CheckPoint Checkpoint Certifications 156-315.77 Questions & Answers

• Question 571:

  Which of the listed load-balancing methods is NOT valid?

  A. Random

  B. Domain

  C. They are all valid

  D. Round Trip

  Correct Answer: C

• Question 572:

  By default Check Point High Availability components send updates about their state every:

  A. 5 seconds.

  B. 0.5 second.

  C. 0.1 second.

  D. 1 second.

  Correct Answer: C

• Question 573:

  How can you view the virtual cluster interfaces of a Cluster XL environment?

  A. cphaprob -ia if

  B. cphaprob -a if

  C. cphaprob -a list

  D. cphaprob -ia list

  Correct Answer: B

• Question 574:

  What configuration change must you make to change an existing ClusterXL cluster object from Multicast to Unicast mode?

  A. Reset Secure Internal Communications (SIC) on the cluster-member objects. Reinstall the Security Policy.

  B. Run cpstop and cpstart, to re-enable High Availability on both objects. Select Pivot mode in cpconfig.

  C. Change the cluster mode to Unicast on the cluster object. Reinstall the Security Policy.

  D. Change the cluster mode to Unicast on each of the cluster-member objects.

  Correct Answer: C

• Question 575:

  When synchronizing clusters, which of the following statements is NOT true?

  A. User Authentication connections will be lost by the cluster.

  B. An SMTP resource connection using CVP will be maintained by the cluster.

  C. In the case of a failover, accounting information on the failed member may be lost despite a properly working synchronization.

  D. Only cluster members running on the same OS platform can be synchronized.

  Correct Answer: B

• Question 576:

  Included in the customer's network are some firewall systems with the Performance Pack in use. The customer wishes to use these firewall systems in a cluster (Load Sharing mode). He is not sure if he can use the Sticky Decision Function in this cluster. Explain the situation to him.

  A. Sticky Decision Function is not supported when employing either Performance Pack or a hardware-based accelerator card. Enabling the Sticky Decision Function disables these acceleration products.

  B. ClusterXL always supports the Sticky Decision Function in the Load Sharing mode.

  C. The customer can use the firewalls with Performance Pack inside the cluster, which should support the Sticky Decision Function. It is just necessary to enable the Sticky Decision Function in theSmart Dashboardcluster object in the ClusterXL page, Advanced Load Sharing Configuration window.

  D. The customer can use the firewalls with Performance Pack inside the cluster, which should support the Sticky Decision Function. It is just necessary to configure it with the clusterXL_SDF_enable command.

  Correct Answer: A

• Question 577:

  What cluster mode is represented in this case?

  

  A. 3rd party cluster

  B. Load Sharing (multicast mode)

  C. Load Sharing Unicast (Pivot) mode

  D. HA (New mode)

  Correct Answer: B

• Question 578:

  A connection is said to be Sticky when:

  A. The connection information sticks in the connection table even after the connection has ended.

  B. A copy of each packet in the connection sticks in the connection table until a corresponding reply packet is received from the other side.

  C. A connection is not terminated by either side by FIN or RST packet.

  D. All the connection packets are handled, in either direction, by a single cluster member.

  Correct Answer: D

• Question 579:

  After you add new interfaces to a cluster, how can you check if the new interfaces and the associated virtual IP address are recognized by ClusterXL?

  

  A. By running the command cphaprob state on both members

  B. By running the command cpconfig on both members

  C. By running the command cphaprob -I list on both members

  D. By running the command cphaprob -a if on both members

  Correct Answer: D

• Question 580:

  State Synchronization is enabled on both members in a cluster, and the Security Policy is successfully installed. No protocols or services have been unselected for selective sync. Review the fw tab -t connections -s output from both members.

  

  Is State Synchronization working properly between the two members?

  A. Members A and B are not synchronized, because #VALS in the connections table are not close.

  B. Members A and B are not synchronized, because #PEAK for both members is not close in the connections table.

  C. Members A and B are synchronized, because #SLINKS are identical in the connections table.

  D. Members A and B are synchronized, because ID for both members is identical in the connections table.

  Correct Answer: A