CheckPoint Checkpoint Certifications 156-315.77 Questions & Answers

• Question 521:

  Which of the following statements is TRUE concerning MEP VPN's?

  A. State synchronization between Security Gateways is NOT required.

  B. MEP Security Gateways cannot be managed by separate Management Servers.

  C. The VPN Client is assigned a Security Gateway to connect to based on a priority list, should the first connection fail.

  D. MEP VPN's are restricted to the location of the gateways.

  Correct Answer: A

• Question 522:

  If you need strong protection for the encryption of user data, what option would be the BEST choice?

  A. When you need strong encryption, IPsec is not the best choice. SSL VPN's are a better choice.

  B. UseDaffier-Hellman for key construction and pre-shared keys for Quick Mode. Choose SHA in Quick Mode and encrypt with AES. Use AH protocol. Switch to Aggressive Mode.

  C. DisableDiffer-Hellman by using stronger certificate based key-derivation. Use AES-256 bit on all encrypted channels and add PFS toQuick Mode. Use double encryption by implementing AH and ESP as protocols.

  D. Use certificates for Phase 1, SHA for all hashes, AES for all encryption and PFS, and use ESP protocol.

  Correct Answer: D

• Question 523:

  Steve tries to configure Directional VPN Rule Match in the Rule Base. But the Match column does not have the option to see the Directional Match. Steve sees the following screen. What is the problem?

  

  A. Steve must enable directional_match(true) in the objects_5_0.C file on SmartCenter Server.

  B. Steve must enable Advanced Routing on each Security Gateway.

  C. Steve must enable VPN Directional Match on the VPN Advanced screen, in Global properties.

  D. Steve must enable a dynamic routing protocol, such as OSPF, on the Gateways.

  E. Steve must enable VPN Directional Match on the gateway object's VPN tab.

  Correct Answer: C

• Question 524:

  To clean the system of all events, you should delete the files in which folder(s)?

  A. $RTDIR/distrib and $RTDIR/events_db

  B. $RTDIR/events_db

  C. $FWDIR/distrib_db and $FWDIR/events

  D. $FWDIR/distrib

  Correct Answer: A

• Question 525:

  What is the command to show OSPF adjacencies?

  A. show ospf interface

  B. show ospf summary-address

  C. show running-config

  D. show ip ospf neighbor

  Correct Answer: D

• Question 526:

  WhichSmart Reporterreport type is generated from theSmart ViewMonitor history file?

  A. Custom

  B. Express

  C. Traditional

  D. Standard

  Correct Answer: B

• Question 527:

  Which of the following operating systems support numbered VTI's?

  A. Secure PlatformPro

  B. Solaris

  C. IPSO 4.0 +

  D. Windows Server 2008

  Correct Answer: A

• Question 528:

  Which of the following is NOT aSmart EventPermission Profile type?

  A. Events Database

  B. View

  C. No Access

  D. Read/Write

  Correct Answer: B

• Question 529:

  Which of the following is NOT supported by CoreXL?

  A. Smart ViewTracker

  B. Route-based VPN

  C. IPS

  D. IPV4

  Correct Answer: B

• Question 530:

  At what router prompt would you save your OSPF configuration?

  A. localhost.localdomain(config)#

  B. localhost.localdomain(config-if)#

  C. localhost.localdomain#

  D. localhost.localdomain(config-router-ospf)#

  Correct Answer: C