CheckPoint Checkpoint Certifications 156-315.77 Questions & Answers

• Question 531:

  Which of the following log files contains information about the negotiation process for encryption?

  A. ike.elg

  B. iked.elg

  C. vpnd.elg

  D. vpn.elg

  Correct Answer: A

• Question 532:

  What is the most common cause for a Quick mode packet 1 failing with the error "No Proposal Chosen" error?

  A. The OS and patch level of one gateway does not match the other.

  B. The previously established Permanent Tunnel has failed.

  C. There is a network connectivity issue.

  D. The encryption strength and hash settings of one peer does not match the other.

  Correct Answer: D

• Question 533:

  Review the Rule Base displayed.

  

  For which rules will the connection templates be generated in SecureXL?

  A. Rule nos. 2 and 5

  B. Rule no. 2 only

  C. All rules except rule no. 3

  D. Rule nos. 2 to 5

  Correct Answer: B

• Question 534:

  If both domain-based and route-based VPN's are configured, which will take precedence?

  A. Must be chosen/configured manually by the Administrator in the Policy > Global Properties

  B. Must be chosen/configured manually by the Administrator in the VPN community object

  C. Domain-based

  D. Route-based

  Correct Answer: C

• Question 535:

  Which of the following platforms does NOT support SecureXL?

  A. Power-1 Appliance

  B. IP Appliance

  C. UTM-1 Appliance

  D. UNIX

  Correct Answer: D

• Question 536:

  Your customer asks you about the Performance Pack. You explain to him that a Performance Pack is a software acceleration product which improves the performance of the Security Gateway. You may enable or disable this acceleration by either:

  1) thecommand:cpconfig

  

  2) the commanD .fwaccel on　ff

  

  What is the difference between these two commands?

  A. The fwaccel command determines the default setting. The command cpconfig can dynamically change the setting, but after the reboot it reverts to the default setting.

  B. Both commands function identically.

  C. The command cpconfig works on the Security Platform only. The command fwaccel can be used on all platforms.

  D. The cpconfig command enables acceleration. The command fwaccel can dynamically change the setting, but after the reboot it reverts to the default setting.

  Correct Answer: D

• Question 537:

  In ClusterXL, _______ is defined by default as a critical device.

  A. fwd

  B. fwm

  C. assld

  D. cpp

  Correct Answer: A

• Question 538:

  When distributing IPSec packets to gateways in a Load Sharing Multicast mode cluster, which valid Load Sharing method will consider VPN information?

  A. Load Sharing based on IP addresses, ports, and serial peripheral interfaces

  B. Load Sharing based on SPIs

  C. Load Sharing based on ports, VTI, and IP addresses

  D. Load Sharing based on IP addresses, ports, and security parameter indexes

  Correct Answer: D

• Question 539:

  To configure the Cluster Control Protocol (CCP) to use Broadcast, the following command is run:

  A. set_ccp cpcluster broadcast

  B. ccp broadcast

  C. clusterconfig set_ccp broadcast

  D. cphaconf set_ccp broadcast

  Correct Answer: D

• Question 540:

  In Management High Availability, what is an Active SMS?

  A. Active Security Master Server

  B. Active Smart Management Server

  C. Active Security Management Server

  D. Active Smart Master Server

  Correct Answer: C