CheckPoint 156-315.77 Online Practice Questions and Exam Preparation

CheckPoint 156-315.77 Online Questions & Answers

• Question 641:

  At what router prompt would you save your OSPF configuration?

  A. localhost.localdomain(config)#
  B. localhost.localdomain(config-if)#
  C. localhost.localdomain#
  D. localhost.localdomain(config-router-ospf)#
  C. localhost.localdomain#

• Question 642:

  When configuring a Permanent Tunnel between two gateways in a Meshed VPN community, in what object is the tunnel managed?

  A. VPN Community object
  B. Each participating Security Gateway object
  C. Security Management Server
  D. Only the local Security Gateway object
  A. VPN Community object

• Question 643:

  In New Mode HA, the internal cluster IP VIP address is 10.4.8.3. An internal host 10.4.8.108 successfully pings its Cluster and receives replies. Review the ARP table from the internal Windows host 10.4.8.108. Based on this information, what is the active cluster member's IP address?

  

  A. The active cluster member's IP address cannot be determined by this ARP cache.
  B. 10.4.8.3
  C. 10.4.8.1
  D. 10.4.8.2
  D. 10.4.8.2

• Question 644:

  Remote clients are using SSL VPN to authenticate via LDAP server to connect to the organization. Which gateway process is responsible for the authentication?

  A. vpnd
  B. cpvpnd
  C. fwm
  D. fwd
  B. cpvpnd

• Question 645:

  Which encryption scheme provides in-place encryption?

  A. DES
  B. SKIP
  C. AES
  D. IKE
  B. SKIP

• Question 646:

  What is the purpose of the pre-defined exclusions included withSmart EventR76?

  A. To avoid incorrect event generation by the default IPS event definition; a scenario that may occur in deployments that include Security Gateways of versions prior to R71.
  B. To allowSmart EventR76to function properly with all other R71 devices.
  C. To give samples of how to write your own exclusion.
  D. As a base for starting and building exclusions.
  A. To avoid incorrect event generation by the default IPS event definition; a scenario that may occur in deployments that include Security Gateways of versions prior to R71.

• Question 647:

  MultiCorp has bought company OmniCorp and now has two active AD domains. How would you deploy Identity Awareness in this environment?

  A. You must run an ADquery for every domain.
  B. Identity Awareness can only manage one AD domain.
  C. Only one ADquery is necessary to ask for all domains.
  D. Only Captive Portal can be used.
  A. You must run an ADquery for every domain.

• Question 648:

  Which of the following is NOT a feature of ClusterXL?

  A. Enhanced throughput in all ClusterXL modes (2 gateway cluster compared with 1 gateway)
  B. Transparent failover in case of device failures
  C. Zero downtime for mission-critical environments with State Synchronization
  D. Transparent upgrades
  C. Zero downtime for mission-critical environments with State Synchronization

• Question 649:

  What is the command to upgrade an NG with Application Intelligence R55Smart Centerrunning onSecure Platformto VPN-1 NGX R65?

  A. fw install_mgmt
  B. upgrade_mgmt
  C. patch add cd
  D. fwm upgrade_tool
  C. patch add cd

• Question 650:

  Due to some recent performance issues, you are asked to add additional processors to your firewall. If you already have CoreXL enabled, how are you able to increase Kernel instances?

  A. Once CoreXL is installed you cannot enable additional Kernel instances without reinstallingR76.
  B. InSmart Update, right-click on Firewall Object and choose Add Kernel Instances.
  C. Use cpconfig to reconfigure CoreXL.
  D. Kernel instances are automatically added after process installed and no additional configuration is needed.
  C. Use cpconfig to reconfigure CoreXL.