CheckPoint CheckPoint Certification 156-727.77 Questions & Answers

• Question 1:

  A customer does not own Check Point Gateways, but he wants to use Threat Emulation Service to detect SMTP Zero-Day vulnerabilities. What is his option?

  A. Needs to buy a Check Point security gateway.

  B. Purchase TE cloud service.

  C. Use SMTP plug-in on his exchange server.

  D. Needs to install Mail Transfer Agent on his firewall.

  Correct Answer: B

• Question 2:

  A customer does not own Check Point Gateways, but he wants to use Threat Emulation Service to detect SMTP Zero-Day vulnerabilities. What is his option?

  A. Use MTA plug-in on his exchange server.

  B. Needs to buy a Check Point security gateway.

  C. Needs to install Mail Transfer Agent on his firewall.

  D. Purchase SMTE cloud service.

  Correct Answer: A

• Question 3:

  What is the minimum software version required for a Threat Emulation deployment?

  A. R76 or higher with Hotfix HF_001 for Threat Emulation

  B. R75.4x with SecurePlatform, R77 or higher with GaiA

  C. R77 or higher with GAiA (or SecurePlatform when using ThreatCloud)

  D. R75.47 or higher with GAiA (or SecurePlatform when using ThreatCloud)

  Correct Answer: C

• Question 4:

  SmartEvent > Events > Predefined: in which section can the "All Threat Emulation" setting be found?

  A. Application and URL Filtering

  B. Threat Prevention

  C. All Events

  D. Threat Analysis

  Correct Answer: B

• Question 5:

  SmartLog displays:

  A. Information about known threats and provides steps for remediation

  B. Events in chart format, with detailed data about threats

  C. Real time data, to help identify ongoing threats

  D. Historic data that can be used for research purposes

  Correct Answer: D

• Question 6:

  SmartLog can be used to identify which of the following:

  A. Security Policy version control information

  B. A list of currently connected users

  C. The country of origin of specific traffic displayed on a map

  D. The top destination IP addresses of a specific source

  Correct Answer: D

• Question 7:

  Which of the following are valid Boolean search terms that can be used in custom SmartLog queries?

  A. And, or, with

  B. And, or, not

  C. None, Boolean search terms cannot be used in SmartLog.

  D. And, or, not, with

  Correct Answer: B

• Question 8:

  Which blades can support HTTPS inspection?

  A. Threat Prevention, Application Control, and IPS

  B. IPS, Advanced Networking, and Threat Prevention

  C. IPS, Application Control, DLP, Threat Prevention

  D. Application Control, Advanced Networking, Threat Prevention, IPS

  Correct Answer: C

• Question 9:

  When pushing the Threat Prevention policy, which of the following blades will NOT get updated?

  A. IPS

  B. Threat Emulation

  C. Anti-Bot

  D. Anti-Virus

  Correct Answer: A

• Question 10:

  When the feature ______________ is ON, the Gateway does not block DNS requests that were identified as malicious. Instead it sends a false response with a bogus IP address to the client.

  A. Malware DNS Blacklist

  B. Malware DNS Trap

  C. Malware DNS Sinkhole

  D. Malware DNS Blackhole

  Correct Answer: B