CheckPoint 156-315.77 Online Practice Questions and Exam Preparation

CheckPoint 156-315.77 Online Questions & Answers

• Question 651:

  How does ClusterXL Unicast mode handle new traffic?

  A. All members receive all packets. The Security Management Server decides which member will process the packets. Other members delete the packets from memory.
  B. The pivot machine receives and inspects all new packets then synchronizes the connections with other members
  C. The pivot machine receives all the packets and runs an algorithm to determine which member should process the packets
  D. All cluster members' process all packets and members synchronize with each other. The pivot is responsible for the master sync catalog
  C. The pivot machine receives all the packets and runs an algorithm to determine which member should process the packets

• Question 652:

  Your current VPN-1 NG with Application Intelligence (AI) R55 stand-alone VPN-1 Pro Gateway and SmartCenter Server runs on SecurePlatform. You plan to implement VPN-1 NGX R65 in a distributed environment, where the new machine will be the SmartCenter Server, and the existing machine will be the VPN-1 Pro Gateway only. You need to migrate the NG with AI R55 SmartCenter Server configuration, including licensing.

  How do you handle licensing for this NGX R65 upgrade?

  A. Request an NGX R65 SmartCenter Server license, using the new server's IP address. Request a new central NGX R65 VPN-1 Gateway license also licensed to the new SmartCenter Server's IP address.
  B. Leave the current license on the gateway to be upgraded during the software upgrade. Purchase a new license for the VPN-1 NGX R65 SmartCenter Server.
  C. Request an NGX R65 SmartCenter Server license, using the existing gateway machine's IP address. Request a new local license for the NGX R65 VPN-1 Gateway using the new server's IP address.
  D. Request an NGX R65 SmartCenter Server license, using the new server's IP address. Request a new central NGX R65 VPN-1 Gateway license for the existing gateway server's IP address.
  A. Request an NGX R65 SmartCenter Server license, using the new server's IP address. Request a new central NGX R65 VPN-1 Gateway license also licensed to the new SmartCenter Server's IP address.

• Question 653:

  Which version is the minimum requirement forSmart Provisioning?

  A. R65 HFA 40
  B. R70
  C. R71
  D. R70.20
  A. R65 HFA 40

• Question 654:

  If no flags are defined during a back up on the Security Management Server, where does the system store the *.tgz file?

  A. /var/opt/backups
  B. /var/backups
  C. /var/CPbackup/backups
  D. /var/tmp/backups
  C. /var/CPbackup/backups

• Question 655:

  What is the best method for scheduling backup's on multiple firewalls?

  A. WebUI
  B. SmartProvisioning
  C. Smart Dashboard
  D. SmartUpdate
  B. SmartProvisioning

• Question 656:

  How can you view the critical devices on a cluster member in a Cluster XL environment?

  A. cphaprob -ia list
  B. cphaprob -a if
  C. cphaprob -a list
  D. cphaprob -ia if
  A. cphaprob -ia list

• Question 657:

  A connection is said to be Sticky when:

  A. The connection information sticks in the connection table even after the connection has ended.
  B. A copy of each packet in the connection sticks in the connection table until a corresponding reply packet is received from the other side.
  C. A connection is not terminated by either side by FIN or RST packet.
  D. All the connection packets are handled, in either direction, by a single cluster member.
  D. All the connection packets are handled, in either direction, by a single cluster member.

• Question 658:

  A user cannot authenticate to SSL VPN. You have verified the user is assigned a user group and reproduced the problem, confirming a failed-login session. You do not see an indication of this attempt in the traffic log. The user is not using a client certificate for login. To debug this error, where in the authentication process could the solution be found?

  A. apache
  B. admin
  C. cvpnd
  D. cpauth
  C. cvpnd

• Question 659:

  You need to determine if your company's Web servers are accessed an excessive number of times from the same host. How would you configure this in the IPS tab?

  A. Successive alerts
  B. Successive DoS attacks
  C. Successive multiple connections
  D. HTTP protocol inspection
  C. Successive multiple connections

• Question 660:

  The following rule contains an FTP resource object in the Service field: Source: local_net Destination: Any Service: FTP-resource object Action: Accept How do you define the FTP Resource Properties > Match tab to prevent internal users from receiving corporate files from external FTP servers, while allowing users to send files?

  A. Enable "Put" and "Get" methods.
  B. Disable the "Put" method globally.
  C. Enable the "Put" method only on the Match tab.
  D. Enable the "Get" method on the Match tab.
  E. Disable "Get" and "Put" methods on the Match tab.
  C. Enable the "Put" method only on the Match tab.