Skip to main content

156-915.77 Real Exam Questions

Check Point Certified Security Expert Update

233 questions available · Page 1 of 24

Updated Exam DumpsVerified AnswersPass Guarantee

Get Complete Exam Dumps
Question 1 Single choice

Which two processes are responsible on handling Identity Awareness?

  1. A

    pdp and lad

  2. B

    pdp and pdp-11

  3. C

    pep and lad

  4. D

    pdp and pep

Show answer and explanation

Correct answer: D

Question 2 Single choice

Which of the following is a CLI command for Security Gateway R77?

  1. A

    fw tab -u

  2. B

    fw shutdown

  3. C

    fw merge

  4. D

    fwm policy_print <policyname>

Show answer and explanation

Correct answer: A

Question 3 Fill in the blank

Type the command and syntax to configure the Cluster Control Protocol (CCP) to use Broadcast.

A. cphaconf set_ccp broadcast

Show answer and explanation

Accepted answer: A

Question 4 Fill in the blank

Fill in the blanks. To view the number of concurrent connections going through your firewall, you would use the command and syntax __ ___ __ __________ __ .

A. fw tab -t connections -s

Show answer and explanation

Accepted answer: A

Question 5 Fill in the blank

Fill in the blank. To verify SecureXL statistics, you would use the command ________ .

A. fwaccel stats

Show answer and explanation

Accepted answer: A

Question 6 Fill in the blank

Fill in the blank.

In New Mode HA, the internal cluster IP VIP address is 10.4.8.3. An internal host 10.4.8.108 successfully pings its Cluster and receives replies. Review the ARP table from the internal Windows host 10.4.8.108.
Based on this information, what is the active cluster member's IP address?

A. 10.4.8.2

Show answer and explanation

Accepted answer: A

Question 7 Fill in the blank

Type the command and syntax you would use to verify that your Check Point cluster is functioning correctly.

A. cphaprob state

Show answer and explanation

Accepted answer: A

Question 8 Single choice

MegaCorp is running Smartcenter R70, some Gateways at R65 and some other Gateways with R60.
Management wants to upgrade to the most comprehensive IPv6 support.

What should the administrator do first?

  1. A

    Upgrade Smartcenter to R77 first.

  2. B

    Upgrade R60-Gateways to R65.

  3. C

    Upgrade every unit directly to R77.

  4. D

    Check the ReleaseNotes to verify that every step is supported.

Show answer and explanation

Correct answer: D

Question 9 Fill in the blank

FILL BLANK

Write the full fw command and syntax that you would use to troubleshoot ClusterXL sync issues.

Show answer and explanation

Accepted answer: fw tab -s -t connections

Question 10 Single choice

Your main internal network 10.10.10.0/24 allows all traffic to the Internet using Hide NAT. You also have a small network 10.10.20.0/24 behind the internal router. You want to configure the kernel to translate the source address only when network 10.10.20.0 tries to access the Internet for HTTP, SMTP, and FTP services.

Which of the following configurations will allow this network to access the Internet?

  1. A

    Configure three Manual Static NAT rules for network 10.10.20.0/24, one for each service.

  2. B

    Configure Automatic Static NAT on network 10.10.20.0/24.

  3. C

    Configure one Manual Hide NAT rule for HTTP, FTP, and SMTP services for network 10.10.20.0/24.

  4. D

    Configure Automatic Hide NAT on network 10.10.20.0/24 and then edit the Service column in the NAT Rule Base on the automatic rule.

Show answer and explanation

Correct answer: C