CheckPoint 156-315.77 Online Practice Questions and Exam Preparation

CheckPoint 156-315.77 Online Questions & Answers

• Question 631:

  When definingSmart Directoryfor High Availability (HA), which of the following should you do?

  A. Replicate the same information on multiple Active Directory servers.
  B. Configure Secure Internal Communications with each server and fetch branches from each.
  C. Configure aSmart DirectoryCluster object.
  D. Configure theSmart Directoryas a single object using the LDAP cluster IP. Actual HA functionality is configured on the servers.
  A. Replicate the same information on multiple Active Directory servers.

• Question 632:

  You want to upgrade a cluster with two members to VPN-1 NGX. TheSmart CenterServer and both members are version VPN-1/Firewall-1 NG FP3, with the latest Hotfix. What is the correct upgrade procedure?

  1.

  Change the version, in the General Properties of the gateway-cluster object.

  2.

  Upgrade theSmart CenterServer, and reboot after upgrade.

  3.

  Run cpstop on one member, while leaving the other member running. Upgrade one member at a time, and reboot after upgrade.

  4.

  Reinstall the Security Policy.

  A. 3, 2, 1, 4
  B. 2, 4, 3, 1
  C. 1, 3, 2, 4
  D. 2, 3, 1, 4
  E. 1, 2, 3, 4
  D. 2, 3, 1, 4

• Question 633:

  While authorization for users managed bySmart Directoryis performed by the gateway, the authentication is mostly performed by the infrastructure in which of the following?

  A. ldapd
  B. cpauth
  C. cpShared
  D. ldapauth
  B. cpauth

• Question 634:

  Does Check Point recommend generating an upgrade_export on standby SmartCenters?

  A. Yes. This is the only way to get the upgrade_export
  B. No. All Check Point processes are stopped.
  C. No. There is no way to verify the actual configuration.
  D. Yes. All information is available at both SmartCenters.
  C. No. There is no way to verify the actual configuration.

• Question 635:

  What step should you take before running migrate_export?

  A. Install policy and exit SmartDashboard.
  B. Disconnect all GUI clients.
  C. Run a cpstop on the Security Management Server.
  D. Run a cpstop on the Security Gateway.
  B. Disconnect all GUI clients.

• Question 636:

  When upgrading Check Point products in a distributed environment, in which order should you upgrade these components? 1 GUI Client 2 Security Management Server 3 Security Gateway

  A. 3, 2, 1
  B. 1, 2, 3
  C. 3, 1, 2
  D. 2, 3, 1
  D. 2, 3, 1

• Question 637:

  When a failed cluster member recovers, which of the following actions is NOT taken by the recovering member?

  A. It will try to take the policy from one of the other cluster members.
  B. It will not check for any updated policy and load the last installed policy with a warning message indicating that the Security Policy needs to be installed from the Security Management Server.
  C. If the Security Management Server has a newer policy, it will be retrieved, else the local policy will be loaded.
  D. It compares its local policy to the one on the Security Management Server.
  B. It will not check for any updated policy and load the last installed policy with a warning message indicating that the Security Policy needs to be installed from the Security Management Server.

• Question 638:

  Which specific R76GUI would you use to view the length of time a TCP connection was open?

  A. Smart Reporter
  B. Smart ViewMonitor
  C. Smart ViewStatus
  D. Smart ViewTracker
  D. Smart ViewTracker

• Question 639:

  Management Portal should be installed on:

  (i)

  Management Server

  (ii)

  Security Gateway

  (iii)

  Dedicated Server

  A. All are possible solutions
  B. (ii) only
  C. (iii) only
  D. (i) or (ii) only
  D. (i) or (ii) only

• Question 640:

  In a distributed VPN-1 Pro NGX environment, where is the Internal Certificate Authority (ICA) installed?

  A. On the Security Gateway
  B. Certificate Manager Server
  C. On the Policy Server
  D. On the Smart View Monitor
  E. On the primary SmartCenter Server
  E. On the primary SmartCenter Server