CheckPoint 156-315.77 Online Practice Questions and Exam Preparation

CheckPoint 156-315.77 Online Questions & Answers

• Question 71:

  To stop acceleration on a GAiA Security Gateway, enter command:

  A. fwaccel off
  A. fwaccel off

• Question 72:

  What is NOT true about Management Portal?

  A. Choosing Accept control connections in Implied Rules includes Management Portal access
  B. Management Portal requires a license
  C. Default Port for Management Portal access is 4433
  D. Management Portal could be reconfigured for using HTTP instead of HTTPS
  A. Choosing Accept control connections in Implied Rules includes Management Portal access

• Question 73:

  You have to uninstall the Check PointSmart WorkflowSoftware Blade on aSecure Platformsystem. How can you perform this procedure?

  A. To uninstall theSmart WorkflowSoftware Blade you can connect to theSecure PlatformWebUI ( ) and select: Device > Upgrade. You will be asked if you want uninstall theSmart WorkflowSoftware Blade.
  B. To uninstall theSmart WorkflowSoftware Blade you must first connect to your Security Management System on command line level. Then in the directory /opt/CPUninstall/Check_Point_Workflow, run the command ./UnixInstallScript -u. Afterwards, follow the screen instructions and change to the directory /opt/CPUninstall/R70_HFA_10 and repeat the previous command.
  C. To uninstall theSmart WorkflowSoftware Blade, you useSmart Update. Click on the symbol of the Security Management Server, right-click, select Get Gateway Data, selectSmart Workflow, right -click uninstall Smart Workflow. You will see the progress in theOpera rationStatus windows.
  D. To uninstall theSmart WorkflowSoftware Blade, you must first connect to your Security Management System on the command line level. Then in the directory /opt/CPuninstall/Check_Point_Workflow, run the command ./UnixInstallScript -u.
  B. To uninstall theSmart WorkflowSoftware Blade you must first connect to your Security Management System on command line level. Then in the directory /opt/CPUninstall/Check_Point_Workflow, run the command ./UnixInstallScript -u. Afterwards, follow the screen instructions and change to the directory /opt/CPUninstall/R70_HFA_10 and repeat the previous command.

• Question 74:

  Which Check Point tool allows you to open a debug file and see the VPN packet exchange details.

  A. PacketDebug.exe
  B. VPNDebugger.exe
  C. IkeView.exe
  D. IPSECDebug.exe
  C. IkeView.exe

• Question 75:

  Which Check Point QoS feature allows a Security Administrator to define special classes of service for delay-sensitive applications?

  A. Guarantees
  B. Weighted Fair Queuing
  C. Differentiated Services
  D. Low Latency Queuing
  D. Low Latency Queuing

• Question 76:

  How can you prevent delay-sensitive applications, such as video and voice traffic, from being dropped due to long queue using Check Point QoS solution?

  A. Weighted Fair queuing
  B. guaranteed per connection
  C. Low latency class
  D. guaranteed per VoIP rule
  C. Low latency class

• Question 77:

  How do you enable SecureXL (command line) onGAiA?

  A. fw securexl on
  B. fw accel on
  C. fwaccel on
  D. fwsecurexl on
  C. fwaccel on

• Question 78:

  Mark the configuration options that are available for Data Loss Prevention in R71.

  A. The DLP Gateway running only the Management Server on the same machine.
  B. The DLP Gateway running only the Firewall Software Blade
  C. The DLP as an integrated software blade which can be enabled on a Check Point Security Gateway running other software blades such as firewall, IPS and Management.
  D. A Dedicated DLP Gateway running only the DLP Software Blade.
  D. A Dedicated DLP Gateway running only the DLP Software Blade.

• Question 79:

  The ________ Check Point ClusterXL mode must synchronize the physical interface IP and MAC addresses on all clustered interfaces.

  A. New Mode HA
  B. Pivot Mode Load Sharing
  C. Multicast Mode Load Sharing
  D. Legacy Mode HA
  D. Legacy Mode HA

• Question 80:

  What is the advantage for deploying SSL VPN in a DMZ, versus a LAN?

  A. SSL VPN adds another layer of access security to internal resources, when it resides in a DMZ.
  B. SSL Network Extender is ineffective in a LAN deployment.
  C. Traffic is in clear text when forwarded to internal servers, but the back connection is encrypted for remote users
  D. Traffic is authenticated without hiding behind Connectra's IP address
  A. SSL VPN adds another layer of access security to internal resources, when it resides in a DMZ.