CheckPoint 156-315.77 Online Practice Questions and Exam Preparation

CheckPoint 156-315.77 Online Questions & Answers

• Question 551:

  Smart Provisioningcan provision the Operating System and network settings on which of the following?

  A. IPSO 4.2 Security Gateways
  B. Edge firmware 6.x and above
  C. R65 HFA 40 Security Gateways arid above
  D. NGX Security Appliances
  C. R65 HFA 40 Security Gateways arid above

• Question 552:

  Which Remote Desktop protocols are supported natively in SSL VPN?

  A. Microsoft RDP only
  B. ATandT VNC and Microsoft RDP
  C. Citrix ICA and Microsoft RDP
  D. ATandT VNC, Citrix ICA and Microsoft RDP
  C. Citrix ICA and Microsoft RDP

• Question 553:

  To force clients to use Integrity Secure Workspace when accessing sensitive applications, the Administrator can configure Connectra:

  A. Via protection levels
  B. To implement Integrity Clientless Security
  C. To force the user to re-authenticate at login
  D. Without a special setting. Secure Workspace is automatically configured.
  A. Via protection levels

• Question 554:

  A customer calls saying that a Load Sharing cluster shows drops with the error First packet is not SYN. Complete the following sentence. I will recommend:

  A. turning on SDF (Sticky Decision Function)
  B. turning off SDF (Sticky Decision Function)
  C. changing the load on each member
  D. configuring flush and ack
  A. turning on SDF (Sticky Decision Function)

• Question 555:

  After Travis added new processing cores on his server, CoreXL did not use them. What would be the most plausible reason why? Travis did not:

  A. Edit the Gateway Properties and increase the kernel instances.
  B. Run cpconfig to increase the number of CPU cores.
  C. Edit the Gateway Properties and increase the number of CPU cores.
  D. Run cpconfig to increase the kernel instances.
  D. Run cpconfig to increase the kernel instances.

• Question 556:

  What are you required to do before runningupgrade export?

  A. Run a cpstop on the Security Gateway.
  B. Run cpconfig and set yourself up as a GUI client.
  C. Run a cpstop on the Security Management Server.
  D. Close all GUI clients.
  D. Close all GUI clients.

• Question 557:

  You are running R71 and using the new IPS Software Blade. To maintain the highest level of security, you are doing IPS updates regularly. What kind of problems can be caused by the automatic updates?

  A. None; updates will not add any new security checks causing problematicbehavioron the systems.
  B. None, all new updates will be implemented in Detect only mode to avoid unwanted traffic interruptions. They have to be activated manually later.
  C. None, all the checks will be activated from the beginning, but will only detect attacks and not disturb any non-malicious traffic in the network.
  D. All checks will be activated from the beginning and might cause unwanted traffic outage due to false positives of the new checks and non-RFC compliant self-written applications.
  B. None, all new updates will be implemented in Detect only mode to avoid unwanted traffic interruptions. They have to be activated manually later.

• Question 558:

  Where can a Security Administrator adjust the unit of measurement (bps, Kbps or Bps), for Check Point QoS bandwidth?

  A. Global Properties
  B. QoS Class objects
  C. Check Point gateway object properties
  D. $CPDIR/conf/qos_props.pf
  A. Global Properties

• Question 559:

  When configuring a Web Application for SSL VPN remote access, you have given the following definition for the application along with its protection level.

  

  Which of the following is the best match for the above application?

  A. dmz.example.com/extranet
  B. www.dmz.example/extranet
  C. www.example.com/intranet
  D. hr.dmz.example.com/intranet
  C. www.example.com/intranet

• Question 560:

  Which of the following is the default port for Management Portal?

  A. 4434
  B. 443
  C. 444
  D. 4433
  D. 4433