CheckPoint 156-315.77 Online Practice Questions and Exam Preparation

CheckPoint 156-315.77 Online Questions & Answers

• Question 691:

  Cody is notified by blacklist.org that his site has been reported as a spam relay, due to his SMTP Server being unprotected. Cody decides to implement an SMTP Security Server, to prevent the server from being a spam relay. Which of the following is the most efficient configuration method?

  A. Configure the SMTP Security Server to perform MX resolving.
  B. Configure the SMTP Security Server to perform filtering, based on IP address and SMTP protocols.
  C. Configure the SMTP Security Server to work with an OPSEC based product, for content checking.
  D. Configure the SMTP Security Server to apply a generic "from" address to all outgoing mail.
  E. Configure the SMTP Security Server to allow only mail to or from names, within Cody's corporate domain.
  E. Configure the SMTP Security Server to allow only mail to or from names, within Cody's corporate domain.

• Question 692:

  The process ________ is responsible for Management High Availability synchronization.

  A. CPLMD
  B. FWM
  C. Fwsync
  D. CPD
  B. FWM

• Question 693:

  Which of the following can NOT be modified by editing the cp_httpd_admin.conf file?

  A. Toggling HTTP or HTTPS protocol use
  B. The web server port
  C. Modifying Web server certificate attributes
  D. Administrative Access Level
  D. Administrative Access Level

• Question 694:

  A snapshot delivers a complete backup ofSecure Platform. The resulting file can be stored on servers or as a local file in /var/CPsnapshot/snapshots. How do you restore a local snapshot named MySnapshot.tgz?

  A. As Expert user, type command snapshot - R to restore from a local file. Then, provide the correct file name.
  B. As Expert user, type command revert --file MySnapshot.tgz.
  C. As Expert user, type command snapshot -r MySnapshot.tgz.
  D. Reboot the system and call the start menu. Select option Snapshot Management, provide the Expert password and select [L] for a restore from a local file. Then, provide the correct file name.
  B. As Expert user, type command revert --file MySnapshot.tgz.

• Question 695:

  What is the consequence of clearing the "Log VoIP Connection" box in Global Properties?

  A. Dropped VoIP traffic is logged, but accepted VoIP traffic is not logged.
  B. VoIP protocol-specific log fields are not included in SmartView Tracker entries.
  C. The log field setting in rules for VoIP protocols are ignored.
  D. IP addresses are used, instead of object names, in log entries that reference VoIP Domain objects.
  E. The SmartCenter Server stops importing logs from VoIP servers.
  B. VoIP protocol-specific log fields are not included in SmartView Tracker entries.

• Question 696:

  Public-key cryptography is considered which of the following?

  A. two-key/symmetric
  B. one-key/asymmetric
  C. two-key/asymmetric
  D. one-key/symmetric
  C. two-key/asymmetric

• Question 697:

  Damon enables an SMTP resource for content protection. He notices that mail seems to slow down on occasion, sometimes being delivered late. Which of the following might improve throughput performance?

  A. Configuring the SMTP resource to bypass the CVP resource
  B. Increasing the Maximum number of mail messages in the Gateway's spool directory
  C. Configuring the Content Vector Protocol (CVP) resource to forward the mail to the internal SMTP server, without waiting for a response from the Security Gateway
  D. Configuring the CVP resource to return the mail to the Gateway
  E. Configuring the SMTP resource to only allow mail with Damon's company's domain name in the header
  C. Configuring the Content Vector Protocol (CVP) resource to forward the mail to the internal SMTP server, without waiting for a response from the Security Gateway

• Question 698:

  What type of packet does a VPN-1 SecureClient send to its Policy Server, to report its Secure Configuration Verification status?

  A. ICMP Port Unreachable
  B. TCP keep alive
  C. IKE Key Exchange
  D. ICMP Destination Unreachable
  E. UDP keep alive
  E. UDP keep alive

• Question 699:

  What is a requirement for setting upR76Management High Availability?

  A. All Security Management Servers must have the same number of NICs.
  B. All Security Management Servers must have the same operating system.
  C. State synchronization must be enabled on the secondary Security Management Server.
  D. All Security Management Servers must reside in the same LAN.
  B. All Security Management Servers must have the same operating system.

• Question 700:

  Which technology would describe RDED for Qos?

  A. A mechanism for reducing the number of retransmits and retransmit storms.
  B. A mechanism for managing packet buffers.
  C. A mechanism to accurately classify traffic and place it in the proper transmission queue.
  D. A mechanism to derive complete state and context information for all network traffic.
  A. A mechanism for reducing the number of retransmits and retransmit storms.