CheckPoint Checkpoint Certifications 156-315.77 Questions & Answers

• Question 481:

  Which of the following is TRUE concerning unnumbered VPN Tunnel Interfaces (VTIs)?

  A. Local IP addresses are not configured, remote IP addresses are configured

  B. VTI specific additional local and remote IP addresses are not configured

  C. VTIs are only supported onSecure Platform

  D. VTIs cannot be assigned a proxy interface

  Correct Answer: B

• Question 482:

  How do you verify a VPN Tunnel Interface (VTI) is configured properly?

  A. vpn shell display detailed

  B. vpn shell show detailed

  C. vpn shell show interface detailed

  D. vpn shell display interface detailed

  Correct Answer: C

• Question 483:

  A VPN Tunnel Interface (VTI) is defined onSecure PlatformPro as:

  vpn shell interface add numbered 10.10.0.1 10.10.0.2 madrid.cp

  What do you know about this VTI?

  A. 10.10.0.1 is the local Gateway's internal interface, and 10.10.0.2 is the internal interface of the remote Gateway.

  B. The peer Security Gateway's name is madrid.cp.

  C. The VTI name is madrid.cp.

  D. The local Gateway's object name is madrid.cp.

  Correct Answer: B

• Question 484:

  Which of the following statements is TRUE concerning MEP VPN's?

  A. The VPN Client is assigned a Security Gateway to connect to based on a priority list, should the first connection fail.

  B. MEP Security Gateways can be managed by separate Management Servers.

  C. MEP VPN's are restricted to the location of the gateways.

  D. State synchronization betweenSecurityGateways is required.

  Correct Answer: B

• Question 485:

  Which of the following is TRUE concerning unnumbered VPN Tunnel Interfaces (VTIs)?

  A. VTIs must be assigned a proxy interface.

  B. VTIs can only be physical, not loopback.

  C. VTIs are only supported onSecure Platform.

  D. Local IP addresses are not configured, remote IP addresses are configured.

  Correct Answer: A

• Question 486:

  You have installedSecure PlatformR76as Security Gateway operating system. As company requirements changed, you need the VTI features ofR76. What should you do?

  A. Only IPSO 3.9 supports VTI feature, so you have to replace your Security Gateway with Nokia appliances.

  B. InSmart Dashboardclick on the OS drop down menu and chooseSecure PlatformPro. You have to reboot the Security Gateway in order for the change to take effect.

  C. Type pro enable on your Security Gateway and reboot it.

  D. You have to re-install your Security Gateway withSecure PlatformProR76, asSecure PlatformR76does not support VTIs.

  Correct Answer: C

• Question 487:

  When configuring numbered VPN Tunnel Interfaces (VTIs) in a clustered environment, what issues need to be considered?

  

  A. 1, 3, and 4

  B. 2 and 3

  C. 1, 2, and 4 D. 1, 2, 3 and 4

  Correct Answer: D

• Question 488:

  What is theSmart EventAnalyzer's function?

  A. Assign severity levels to events.

  B. Analyze log entries, looking for Event Policy patterns.

  C. Display received threats and tune the Events Policy.

  D. Generate a threat analysis report from the Analyzer database.

  Correct Answer: A

• Question 489:

  When do modifications to the Event Policy take effect?

  A. When saved on the Correlation Units, and pushed as a policy.

  B. As soon as the Policy Tab window is closed.

  C. When saved on theSmart EventClient, and installed on theSmart EventServer.

  D. When saved on theSmart EventServer and installed to the Correlation Units.

  Correct Answer: D

• Question 490:

  If the number of kernel instances for CoreXL shown is 6, how many cores are in the physical machine?

  A. 6

  B. 8

  C. 4

  D. 12

  Correct Answer: B