CheckPoint 156-727.77 Online Practice Questions and Exam Preparation

CheckPoint 156-727.77 Online Questions & Answers

• Question 1:

  Which of the following are valid Boolean search terms that can be used in custom SmartLog queries?

  A. And, or, with
  B. And, or, not
  C. None, Boolean search terms cannot be used in SmartLog.
  D. And, or, not, with
  B. And, or, not

• Question 2:

  SmartLog can be used to identify which of the following:

  A. Security Policy version control information
  B. A list of currently connected users
  C. The country of origin of specific traffic displayed on a map
  D. The top destination IP addresses of a specific source
  D. The top destination IP addresses of a specific source

• Question 3:

  SmartLog displays:

  A. Information about known threats and provides steps for remediation
  B. Events in chart format, with detailed data about threats
  C. Real time data, to help identify ongoing threats
  D. Historic data that can be used for research purposes
  D. Historic data that can be used for research purposes

• Question 4:

  SmartEvent > Events > Predefined: in which section can the "All Threat Emulation" setting be found?

  A. Application and URL Filtering
  B. Threat Prevention
  C. All Events
  D. Threat Analysis
  B. Threat Prevention

• Question 5:

  What is the minimum software version required for a Threat Emulation deployment?

  A. R76 or higher with Hotfix HF_001 for Threat Emulation
  B. R75.4x with SecurePlatform, R77 or higher with GaiA
  C. R77 or higher with GAiA (or SecurePlatform when using ThreatCloud)
  D. R75.47 or higher with GAiA (or SecurePlatform when using ThreatCloud)
  C. R77 or higher with GAiA (or SecurePlatform when using ThreatCloud)

• Question 6:

  A customer does not own Check Point Gateways, but he wants to use Threat Emulation Service to detect SMTP Zero-Day vulnerabilities. What is his option?

  A. Use MTA plug-in on his exchange server.
  B. Needs to buy a Check Point security gateway.
  C. Needs to install Mail Transfer Agent on his firewall.
  D. Purchase SMTE cloud service.
  A. Use MTA plug-in on his exchange server.

• Question 7:

  A customer does not own Check Point Gateways, but he wants to use Threat Emulation Service to detect SMTP Zero-Day vulnerabilities. What is his option?

  A. Needs to buy a Check Point security gateway.
  B. Purchase TE cloud service.
  C. Use SMTP plug-in on his exchange server.
  D. Needs to install Mail Transfer Agent on his firewall.
  B. Purchase TE cloud service.

• Question 8:

  Joey is the MegaCorp Firewall administrator. Which options does he have for the configuration of the Threat Emulation Analysis Location on his gateway?

  A. Only Check Point Threat Cloud
  B. Upload the Files to the Check Point SFTP-Server
  C. It depends on the operating systems that need to be supported
  D. Either Check Point Threat Cloud or locally (dedicated or existing gateway)
  D. Either Check Point Threat Cloud or locally (dedicated or existing gateway)

• Question 9:

  Bots and viruses appear as __________ in the reporting blade.

  A. Threats
  B. Incidents
  C. Malware
  D. Infections
  C. Malware

• Question 10:

  What is the most common way a computer can become infected with a bot?

  A. Malvertising
  B. Users accessing malicious web sites
  C. Adobe file vulnerabilities
  D. Microsoft file vulnerabilities
  B. Users accessing malicious web sites