CheckPoint Checkpoint Certifications 156-315.77 Questions & Answers

• Question 691:

  A Minimal Effort Upgrade of a cluster:

  A. Is only supported in major releases (R70 to R71, R71 to R76).

  B. Is not a valid upgrade method inR76.

  C. Treats each individual cluster member as an individual gateway.

  D. Upgrades all cluster members except one at the same time.

  Correct Answer: C

• Question 692:

  Which of the following is NOT a feature of ClusterXL?

  A. Enhanced throughput in all ClusterXL modes (2 gateway cluster compared with 1 gateway)

  B. Transparent failover in case of device failures

  C. Zero downtime for mission-critical environments with State Synchronization

  D. Transparent upgrades

  Correct Answer: C

• Question 693:

  Which of the following methods will provide the most complete backup of an R76configuration?

  A. Database Revision Control

  B. Policy Package Management

  C. Copying the directories $FWDIR\conf and $CPDIR\conf to another server

  D. upgrade exportcommand

  Correct Answer: D

• Question 694:

  An Account Unit is the interface between the __________ and the __________.

  A. Users, Domain

  B. Gateway, Resources

  C. System, Database

  D. Clients, Server

  Correct Answer: D

• Question 695:

  Which command would you use to save the routing information before upgrading a Windows Gateway?

  A. ipconfig –a > [filename].txt

  B. ifconfig > [filename].txt

  C. cp /etc/sysconfig/network.C [location]

  D. netstat -m > [filename].txt

  Correct Answer: D

• Question 696:

  When upgrading a cluster in Full Connectivity Mode, the first thing you must do is see if all cluster members have the same products installed. Which command should you run?

  A. fw fcu

  B. cphaprob fcustat

  C. cpconfig

  D. fw ctl conn -a

  Correct Answer: D

• Question 697:

  What is NOT a valid LDAP use in Check PointSmart Directory?

  A. Retrieve gateway CRL's

  B. External users management

  C. Enforce user access to internal resources

  D. Provide user authentication information for the Security Management Server

  Correct Answer: C

• Question 698:

  How does Check Point recommend that you secure the sync interface between gateways?

  A. Configure the sync network to operate within the DMZ.

  B. Secure each sync interface in a cluster with Endpoint.

  C. Use a dedicated sync network.

  D. Encrypt all sync traffic between cluster members.

  Correct Answer: C

• Question 699:

  When definingSmart Directoryfor High Availability (HA), which of the following should you do?

  A. Replicate the same information on multiple Active Directory servers.

  B. Configure Secure Internal Communications with each server and fetch branches from each.

  C. Configure aSmart DirectoryCluster object.

  D. Configure theSmart Directoryas a single object using the LDAP cluster IP. Actual HA functionality is configured on the servers.

  Correct Answer: A

• Question 700:

  When using Captive Portal to send unidentified users to a Web portal for authentication, which of the following is NOT a recommended use for this method?

  A. Identity-based enforcement for non-AD users (non-Windows and guest users)

  B. For deployment of Identity Agents

  C. Basic identity enforcement in the internal network

  D. Leveraging identity in Internet application control

  Correct Answer: C