CheckPoint 156-315.77 Online Practice Questions and Exam Preparation

CheckPoint 156-315.77 Online Questions & Answers

• Question 611:

  How is theSmart WorkflowSession Information Pane enabled?

  A. InSmart ViewTracker, click onSmart Workflow> Show Session Information Pane
  B. InSmart Dashboard, click on View > Smart Workflow > Show Session Information Pane
  C. InSmart Dashboard, click onSmart Workflow> Show Session Information Pane
  D. In cpconfig, choose Enable Session Information Pane from the menu
  C. InSmart Dashboard, click onSmart Workflow> Show Session Information Pane

• Question 612:

  Type the command and syntax that you would use to view the virtual cluster interfaces of a ClusterXL environment.

  A. cphaprob -a if
  A. cphaprob -a if

• Question 613:

  Which statement is TRUE for route-based VPN's?

  A. IP Pool NAT must be configured on each Gateway.
  B. Dynamic-routing protocols are not required.
  C. Route-based VPN's are a form of partial overlap VPN Domain.
  D. Route-based VPN's replace domain-based VPN's.
  B. Dynamic-routing protocols are not required.

• Question 614:

  What is the primary benefit of usingupgrade exportover either backup or snapshot?

  A. The commands backup and snapshot can take a long time to run whereasupgrade exportwill take a much shorter amount of time.
  B. upgrade exportwill back up routing tables, hosts files, and manual ARP configurations, where backup and snapshot will not.
  C. upgrade exporthas an option to backup the system andSmart ViewTracker logs while backup and snapshot will not.
  D. upgrade exportis operating system independent and can be used when backup or snapshot is not available.
  D. upgrade exportis operating system independent and can be used when backup or snapshot is not available.

• Question 615:

  Which of the following log files contains verbose information regarding the negotiation process and other encryption failures?

  A. iked.elg
  B. ike.elg
  C. vpn.elg
  D. vpnd.elg
  D. vpnd.elg

• Question 616:

  You have installedSecure PlatformR76as Security Gateway operating system. As company requirements changed, you need the VTI features ofR76. What should you do?

  A. Only IPSO 3.9 supports VTI feature, so you have to replace your Security Gateway with Nokia appliances.
  B. InSmart Dashboardclick on the OS drop down menu and chooseSecure PlatformPro. You have to reboot the Security Gateway in order for the change to take effect.
  C. Type pro enable on your Security Gateway and reboot it.
  D. You have to re-install your Security Gateway withSecure PlatformProR76, asSecure PlatformR76does not support VTIs.
  C. Type pro enable on your Security Gateway and reboot it.

• Question 617:

  In the following cluster configuration; if you reboot sglondon_1 which device will be active when sglondon_1 is back up and running? Why?

  A. Sglondon_1, because it is up again, sglondon_2 took over during reboot
  B. Sglondon_2 because I has highest IP
  C. Sglondon_2 because it has highest priority
  D. Sglondon_1 because it the first configured object with the lowest IP
  C. Sglondon_2 because it has highest priority

• Question 618:

  Each entry inSmart Directoryhas a unique _______________ ?

  A. Distinguished Name
  B. Organizational Unit
  C. Port Number Association
  D. Schema
  A. Distinguished Name

• Question 619:

  State Synchronization is enabled on both members in a cluster, and the Security Policy is successfully installed. No protocols or services have been unselected for selective sync. Review the fw tab -t connections -s output from both members.

  

  Is State Synchronization working properly between the two members?

  A. Members A and B are not synchronized, because #VALS in the connections table are not close.
  B. Members A and B are not synchronized, because #PEAK for both members is not close in the connections table.
  C. Members A and B are synchronized, because #SLINKS are identical in the connections table.
  D. Members A and B are synchronized, because ID for both members is identical in the connections table.
  A. Members A and B are not synchronized, because #VALS in the connections table are not close.

• Question 620:

  When troubleshooting user authentication, you may see the following entries in a debug of the user authentication process. In which order are these messages likely to appear?

  A. make_au, au_auth, au_fetchuser, au_auth_auth, cpLdapCheck, cpLdapGetUser
  B. cpLdapGetUser, au_fetchuser, cpLdapCheck, make_au, au_auth, au_auth_auth
  C. make_au, au_auth, au_fetchuser, cpLdapGetUser, cpLdapCheck, au_auth_auth
  D. au_fetchuser, make_au, au_auth, cpLdapGetUser, au_auth_auth, cpLdapCheck
  C. make_au, au_auth, au_fetchuser, cpLdapGetUser, cpLdapCheck, au_auth_auth