CheckPoint Checkpoint Certifications 156-315.77 Questions & Answers

• Question 561:

  When configuring an LDAP Group object, which option should you select if you do NOT want the gateway to reference the groups defined on the LDAP server for authentication purposes?

  A. OU Accept and select appropriate domain

  B. Only Sub Tree

  C. Only Group in Branch

  D. Group Agnostic

  Correct Answer: B

• Question 562:

  In anR76Cluster, some features such as VPN only function properly when:

  A. All cluster members have the same policy

  B. All cluster members have the same Hot Fix Accumulator pack installed

  C. All cluster members' clocks are synchronized

  D. All cluster members have the same number of interfaces configured

  Correct Answer: C

• Question 563:

  You have two IP Appliances: one IP565 and one IP395. Both appliances have IPSO 6.2 andR76installed in a distributed deployment. Can they be members of a Gateway Cluster?

  A. No, because the Security Gateways must be installed in a stand-alone installation.

  B. No, because IP does not have a cluster option.

  C. Yes, as long as they have the same IPSO and Check Point versions.

  D. No, because the appliances must be of the same model (both should be IP565 or IP395).

  Correct Answer: C

• Question 564:

  In the following cluster configuration; if you reboot sglondon_1 which device will be active when sglondon_1 is back up and running? Why?

  A. Sglondon_1, because it is up again, sglondon_2 took over during reboot

  B. Sglondon_2 because I has highest IP

  C. Sglondon_2 because it has highest priority

  D. Sglondon_1 because it the first configured object with the lowest IP

  Correct Answer: C

• Question 565:

  The process that performs the authentication for legacy session authentication is:

  A. cvpnd

  B. fwm

  C. vpnd D. fwssd

  Correct Answer: D

• Question 566:

  What is a "sticky" connection?

  A. A Sticky Connection is one in which a reply packet returns through the same gateway as the original packet.

  B. A Sticky Connection is a VPN connection that remains up until you manually bring it down.

  C. A Sticky Connection is a connection that remains the same.

  D. A Sticky Connection is a connection that always chooses the same gateway to set up the initial connection.

  Correct Answer: A

• Question 567:

  Check Point New Mode HA is a(n) _________ solution.

  A. primary-domain

  B. hot-standby

  C. acceleration

  D. load-balancing

  Correct Answer: B

• Question 568:

  If ClusterXL Load Sharing is enabled with state synchronization enabled, what will happen if one member goes down?

  A. The connections are dropped as Load Sharing does not support High Availability.

  B. The processing of all connections handled by the faulty machine is dropped, so all connections need to be re-established through the other machine(s).

  C. There is no state synchronization on Load Sharing, only on High Availability.

  D. The processing of all connections handled by the faulty machine is immediately taken over by the other member(s).

  Correct Answer: D

• Question 569:

  The process that performs the authentication for SSL VPN Users is:

  A. cvpnd

  B. cpd

  C. fwm

  D. vpnd

  Correct Answer: A

• Question 570:

  When using a template to define aSmart Directory, where should the user's password be defined? In the:

  A. Template object

  B. VPN Community object

  C. User object

  D. LDAP object

  Correct Answer: C