CheckPoint 156-727.77 Online Practice Questions and Exam Preparation

CheckPoint 156-727.77 Online Questions & Answers

• Question 1:

  _______________ enforces or monitors traffic, based on the source or destination IP address of the country.

  A. IPS Recommended_Protections Profile
  B. Geo-protection
  C. Secure Web Gateway
  D. ThreatCloud
  B. Geo-protection

• Question 2:

  IPS is primarily a __________-based engine.

  A. Signature
  B. Difference
  C. Action
  D. Anomaly
  A. Signature

• Question 3:

  What is the most common way a computer can become infected with a bot?

  A. Malvertising
  B. Users accessing malicious web sites
  C. Adobe file vulnerabilities
  D. Microsoft file vulnerabilities
  B. Users accessing malicious web sites

• Question 4:

  Which of the following are valid Boolean search terms that can be used in custom SmartLog queries?

  A. And, or, with
  B. And, or, not
  C. None, Boolean search terms cannot be used in SmartLog.
  D. And, or, not, with
  B. And, or, not

• Question 5:

  When configuring Anti-Bot and Anti-Virus, you notice the following error in the Update Status of the Gateways page: What is the most likely cause of this error?

  

  A. The Security Gateway is not licensed for Anti-Bot and Anti-Virus inspection.
  B. There are no updates available for the participating gateway.
  C. The Anti-Bot and Anti-Virus policy is not installed on the gateway.
  D. You do not have DNS or proxy settings configured for the gateway.
  D. You do not have DNS or proxy settings configured for the gateway.

• Question 6:

  Check Point's IPS blade provides two pre-defined profiles. Which of the following definitions are correct?

  A. Default_Protection: Provides excellent performance with a sufficient level of protection. Recommended_Protection: Provides the best security with a sufficient level of performance.
  B. Default_Protection: Provides tracking only for troubleshooting purposes and evaluation prior to full implementation. Recommended_Protection: Provides excellent performance with a sufficient level of protection.
  C. Default_Protection: Provides the best security with a sufficient level of performance. Recommended_Protection: Provides excellent performance with a sufficient level of protection.
  D. Default_Protection: Is an uneditable profile that prevents all IPS related traffic. Recommended_Protection: Provides excellent performance, flexibility to customize protections and actions, with a sufficient level of protection.
  A. Default_Protection: Provides excellent performance with a sufficient level of protection. Recommended_Protection: Provides the best security with a sufficient level of performance.

• Question 7:

  How can SmartEvent be launched out of SmartDashboard?

  A. Threat Prevention Tab > Launch SmartEvent
  B. Menu SmartConsole > SmartEvent
  C. Menu SmartConsole > SmartEvent or Threat Prevention Tab > Analyze and Report
  D. SmartEvent has always to be launched via Start > Programs
  C. Menu SmartConsole > SmartEvent or Threat Prevention Tab > Analyze and Report

• Question 8:

  What advantage does the Recommended_Profile provide over the Default_Protection profile?

  A. Reduced server load
  B. Accelerated throughput
  C. Advanced reporting options
  D. Higher security posture
  D. Higher security posture

• Question 9:

  Damage from a bot attack can take place after the bot compromises a machine. Which of the following represents the order by which this process takes place? The bot:

  A. infects a machine, communicates with its command and control handlers, and penetrates the organization.
  B. penetrates the organization, infects a machine, and communicates with its command and control handlers.
  C. communicates with its command and control handlers, infects a machine, and penetrates the organization.
  D. penetrates the organization, communicates with its command and control handlers, and infects a machine.
  B. penetrates the organization, infects a machine, and communicates with its command and control handlers.

• Question 10:

  If a bot is detected on your network, which of the following statements is correct regarding anti- bot blade.

  A. outbound connections from the infected client are blocked to prevent further infection.
  B. outbound connections from the infected client are blocked;, expect the connection to the Check Point ThreatCloud.
  C. outbound connections from the infected client to the command and control center, are blocked.
  D. outbound connections from every client are blocked, to prevent further data breaches.
  C. outbound connections from the infected client to the command and control center, are blocked.