CheckPoint Checkpoint Certifications 156-315.77 Questions & Answers

• Question 551:

  When configuring an LDAP Group object, which option should you select if you want the gateway to reference the groups defined on the LDAP server for authentication purposes?

  A. All Account-Unit's Users

  B. Only Group in Branch

  C. Group Agnostic

  D. OU Accept and select appropriate domain

  Correct Answer: B

• Question 552:

  When a failed cluster member recovers, which of the following actions is NOT taken by the recovering member?

  A. It will try to take the policy from one of the other cluster members.

  B. It will not check for any updated policy and load the last installed policy with a warning message indicating that the Security Policy needs to be installed from the Security Management Server.

  C. If the Security Management Server has a newer policy, it will be retrieved, else the local policy will be loaded.

  D. It compares its local policy to the one on the Security Management Server.

  Correct Answer: B

• Question 553:

  Which process is responsible for kernel table information sharing across all cluster members?

  A. fwd daemon using an encrypted TCP connection

  B. CPHA using an encrypted TCP connection

  C. fw kernel using an encrypted TCP connection

  D. cpd using an encrypted TCP connection

  Correct Answer: A

• Question 554:

  If you are experiencing LDAP issues, which of the following should you check?

  A. Secure Internal Communications (SIC)

  B. Domain name resolution

  C. Overlapping VPN Domains

  D. Connectivity between theR76Gateway and LDAP server

  Correct Answer: D

• Question 555:

  Which of the following is a valid Active Directory designation for user Jane Doe in the MIS department of AcmeCorp.com?

  A. Cn= jane_doe,ou=MIS,DC=acmecorp,dc=com

  B. Cn= jane_doe,ou=MIS,cn=acmecorp,dc=com

  C. Cn=jane_doe,ou=MIS,dc=acmecorp,dc=com

  D. Cn= jane_doe,ou=MIS,cn=acme,cn=corp,dc=com

  Correct Answer: C

• Question 556:

  What command will allow you to disable sync on a cluster firewall member?

  A. fw ctl syncstat stop

  B. fw ctl setsync off

  C. fw ctl setsync 0

  D. fw ctl syncstat off

  Correct Answer: B

• Question 557:

  In aR76Management High Availability (HA) configuration, you can configure synchronization to occur automatically, when:

  1.

  The Security Policy is installed.

  2.

  The Security Policy is saved.

  3.

  The Security Administrator logs in to the secondarySmart CenterServer, and changes its status to active.

  4.

  A scheduled event occurs.

  5.

  The user database is installed.

  Select the BEST response for the synchronization trigger.

  A. 1, 2, 4

  B. 1, 2, 3, 4

  C. 1, 2, 5

  D. 1, 3, 4

  Correct Answer: A

• Question 558:

  For Management High Availability synchronization, what does the Advance status mean?

  A. The peer SMS has not been synchronized properly.

  B. The peer SMS is properly synchronized.

  C. The active SMS and its peer have different installed policies and databases.

  D. The peer SMS is more up-to-date.

  Correct Answer: D

• Question 559:

  What cluster mode is represented in this case?

  

  A. Load Sharing (multicast mode)

  B. HA (New mode).

  C. 3rd party cluster

  D. Load Sharing Unicast (Pivot) mode

  Correct Answer: B

• Question 560:

  In ClusterXL, _______ is defined by default as a critical device.

  A. fw.d

  B. protect.exe

  C. PROT_SRV.EXE

  D. Filter

  Correct Answer: D