CheckPoint Checkpoint Certifications 156-315.77 Questions & Answers

• Question 611:

  In New Mode HA, the internal cluster IP VIP address is 10.4.8.3. An internal host 10.4.8.108 successfully pings its Cluster and receives replies. Review the ARP table from the internal Windows host 10.4.8.108. Based on this information, what is the active cluster member's IP address?

  

  A. The active cluster member's IP address cannot be determined by this ARP cache.

  B. 10.4.8.3

  C. 10.4.8.1

  D. 10.4.8.2

  Correct Answer: D

• Question 612:

  What is the proper command for importing users into theR76User Database?

  A. fwm dbimport

  B. fwm importusrs

  C. fwm import

  D. fwm importdb

  Correct Answer: A

• Question 613:

  How does a cluster member take over the VIP after a failover event?

  A. Broadcast storm

  B. iflist -renew

  C. Ping the sync interface

  D. Gratuitous ARP

  Correct Answer: D

• Question 614:

  Which of the following commands shows full synchronization status?

  A. fw hastat

  B. cphaprob -i list

  C. cphaprob -a if

  D. fw ctl iflist

  Correct Answer: B

• Question 615:

  You are the MegaCorp Security Administrator. This company uses a firewall cluster, consisting of two cluster members. The cluster generally works well but one day you find that the cluster is behaving strangely. You assume that there is a connectivity problem with the cluster synchronization cluster link (cross-over cable). Which of the following commands is the best for testing the connectivity of the crossover cable?

  A. telnet

  B. ifconfig -a

  C. ping

  D. arping

  Correct Answer: D

• Question 616:

  You are establishing a ClusterXL environment, with the following topology:

  

  External interfaces 192.168.10.1 and 192.168.10.2 connect to a VLAN switch. The upstream router connects to the same VLAN switch. Internal interfaces 172.16.10.1 and 172.16.10.2 connect to a hub. 10.10.10.0 is the synchronization network. The Security Management Server is located on the internal network with IP 172.16.10.3. What is the problem with this configuration?

  A. Cluster members cannot use the VLAN switch. They must use hubs.

  B. The Cluster interface names must be identical across all cluster members.

  C. There is an IP address conflict.

  D. The Security Management Server must be in the dedicated synchronization network, not the internal network.

  Correct Answer: C

• Question 617:

  Organizations are sometimes faced with the need to locate cluster members in different geographic locations that are distant from each other. A typical example is replicated data centers whose location is widely separated for disaster recovery purposes. What are the restrictions of this solution?

  A. There are no restrictions.

  B. There is one restriction: The synchronization network must guarantee no more than 150 ms latency (ITU Standard G.114).

  C. There is one restriction: The synchronization network must guarantee no more than 100 ms latency.

  D. There are two restrictions: 1. The synchronization network must guarantee no more than 100ms latency and no more than 5% packet loss. 2. The synchronization network may only include switches and hubs.

  Correct Answer: D

• Question 618:

  Check Point Clustering protocol, works on:

  A. UDP 500

  B. UDP 8116

  C. TCP 8116

  D. TCP 19864

  Correct Answer: B

• Question 619:

  In New Mode HA, the internal cluster IP VIP address is 10.4.8.3. The internal interfaces on two members are 10.4.8.1 and 10.4.8.2. Internal host 10.4.8.108 Pings 10.4.8.3, and receives replies.

  

  Review the ARP table from the internal Windows host 10.4.8.108. According to the output, which member is the standby machine?

  A. 10.4.8.3

  B. The standby machine cannot be determined by this test.

  C. 10.4.8.1

  D. 10.4.8.2

  Correct Answer: C

• Question 620:

  The customer wishes to install a cluster. In his network, there is a switch which is incapable of forwarding multicast. Is it possible to install a cluster in this situation?

  A. Yes, you can toggle on ClusterXL between broadcast and multicast by setting the multicast mode using the command cphaconf set_ccp multicast on　ff. The default setting is broadcast.

  B. Yes, you can toggle on ClusterXL between broadcast and multicast using the command cphaconf set_ccp broadcast/multicast.

  C. No, the customer needs to replace the switch with a new switch, which supports multicast forwarding.

  D. Yes, the ClusterXL changes automatically to the broadcast mode if the multicast is not forwarded.

  Correct Answer: B