CheckPoint Checkpoint Certifications 156-315.77 Questions & Answers

• Question 601:

  Match the Best Management High Availability synchronization-status descriptions for your Security Management Server (SMS):

  

  A. A - 3, B - 1, C - 2, D - 4

  B. A - 3, B - 1, C - 4, D - 2

  C. A - 4, B - 3, C - 1, D - 2

  D. A - 3, B - 2, C - 1, D - 4

  Correct Answer: A

• Question 602:

  You have a High Availability ClusterXL configuration. Machines are not synchronized. What happens to connections on failover?

  A. Connections cannot be established until cluster members are fully synchronized.

  B. It is not possible to configure High Availability that is not synchronized.

  C. Old connections are lost but can be reestablished.

  D. Old connections are lost but are automatically recovered whenever the failed machine recovers.

  Correct Answer: C

• Question 603:

  Which process is responsible for delta synchronization in ClusterXL?

  A. fw kernel on the security gateway

  B. fwd process on the security gateway

  C. cpd process on the security gateway

  D. Clustering process on the security gateway

  Correct Answer: A

• Question 604:

  Which of the following is a supported Sticky Decision Function of Sticky Connections for Load Sharing?

  A. Multi-connection support for VPN-1 cluster members

  B. Support for all VPN deployments (except those with third-party VPN peers)

  C. Support forSecure Client/Secure mote/SSL Network Extender encrypted connections

  D. Support for Performance Pack acceleration

  Correct Answer: C

• Question 605:

  A customer is calling saying one member's status is Down. What will you check?

  A. cphaprob list (verify what critical device is down)

  B. fw ctl pstat (check sync)

  C. fw ctl debug -m cluster + forward (forwarding layer debug)

  D. tcpdump/snoop (CCP traffic)

  Correct Answer: A

• Question 606:

  You want to upgrade a cluster with two members to VPN-1 NGX. TheSmart CenterServer and both members are version VPN-1/Firewall-1 NG FP3, with the latest Hotfix. What is the correct upgrade procedure?

  1.

  Change the version, in the General Properties of the gateway-cluster object.

  2.

  Upgrade theSmart CenterServer, and reboot after upgrade.

  3.

  Run cpstop on one member, while leaving the other member running. Upgrade one member at a time, and reboot after upgrade.

  4.

  Reinstall the Security Policy.

  A. 3, 2, 1, 4

  B. 2, 4, 3, 1

  C. 1, 3, 2, 4

  D. 2, 3, 1, 4

  E. 1, 2, 3, 4

  Correct Answer: D

• Question 607:

  You are preparing computers for a new ClusterXL deployment. For your cluster, you plan to use four machines with the following configurations:

  Cluster Member 1: OS:Secure Platform, NICs: QuadCard, memory: 1 GB, Security Gateway only, version:R76

  Cluster Member 2: OS:Secure Platform, NICs: 4 Intel 3Com, memory: 1 GB, Security Gateway only, version:R76

  Cluster Member 3: OS:Secure Platform, NICs: 4 other manufacturers, memory: 512 MB, Security Gateway only, version:R76

  Security Management Server: MS Windows 2003, NIC. Intel NIC (1), Security Gateway and primary Security Management Server installed, version:R76

  Are these machines correctly configured for a ClusterXL deployment?

  A. No, the Security Gateway cannot be installed on the Security Management Pro Server.

  B. No, Cluster Member 3 does not have the required memory.

  C. Yes, these machines are configured correctly for a ClusterXL deployment.

  D. No, the Security Management Server is not running the same operating system as the cluster members.

  Correct Answer: C

• Question 608:

  What is the behavior of ClusterXL in a High Availability environment?

  A. The active member responds to the virtual address and is the only member that passes traffic.

  B. The active member responds to the virtual address and, using sync network forwarding, both members pass traffic.

  C. Both members respond to the virtual address but only the active member is able to pass traffic.

  D. Both members respond to the virtual address and both members pass traffic.

  Correct Answer: A

• Question 609:

  In ClusterXLR76; when configuring a cluster synchronization network on a VLAN interface what is the supported configuration?

  A. It is supported on VLAN tag 4095

  B. It is supported on VLAN tag 4096

  C. It is supported on the lowest VLAN tag of the VLAN interface

  D. It is not supported on a VLAN tag

  Correct Answer: C

• Question 610:

  Which method of load balancing describes "Round Robin"?

  A. Assigns service requests to the next server in a series.

  B. Assigns service requests to servers at random.

  C. Measures the load on each server to determine which server has the most available resources.

  D. Ensures that incoming requests are handled by the server with the fastest response time.

  Correct Answer: A