CheckPoint Checkpoint Certifications 156-315.77 Questions & Answers

• Question 541:

  In Load Sharing Unicast mode, the internal cluster IP address is 10.4.8.3. The internal interfaces on two members are 10.4.8.1 and 10.4.8.2. Internal host 10.4.8.108 Pings 10.4.8.3, and receives replies. The following is the ARP table from the internal Windows host 10.4.8.108.

  

  Review the exhibit and identify the member serving as the pivot machine.

  A. 10.4.8.3

  B. 10.4.8.2

  C. The pivot machine cannot be determined by this test.

  D. 10.4.8.1

  Correct Answer: B

• Question 542:

  John is configuring a new R76Gateway cluster but he can not configure the cluster as Third Party IP Clustering because this option is not available in Gateway Cluster Properties.

  

  What's happening?

  A. Third Party Clustering is not available for R76Security Gateways.

  B. John is not using third party hardware as IP Clustering is part of Check Point's IP Appliance.

  C. ClusterXL needs to be unselected to permit 3rd party clustering configuration.

  D. John has an invalid ClusterXL license.

  Correct Answer: C

• Question 543:

  What is the reason for the following error?

  

  A. A third-party cluster solution is implemented.

  B. Cluster membership is not enabled on the gateway.

  C. Objects.C does not contain a cluster object.

  D. Device Name contains non-ASCII characters.

  Correct Answer: B

• Question 544:

  Review the cphaprob state command output from a New Mode High Availability cluster member.

  

  Which machine has the highest priority?

  A. 192.168.1.2, because its state is active

  B. 192.168.1.1, because its number is 1

  C. 192.168.1.1, because it is

  D. This output does not indicate which machine has the highest priority.

  Correct Answer: B

• Question 545:

  When using ClusterXL in Load Sharing, what is the default method?

  A. IPs, Ports, SPIs

  B. IPs

  C. IPs, Ports

  D. IPs, SPIs

  Correct Answer: A

• Question 546:

  You have just upgraded your Load Sharing gateway cluster (both members) from NGX R65 toR76. cphaprob stat shows:

  

  Which of the following is not a possible cause of this?

  A. You have a different number of cores defined for CoreXL between the two members

  B. Member 1 has CoreXL disabled and member 2 does not

  C. Member 1 is at a lower version than member 2

  D. You have not run cpconfig on member 2 yet.

  Correct Answer: D

• Question 547:

  While authorization for users managed bySmart Directoryis performed by the gateway, the authentication is mostly performed by the infrastructure in which of the following?

  A. ldapd

  B. cpauth

  C. cpShared

  D. ldapauth

  Correct Answer: B

• Question 548:

  You are preparing computers for a new ClusterXL deployment. For your cluster, you plan to use three machines with the following configurations:

  

  Are these machines correctly configured for a ClusterXL deployment?

  A. No, the Security Gateway cannot be installed on the Security Management Server.

  B. No, the Security Management Server is not running the same operating system as the cluster members.

  C. Yes, these machines are configured correctly for a ClusterXL deployment.

  D. No, Cluster Member 3 does not have the required memory.

  Correct Answer: A

• Question 549:

  __________ is a proprietary Check Point protocol. It is the basis for Check Point ClusterXL inter-module communication.

  A. HA OPCODE

  B. RDP

  C. CKPP

  D. CCP

  Correct Answer: D

• Question 550:

  Which of the following commands shows full synchronization status?

  A. cphaprob -a if

  B. fw ctl iflist

  C. fw hastat

  D. fw ctl pstat

  Correct Answer: D