart EventServer.

  D. assigns a severity level to an event.

  Correct Answer: D

• Question 478:

  You have three Gateways in a mesh community. Each gateway's VPN Domain is their internal network as defined on the Topology tab setting All IP Addresses behind Gateway based on Topology information.

  You want to test the route-based VPN, so you created VTIs among the Gateways and created static route entries for the VTIs. However, when you test the VPN, you find out the VPN still go through the regular domain IPsec tunnels instead of the routed VTI tunnels.

  What is the problem and how do you make the VPN use the VTI tunnels?

  A. Domain VPN takes precedence over the route-based VTI. To make the VPN go through VTI, remove the Gateways out of the mesh community and replace with a star community

  B. Route-based VTI takes precedence over the Domain VPN. Troubleshoot the static route entries to insure that they are correctly pointing to the VTI gateway IP.

  C. Route-based VTI takes precedence over the Domain VPN. To make the VPN go through VTI, use dynamic-routing protocol like OSPF or BGP to route the VTI address to the peer instead of static routes

  D. Domain VPN takes precedence over the route-based VTI. To make the VPN go through VTI, use an empty group object as each Gateway's VPN Domain

  Correct Answer: D

• Question 479:

  What is the purpose of the pre-defined exclusions included withSmart EventR76?

  A. To avoid incorrect event generation by the default IPS event definition; a scenario that may occur in deployments that include Security Gateways of versions prior to R71.

  B. To allowSmart EventR76to function properly with all other R71 devices.

  C. To give samples of how to write your own exclusion.

  D. As a base for starting and building exclusions.

  Correct Answer: A

• Question 480:

  _____________ generates aSmart EventReport from its SQL database.

  A. Smart EventClient

  B. Security Management Server

  C. Smart Reporter

  D. Smart DashboardLog Consolidator

  Correct Answer: C