CheckPoint 156-315.77 Online Practice Questions and Exam Preparation

CheckPoint 156-315.77 Online Questions & Answers

• Question 571:

  Fill in the blank with a numeric value. The default port number for standard TCP connections with the LDAP server is

  A. 389
  A. 389

• Question 572:

  You have pushed a policy to your firewall and you are not able to access the firewall. What command will allow you to remove the current policy from the machine?

  A. fw purge active
  B. fw purge policy
  C. fw fetch policy
  D. fw unloadlocal
  B. fw purge policy

• Question 573:

  When you add a resource service to a rule, which ONE of the following actions occur?

  A. VPN-1 Secure Client users attempting to connect to the object defined in the Destination column of the rule will receive a new Desktop Policy from the resource.
  B. All packets that match the resource in the rule will be dropped.
  C. All packets matching the resource service rule are analyzed or authenticated, based on the resource properties.
  D. Users attempting to connect to the destination of the rule will be required to authenticate.
  E. All packets matching that rule are either encrypted or decrypted by the defined resource.
  C. All packets matching the resource service rule are analyzed or authenticated, based on the resource properties.

• Question 574:

  Rachel is the Security Administrator for a university. The university's FTP servers have old hardware and software. Certain FTP commands cause the FTP servers to malfunction. Upgrading the FTP servers is not an option at this time. Which of the following options will allow Rachel to control which FTP commands pass through the Security Gateway protecting the FTP servers?

  A. Global Properties > Security Server > Allowed FTP Commands
  B. SmartDefense > Application Intelligence > FTP Security Server
  C. Rule Base > Action Field > Properties
  D. Web Intelligence > Application Layer > FTP Settings
  E. FTP Service Object > Advanced > Blocked FTP Commands
  B. SmartDefense > Application Intelligence > FTP Security Server

• Question 575:

  Which of the following is TRUE concerning unnumbered VPN Tunnel Interfaces (VTIs)?

  A. Local IP addresses are not configured, remote IP addresses are configured
  B. VTI specific additional local and remote IP addresses are not configured
  C. VTIs are only supported onSecure Platform
  D. VTIs cannot be assigned a proxy interface
  B. VTI specific additional local and remote IP addresses are not configured

• Question 576:

  Can you implement a complete IPv6 deployment without IPv4 addresses?

  A. No. IPv4 addresses are required for management.
  B. No. SmartCenter cannot be accessed from everywhere on the Internet.
  C. Yes, There is no requirement for managing IPv4 addresses.
  D. Yes. Only one TCP stack (IPv6 or IPv4) can be used at the same time.
  C. Yes, There is no requirement for managing IPv4 addresses.

• Question 577:

  When upgrading to NGX R65, which Check Point products do not require a license upgrade to be current?

  A. VPN-1 NGX (R64) and later
  B. VPN-1 NGX (R60) and later
  C. VPN-1 NG with Application Intelligence (R54) and later
  D. None, all versions require a license upgrade
  B. VPN-1 NGX (R60) and later

• Question 578:

  What is the purpose of the pre-defined exclusions included with SmartEvent R71?

  A. To give samples of how to write your own exclusion.
  B. To avoid incorrect event generation by the default IPS event definition; a scenario that may occur in deployments that include Security Gateways of versions prior to R71.
  C. To allow SmartEvent R71 to function properly with all other R71 release devices.
  D. As a base for starting and building exclusions.
  B. To avoid incorrect event generation by the default IPS event definition; a scenario that may occur in deployments that include Security Gateways of versions prior to R71.

• Question 579:

  Which specificR76GUI would you use to view the length of time a TCP connection was open?

  A. Smart ViewTracker
  B. Smart ViewStatus
  C. Smart Reporter
  D. Smart ViewMonitor
  A. Smart ViewTracker

• Question 580:

  Your primary Security Management Server runs onGAiA. What is the easiest way to back up your Security Gateway R76configuration, including routing and network configuration files?

  A. Using the nativeGAiAbackuputility from command line or in the Web-based user interface.
  B. Using the commandupgrade export.
  C. Run the command pre_upgrade verifierand save the file *.tgz to the directory c:/temp.
  D. Copying the directories $FWDIR/conf and $FWDIR/lib to another location.
  A. Using the nativeGAiAbackuputility from command line or in the Web-based user interface.