CheckPoint 156-915.77 Online Practice Questions and Exam Preparation

CheckPoint 156-915.77 Online Questions & Answers

• Question 111:

  Type the command and syntax that you would use to view the virtual cluster interfaces of a ClusterXL environment.

  A. cphaprob -a if
  A. cphaprob -a if

• Question 112:

  Match the ClusterXL modes with their configurations. Exhibit:

  

  A. A-2, B-3, C-4, D-1
  B. A-2, B-3, C-1, D-5
  C. A-3, B-5, C-1, D-4
  D. A-5, B-2, C-4, D-1
  C. A-3, B-5, C-1, D-4

• Question 113:

  A Web server behind the Security Gateway is set to Automatic Static NAT. Client side NAT is not checked in the Global Properties. A client on the Internet initiates a session to the Web Server. Assuming there is a rule allowing this traffic, what other configuration must be done to allow the traffic to reach the Web server?

  A. Automatic ARP must be unchecked in the Global Properties.
  B. Nothing else must be configured.
  C. A static route must be added on the Security Gateway to the internal host.
  D. A static route for the NAT IP must be added to the Gateway's upstream router.
  C. A static route must be added on the Security Gateway to the internal host.

• Question 114:

  Match the VPN-related terms with their definitions. Each correct term is only used once. Exhibit:

  

  A. A-3, B-4, C-1, D-5
  B. A-4, B-3, C-5, D-2
  C. A-2, B-5, C-4, D-1
  D. A-3, B-2, C-1, D-4
  B. A-4, B-3, C-5, D-2

• Question 115:

  A snapshot delivers a complete backup of Secure Platform. The resulting file can be stored on servers or as a local file in /var/CP snapshot/snapshots. How do you restore a local snapshot named MySnapshot.tgz?

  A. As Expert user, type command snapshot - R to restore from a local file. Then, provide the correct file name.
  B. As Expert user, type command revert --file MySnapshot.tgz.
  C. As Expert user, type command snapshot -r MySnapshot.tgz.
  D. Reboot the system and call the start menu. Select option Snapshot Management, provide the Expert password and select [L] for a restore from a local file. Then, provide the correct file name.
  B. As Expert user, type command revert --file MySnapshot.tgz.

• Question 116:

  Use the table to match the BEST Management High Availability synchronication-status descriptions for your Security Management Server (SMS).

  Exhibit:

  

  A. A-5, B-3, C-1, D-2
  B. A-3, B-1, C-4, D-2
  C. A-3, B-5, C-2, D-4
  D. A-3, B-1, C-5, D-4
  D. A-3, B-1, C-5, D-4

• Question 117:

  John Adams is an HR partner in the ACME organization. ACME IT wants to limit access to HR servers to a set of designated IP addresses to minimize malware infection and unauthorized access risks. Thus, the gateway policy permits

  access only from John's desktop which is assigned a static IP address 10.0.0.19.

  He has received a new laptop and wants to access the HR Web Server from anywhere in the organization. The IT department gave the laptop a static IP address, but that limits him to operating it only from his desk. The current Rule Base

  contains a rule that lets John Adams access the HR Web Server from his laptop with a static IP (10.0.0.19).

  He wants to move around the organization and continue to have access to the HR Web Server. To make this scenario work, the IT administrator:

  1) Enables Identity Awareness on a gateway, selects AD Query as one of the Identity Sources, and installs the policy.

  2) Adds an access role object to the Firewall Rule Base that lets John Adams access the HR Web Server from any machine and from any location and installs policy.

  John plugged in his laptop to the network on a different network segment and was not able to connect to the HR Web server. What is the next BEST troubleshooting step?

  A. Investigate this as a network connectivity issue
  B. Install the Identity Awareness Agent
  C. Set static IP to DHCP
  D. After enabling Identity Awareness, reboot the gateway
  C. Set static IP to DHCP

• Question 118:

  Fill in the blank with a numeric value. The default port number for Secure Sockets Layer (SSL) connections with the LDAP Server is:

  A. 636
  A. 636

• Question 119:

  MegaCorps' disaster recovery plan is past due for an update to the backup and restore section to enjoy the benefits of the new distributed R77 installation. You must propose a plan that meets the following required and desired objectives:

  Required: Security Policy repository must be backed up no less frequently than every 24 hours. Desired: Back up R77 components enforcing the Security Policies at least once a week.

  Desired: Back up R77 logs at least once a week.

  You develop a disaster recovery plan proposing the following:

  *

  Use the utility cron to run the command upgrade_export each night on the Security Management Servers.

  *

  Configure the organization's routine backup software to back up files created by the command upgrade_export.

  *

  Configure GAiA back up utility to back up Security Gateways every Saturday night.

  *

  Use the utility cron to run the command upgrade_export each Saturday night on the log servers.

  *

  Configure an automatic, nightly logswitch.

  *

  Configure the organization's routine back up software to back up the switched logs every night. The corporate IT change review committee decides your plan:

  A. meets the required objective and only one desired objective.
  B. meets the required objective and both desired objectives.
  C. meets the rquired objective but does not meet either deisred objective.
  D. does not meet the required objective.
  B. meets the required objective and both desired objectives.

• Question 120:

  Fill in the blank. To verify that a VPN Tunnel is properly established, use the command _________

  A. vpn tunnelutil
  A. vpn tunnelutil