CheckPoint 156-315.77 Online Practice Questions and Exam Preparation

CheckPoint 156-315.77 Online Questions & Answers

• Question 481:

  You find that Gateway fw2 can NOT be added to the cluster object. What are possible reasons for that?

  

  A. (i) or (ii)
  B. (ii) or (iii)
  C. (i) or (iii)
  D. All
  C. (i) or (iii)

• Question 482:

  David is the MultiCorp Security Manager and approves the proposals submitted by the Security Administrator Peter. One day, David believes he has detected a vulnerability in the Security Policy. He submits a change proposal and tries to approve his own submission. The system does not allow him to perform this procedure.

  

  What is the reason for this behavior?

  A. The company does not allow David to submit and also approve the same policy change. David was assigned the Approve only permission (instead of Submit and Approve).
  B. The company does not allow David to submit and approve the same policy change. The setting Manager cannot approve their submitted sessions in Global Properties was set to On.
  C. The company does not allow David to submit and approve the same policy change. The setting Manager cannot approve their submitted sessions in theSmart Workflowsection of the Firewall object properties was set to On.
  D. The proposal contains some logical contradictions. The Check Point verification control does not permit this change to be carried out.
  B. The company does not allow David to submit and approve the same policy change. The setting Manager cannot approve their submitted sessions in Global Properties was set to On.

• Question 483:

  A customer is calling saying one member's status is Down. What will you check?

  A. cphaprob list (verify what critical device is down)
  B. fw ctl pstat (check sync)
  C. fw ctl debug -m cluster + forward (forwarding layer debug)
  D. tcpdump/snoop (CCP traffic)
  A. cphaprob list (verify what critical device is down)

• Question 484:

  An Account Unit is the interface between the __________ and the __________.

  A. Users, Domain
  B. Gateway, Resources
  C. System, Database
  D. Clients, Server
  D. Clients, Server

• Question 485:

  When using Captive Portal to send unidentified users to a Web portal for authentication, which of the following is NOT a recommended use for this method?

  A. Identity-based enforcement for non-AD users (non-Windows and guest users)
  B. For deployment of Identity Agents
  C. Basic identity enforcement in the internal network
  D. Leveraging identity in Internet application control
  C. Basic identity enforcement in the internal network

• Question 486:

  Smart Reporterreports can be used to analyze data from a penetration-testing regimen in all of the following examples, EXCEPT:

  A. Possible worm/malware activity.
  B. Analyzing traffic patterns against public resources.
  C. Analyzing access attempts via social-engineering.
  D. Tracking attempted port scans.
  C. Analyzing access attempts via social-engineering.

• Question 487:

  In a "zero downtime" scenario, which command do you run manually after all cluster members are upgraded?

  A. cphaconf set_ccp broadcast
  B. cphaconf set clear_subs
  C. cphaconf set mc_relod
  D. cphaconf set_ccp multicast
  D. cphaconf set_ccp multicast

• Question 488:

  Which of the following statements is FALSE regarding OSPF configuration onSecure PlatformPro?

  A. router ospf 1 creates the Router ID for the Security Gateway and should be the same ID for all Gateways.
  B. router ospf 1 creates the Router ID for the Security Gateway and should be different for all Gateways.
  C. router ospf 1 creates an OSPF routing instance and this process ID should be different for each Security Gateway.
  D. router ospf 1 creates an OSPF routing instance and this process ID should be the same on all Gateways.
  D. router ospf 1 creates an OSPF routing instance and this process ID should be the same on all Gateways.

• Question 489:

  Your R7x-series Enterprise Security Management Server is running abnormally on Windows Server 2003 R2. You decide to try reinstalling the Security Management Server, but you want to try keeping the critical Security Management Server configuration settings intact (i.e., all Security Policies, databases, SIC, licensing etc.) What is the BEST method to reinstall the Server and keep its critical configuration?

  

  A. Option A
  B. Option B
  C. Option C
  D. Option D
  B. Option B

• Question 490:

  What is theSmart EventCorrelation Unit's function?

  A. Assign severity levels to events.
  B. Display received threats and tune the Events Policy.
  C. Analyze log entries, looking for Event Policy patterns.
  D. Invoke and define automatic reactions and add events to the database.
  C. Analyze log entries, looking for Event Policy patterns.