CheckPoint 156-315.77 Online Practice Questions and Exam Preparation

CheckPoint 156-315.77 Online Questions & Answers

• Question 491:

  _________ is the called process that starts when openingSmart ViewTracker application.

  A. logtrackerd
  B. fwlogd
  C. CPLMD
  D. FWM
  C. CPLMD

• Question 492:

  You start the configuration ofSmart Workflow.Smart Workflowis enabled, but you are not able to select Open New Session because it is greyed out. What must be done to open a new session? Choose the BEST answer.

  A. Sessions in the Manage menu ofSmart Dashboardmust be selected and enabled.
  B. The use of sessions must be enabled by the CLI command: SWF_session start.
  C. A rule which allows theSmart Workflowtraffic must be placed on the top of the Rule Base.
  D. The Work with sessions in Global Properties must be set.
  D. The Work with sessions in Global Properties must be set.

• Question 493:

  What port is used for communication to the UserCenter with SmartUpdate?

  A. HTTP
  B. HTTPS
  C. TCP 8080
  D. CPMI
  B. HTTPS

• Question 494:

  Which of the following is an example of the hash function?

  A. DES and CBC
  B. DAC and MAC
  C. SHA and 3DES
  D. MD5 and SHA-1
  D. MD5 and SHA-1

• Question 495:

  Your primary SmartCenter Server is installed on aSecure PlatformPro machine, which is also a VPN-1 Pro Gateway. You want to implement Management High Availability (HA). You have a spare machine to configure as the secondary SmartCenter Server. How do you configure the new machine to be the standby SmartCenter Server, without making any changes to the existing primary SmartCenter Server? (Changes can include uninstalling and reinstalling.)

  A. You cannot configure Management HA, when either the primary or secondary SmartCenter Server is running on a VPN-1 Pro Gateway.
  B. The new machine cannot be installed as the Internal Certificate Authority on its own.
  C. The secondary Server cannot be installed on a SecurePlatform Pro machine alone.
  D. Install the secondary Server on the spare machine. Add the new machine to the same network as the primary Server.
  A. You cannot configure Management HA, when either the primary or secondary SmartCenter Server is running on a VPN-1 Pro Gateway.

• Question 496:

  Your customer asks you about the Performance Pack. You explain to him that a Performance Pack is a software acceleration product which improves the performance of the Security Gateway. You may enable or disable this acceleration by either:

  1) thecommand:cpconfig

  

  2) the commanD .fwaccel on　ff

  

  What is the difference between these two commands?

  A. The fwaccel command determines the default setting. The command cpconfig can dynamically change the setting, but after the reboot it reverts to the default setting.
  B. Both commands function identically.
  C. The command cpconfig works on the Security Platform only. The command fwaccel can be used on all platforms.
  D. The cpconfig command enables acceleration. The command fwaccel can dynamically change the setting, but after the reboot it reverts to the default setting.
  D. The cpconfig command enables acceleration. The command fwaccel can dynamically change the setting, but after the reboot it reverts to the default setting.

• Question 497:

  Refer to the to the network topology below.

  

  You have IPS software Blades active on security Gateways sglondon, sgla, and sgny, but still experience attacks on the Web server in the New York DMZ. How is this possible?

  A. All of these options are possible.
  B. Attacker may have used a touch of evasion techniques like using escape sequences instead of clear text commands. It is also possible that there are entry points not shown in the network layout, like rouge access points.
  C. Since other Gateways do not have IPS activated, attacks may originate from their networks without any noticing
  D. An IPS may combine different technologies, but is dependent on regular signature updates and well-turned automatically algorithms. Even if this is accomplished, no technology can offer 100% protection.
  A. All of these options are possible.

• Question 498:

  What is the most common cause for a Quick mode packet 1 failing with the error "No Proposal Chosen" error?

  A. The OS and patch level of one gateway does not match the other.
  B. The previously established Permanent Tunnel has failed.
  C. There is a network connectivity issue.
  D. The encryption strength and hash settings of one peer does not match the other.
  D. The encryption strength and hash settings of one peer does not match the other.

• Question 499:

  When does theSmart WorkflowPolicy Installation window appear?

  A. When the administrator installs an approved policy
  B. When the manager approves a session
  C. When the administrator installs an unapproved policy
  D. When the administrator submits a session for approval
  C. When the administrator installs an unapproved policy

• Question 500:

  Assuming all connections that are allocated bandwidth in your Check Point QoS Rule Base are open, what would be the corresponding bandwidth percentage of the Kazaa Rule in the following example?

  

  A. 5%
  B. 20%
  C. 8%
  D. 14%
  D. 14%