CheckPoint Checkpoint Certifications 156-315.77 Questions & Answers

• Question 621:

  The process that performs the authentication forSmart Dashboardis:

  A. fwm

  B. vpnd

  C. cvpnd

  D. cpd

  Correct Answer: A

• Question 622:

  When configuring an LDAP Group object, which option should you select if you want the gateway to reference the groups defined on the LDAP server for authentication purposes?

  A. Only Group in Branch

  B. Only Sub Tree

  C. OU Auth and select Group Name

  D. All Account-Unit's Users

  Correct Answer: A

• Question 623:

  When synchronizing clusters, which of the following statements is NOT true?

  A. The state of connections using resources is maintained by a Security Server, so these connections cannot be synchronized.

  B. In the case of a failover, accounting information on the failed member may be lost despite a properly working synchronization.

  C. Only cluster members running on the same OS platform can be synchronized.

  D. Client Authentication or Session Authentication connections through a cluster member will be lost if the cluster member fails.

  Correct Answer: D

• Question 624:

  Refer to Exhibit below:

  

  Match the ClusterXL modes with their configurations.

  A. A - 3, B - 2, C - 4, D - 1

  B. A - 2, B - 3, C - 1, D - 4

  C. A - 2, B - 3, C - 4, D - 1

  D. A - 3, B - 2, C - 1, D - 4

  Correct Answer: D

• Question 625:

  Which of the following does NOT happen when using Pivot Mode in ClusterXL?

  A. The Security Gateway analyzes the packet and forwards it to the Pivot.

  B. The packet is forwarded through the same physical interface from which it originally came, not on the sync interface.

  C. The Pivot's Load Sharing decision function decides which cluster member should handle the packet.

  D. The Pivot forwards the packet to the appropriate cluster member.

  Correct Answer: A

• Question 626:

  Which of the following is a valid Active Directory designation for user John Doe in the Sales department of AcmeCorp.com?

  A. Cn=john_doe,ou=Sales,ou=acmecorp,dc=com

  B. Cn=john_doe,ou=Sales,ou=acme,ou=corp,dc=com

  C. Cn=john_doe,dc=Sales,dc=acmecorp,dc=com

  D. Cn=john_doe,ou=Sales,dc=acmecorp,dc=com

  Correct Answer: D

• Question 627:

  Which utility or command is useful for debugging by capturing packet information, including verifying LDAP authentication?

  A. fw monitor

  B. ping

  C. um_core enable

  D. fw debug fwm

  Correct Answer: A

• Question 628:

  The ________ Check Point ClusterXL mode must synchronize the physical interface IP and MAC addresses on all clustered interfaces.

  A. New Mode HA

  B. Pivot Mode Load Sharing

  C. Multicast Mode Load Sharing

  D. Legacy Mode HA

  Correct Answer: D

• Question 629:

  A customer calls saying that a Load Sharing cluster shows drops with the error First packet is not SYN. Complete the following sentence. I will recommend:

  A. turning on SDF (Sticky Decision Function)

  B. turning off SDF (Sticky Decision Function)

  C. changing the load on each member

  D. configuring flush and ack

  Correct Answer: A

• Question 630:

  You find that Gateway fw2 can NOT be added to the cluster object. What are possible reasons for that?

  

  A. (i) or (ii)

  B. (ii) or (iii)

  C. (i) or (iii)

  D. All

  Correct Answer: C