CheckPoint Checkpoint Certifications 156-915.77 Questions & Answers

• Question 121:

  Fill in the blank. What is the correct command and syntax used to view a connection table summary on a Check Point Firewall?

  A. fw tab -t connections -s

  Correct Answer: A

• Question 122:

  Which of the following items should be configured for the Security Management Server to authenticate via LDAP?

  A. Check Point Password

  B. Active Directory Server object

  C. Windows logon password

  D. WMI object

  Correct Answer: B

• Question 123:

  What command syntax would you use to turn on PDP logging in a distributed environment?

  A. pdp track=1

  B. pdp tracker on

  C. pdp logging on

  D. pdp log=1

  Correct Answer: B

• Question 124:

  What gives administrators more flexibility when configuring Captive Portal instead of LDAP query for Identity Awareness authentication?

  A. Captive Portal is more secure than standard LDAP

  B. Nothing, LDAP query is required when configuring Captive Portal

  C. Captive Portal works with both configured users and guests

  D. Captive Portal is more transparent to the user

  Correct Answer: C

• Question 125:

  Which of the following authentication methods can be configured in the Identity Awareness setup wizard?

  A. TACACS

  B. Captive Portal

  C. Check Point Password

  D. Windows password

  Correct Answer: B

• Question 126:

  What command with appropriate switches would you use to test Identity Awareness connectivity?

  A. test_ldap

  B. test_ad_connectivity

  C. test_ldap_connectivity

  D. test_ad

  Correct Answer: B

• Question 127:

  What command syntax would you use to see accounts the gateway suspects are service accounts?

  A. pdp check_log

  B. pdp show service

  C. adlog check_accounts

  D. adlog a service_accounts

  Correct Answer: D

• Question 128:

  How do you configure the Security Policy to provide user access to the Captive Portal through an external (Internet) interface?

  A. Change the gateway settings to allow Captive Portal access via an external interface.

  B. No action is necessary. This access is available by default.

  C. Change the Identity Awareness settings under Global Properties to allow Captive Portal access on all interfaces.

  D. Change the Identity Awareness settings under Global Properties to allow Captive Portal access for an external interface.

  Correct Answer: A

• Question 129:

  To qualify as an Identity Awareness enabled rule, which column MAY include an Access Role?

  A. Action

  B. Source

  C. User

  D. Track

  Correct Answer: B

• Question 130:

  What mechanism does a gateway configured with Identity Awareness and LDAP initially use to communicate with a Windows 2003 or 2008 server?

  A. WMI

  B. CIFS

  C. RCP

  D. LDAP

  Correct Answer: A