CheckPoint 156-315.77 Online Practice Questions and Exam Preparation

CheckPoint 156-315.77 Online Questions & Answers

• Question 541:

  A Security Administrator opens a new session, makes changes to the policy and submits the session for approval. The Security Manager may approve the session or request repair. If a manager opens a new session and submits it for approval, can he approve his session as a Security Manager?

  A. It depends on theSmart Workflowsettings in Global Properties.
  B. Yes, he can always approve his own session.
  C. No, he can never approve his own session.
  D. It depends on the type of changes made in the session.
  A. It depends on theSmart Workflowsettings in Global Properties.

• Question 542:

  In New Mode HA, the internal cluster IP VIP address is 10.4.8.3. The internal interfaces on two members are 10.4.8.1 and 10.4.8.2. Internal host 10.4.8.108 Pings 10.4.8.3, and receives replies.

  

  Review the ARP table from the internal Windows host 10.4.8.108. According to the output, which member is the standby machine?

  A. 10.4.8.3
  B. The standby machine cannot be determined by this test.
  C. 10.4.8.1
  D. 10.4.8.2
  C. 10.4.8.1

• Question 543:

  Which of the following actions is most likely to improve the performance of Check Point QoS?

  A. Put the most frequently used rules at the bottom of the QoS Rule Base.
  B. Define Check Point QoS only on the external interfaces of the QoS Module.
  C. Turn per rule limits into per connection limits
  D. Turn per rule guarantees into per connection guarantees.
  B. Define Check Point QoS only on the external interfaces of the QoS Module.

• Question 544:

  What is the command to upgrade a SecurePlatform NG with Application Intelligence (Al) R55 SmartCenter Server to VPN-1 NGX using a CD?

  A. cd patch add
  B. fwm upgrade_tool
  C. cppkg add
  D. patch add
  E. patch add cd
  E. patch add cd

• Question 545:

  In cryptography, the Rivest, Shamir, Adelman (RSA) scheme has which of the following? Select all that apply.

  A. A symmetric-cipher system
  B. A secret-key encryption-algorithm system
  C. A public-key encryption-algorithm system
  D. An asymmetric-cipher system
  C. A public-key encryption-algorithm system
  D. An asymmetric-cipher system

• Question 546:

  The following graphic illustrates which command being issued on SecurePlatform?

  A. The administrator will have to open the old session and make the changes, no note is added automatically, however, the manager adds his notes stating the changes required.
  B. The same session is modified with a note automatically added stating under repair.
  C. The old status is removed and a new session is created with the same name, but with a note stating new session after repair.
  D. A new session is created by the name Repairing Session and the old session status is updated to Repaired with a note stating Repaired by Session < new id>
  D. A new session is created by the name Repairing Session and the old session status is updated to Repaired with a note stating Repaired by Session < new id>

• Question 547:

  When synchronizing clusters, which of the following statements is NOT true?

  A. User Authentication connections will be lost by the cluster.
  B. An SMTP resource connection using CVP will be maintained by the cluster.
  C. In the case of a failover, accounting information on the failed member may be lost despite a properly working synchronization.
  D. Only cluster members running on the same OS platform can be synchronized.
  B. An SMTP resource connection using CVP will be maintained by the cluster.

• Question 548:

  If ClusterXL Load Sharing is enabled with state synchronization enabled, what will happen if one member goes down?

  A. The connections are dropped as Load Sharing does not support High Availability.
  B. The processing of all connections handled by the faulty machine is dropped, so all connections need to be re-established through the other machine(s).
  C. There is no state synchronization on Load Sharing, only on High Availability.
  D. The processing of all connections handled by the faulty machine is immediately taken over by the other member(s).
  D. The processing of all connections handled by the faulty machine is immediately taken over by the other member(s).

• Question 549:

  TheSmart Provisioningmanagement concept is based on: A. Zones

  B. Groups
  C. Regions
  D. Profiles
  D. Profiles

• Question 550:

  Can end users be forced to authenticate by using client certificates and username/password credentials?

  A. Yes, but by manually changing the parameter :IsPasswordWarning to true in the $FWDIR/conf/objects_5_0.C file, to allow for LDAP password remediation; and through the use of multiple-challenge login pages.
  B. No, R71 only supports authentication by client certificates.
  C. Yes, by editing the protection-level settings.
  D. SSL VPN only supports server certificates.
  C. Yes, by editing the protection-level settings.