CheckPoint Checkpoint Certifications 156-315.77 Questions & Answers

• Question 591:

  You can NOT useSmart Dashboard'sSmart Directoryfeatures to connect to the LDAP server. What should you investigate?

  1.

  Verify you have read-only permissions as administrator for the operating system.

  2.

  Verify there are no restrictions blockingSmart Dashboard'sUser Manager from connecting to the LDAP server.

  3.

  Check that the Login Distinguished Name configured has root (Administrator) permission (or at least write permission) in the access control configuration of the LDAP server.

  A. 1 and 3

  B. 2 and 3

  C. 1 and 2

  D. 1, 2, and 3

  Correct Answer: B

• Question 592:

  When Load Sharing Multicast mode is defined in a ClusterXL cluster object, how are packets being handled by cluster members?

  A. All members receive all packets. The Security Management Server decides which member will process the packets. Other members delete the packets from memory.

  B. All cluster members process all packets and members synchronize with each other.

  C. All members receive all packets. All members run an algorithm which determines which member processes packets further and which members delete the packet from memory.

  D. Only one member at a time is active. The active cluster member processes all packets.

  Correct Answer: C

• Question 593:

  When an Endpoint user is able to authenticate but receives a message from the client that it is unable to enforce the desktop policy, what is the most likely scenario?

  A. The user's rights prevent access to the protected network.

  B. A Desktop Policy is not configured.

  C. The gateway could not locate the user inSmart Directoryand is allowing the connection with limitations based on a generic profile.

  D. The user is attempting to connect with the wrong Endpoint client.

  Correct Answer: D

• Question 594:

  In a R76ClusterXL Load Sharing configuration, which type of ARP related problem can force the use of Unicast Mode (Pivot) configuration due to incompatibility on some adjacent routers and switches?

  A. Multicast MAC address response to a Unicast IP request

  B. Unicast MAC address response to a Multicast IP request

  C. Multicast MAC address response to a RARP request

  D. MGCP MAC address response to a Multicast IP request

  Correct Answer: A

• Question 595:

  How do new connections get established through a Security Gateway with SecureXL enabled?

  A. New connections are always inspected by the firewall and if they are accepted, the subsequent packets of the same connection will be passed through SecureXL

  B. The new connection will be first inspected by SecureXL and if it does not match the drop table of SecureXL, then it will be passed to the firewall module for a rule match.

  C. New connection packets never reach the SecureXL module.

  D. If the connection matches a connection or drop template in SecureXL, it will either be established or dropped without performing a rule match, else it will be passed to the firewall module for a rule match.

  Correct Answer: D

• Question 596:

  What is a requirement for setting upR76Management High Availability?

  A. All Security Management Servers must have the same number of NICs.

  B. All Security Management Servers must have the same operating system.

  C. State synchronization must be enabled on the secondary Security Management Server.

  D. All Security Management Servers must reside in the same LAN.

  Correct Answer: B

• Question 597:

  What could be a reason why synchronization between primary and secondary Security Management Servers does not occur?

  A. You did not activate synchronization within Global Properties.

  B. You are using different time zones.

  C. You have installed both Security Management Servers on different server systems (e. g. one machine on HP hardware and the other one on DELL).

  D. If the set of installed products differ from each other, the Security Management Servers do not synchronize the database to each other.

  Correct Answer: D

• Question 598:

  By default, a standby Security Management Server is automatically synchronized by an active Security Management Server, when:

  A. The user data base is installed.

  B. The standby Security Management Server starts for the first time.

  C. The Security Policy is installed.

  D. The Security Policy is saved.

  Correct Answer: C

• Question 599:

  For Management High Availability, if an Active SMS goes down, does the Standby SMS automatically take over?

  A. Yes, if you set up ClusterXL

  B. Yes, if you set up SecureXL

  C. No, the transition should be initiated manually

  D. Yes, if you set up VRRP

  Correct Answer: C

• Question 600:

  Which of the following commands can be used to troubleshoot ClusterXL sync issues?

  A. fw debug cxl connections > file_name

  B. fw tab -s -t connections > file_name

  C. fw tab -u connections > file_name

  D. fw ctl -s -t connections > file_name

  Correct Answer: B