CheckPoint Checkpoint Certifications 156-315.77 Questions & Answers

• Question 491:

  To verify SecureXL statistics you would use the command ________?

  A. fwaccel stats

  B. fw ctl pstat

  C. fwaccel top

  D. cphaprob stat

  Correct Answer: A

• Question 492:

  When configuring a Permanent Tunnel between two gateways in a Meshed VPN community, in what object is the tunnel managed?

  A. VPN Community object

  B. Each participating Security Gateway object

  C. Security Management Server

  D. Only the local Security Gateway object

  Correct Answer: A

• Question 493:

  You have selected the event Port Scan from Internal Network inSmart Event, to detect an event when 30 port scans have occurred within 60 seconds. You also want to detect two port scans from a host within 10 seconds of each other. How would you accomplish this?

  A. Define the two port-scan detections as an exception.

  B. Select the two port-scan detections as a new event.

  C. Select the two port-scan detections as a sub-event.

  D. You cannot setSmart Eventto detect two port scans from a host within 10 seconds of each other.

  Correct Answer: A

• Question 494:

  There are times when you want to use Link Selection to manage high-traffic VPN connections. With Link Selection you can:

  A. Assign links to specific VPN communities.

  B. Assign links to use Dynamic DNS.

  C. Use links based on services.

  D. Prohibit Dynamic DNS.

  Correct Answer: C

• Question 495:

  A Smart ProvisioningGateway could be a member of which VPN communities?

  (i)

  Center In Star Topology

  (ii)

  Satellite in Star Topology

  (iii) Carter in Remote Access Community

  (iv)

  Meshed Community

  A.

  (ii) and (iii)

  B.

  All

  C.

  (i), (ii) and (iii)

  D.

  (ii) only

  Correct Answer: A

• Question 496:

  VPN routing can also be configured by editing which file?

  A. $FWDIR\conf\vpn_route.c

  B. $FWDIR\bin\vpn_route.conf

  C. $FWDIR\conf\vpn_route.conf

  D. $FWDIR\VPN\route_conf.c

  Correct Answer: C

• Question 497:

  ______________ is NOT anSmart Eventevent-triggered Automatic Reaction.

  A. SNMP Trap

  B. Mail

  C. Block Access

  D. External Script

  Correct Answer: C

• Question 498:

  Which Check Point product implements a Consolidation Policy?

  A. Smart Reporter

  B. Smart ViewMonitor

  C. SmartLSM

  D. Smart ViewTracker

  Correct Answer: A

• Question 499:

  How do you enable SecureXL (command line) onGAiA?

  A. fw securexl on

  B. fw accel on

  C. fwaccel on

  D. fwsecurexl on

  Correct Answer: C

• Question 500:

  Due to some recent performance issues, you are asked to add additional processors to your firewall. If you already have CoreXL enabled, how are you able to increase Kernel instances?

  A. Once CoreXL is installed you cannot enable additional Kernel instances without reinstallingR76.

  B. InSmart Update, right-click on Firewall Object and choose Add Kernel Instances.

  C. Use cpconfig to reconfigure CoreXL.

  D. Kernel instances are automatically added after process installed and no additional configuration is needed.

  Correct Answer: C