CheckPoint 156-915.77 Online Practice Questions and Exam Preparation

CheckPoint 156-915.77 Online Questions & Answers

• Question 171:

  You find that Gateway fw2 can NOT be added to the cluster object. What are possible reasons for that? Exhibit:

  

  1) fw2 is a member in a VPN community. 2) ClusterXL software blade is not enabled on fw2. 3) fw2 is a DAIP Gateway.

  A. 2 or 3
  B. 1 or 2
  C. 1 or 3
  D. All
  C. 1 or 3

• Question 172:

  What are you required to do before running the command upgrade_export?

  A. Run a cpstop on the Security Gateway.
  B. Run a cpstop on the Security Management Server.
  C. Close all GUI clients.
  D. Run cpconfig and set yourself up as a GUI client.
  C. Close all GUI clients.

• Question 173:

  The process ________ is responsible for GUI Client communication with the Smart Center.

  A. FWD
  B. FWM
  C. CPD
  D. CPLMD
  B. FWM

• Question 174:

  Where can you find the Check Point's SNMP MIB file?

  A. $CPDIR/lib/snmp/chkpt.mib
  B. $FWDIR/conf/snmp.mib
  C. It is obtained only by request from the TAC.
  D. There is no specific MIB file for Check Point products.
  A. $CPDIR/lib/snmp/chkpt.mib

• Question 175:

  Type the full cphaprob command and syntax that will show full synchronization status.

  A. cphaprob -i list
  A. cphaprob -i list

• Question 176:

  What firewall kernel table stores information about port allocations for Hide NAT connections?

  A. NAT_dst_any_list
  B. host_ip_addrs
  C. NAT_src_any_list
  D. fwx_alloc
  D. fwx_alloc

• Question 177:

  Which command would provide the most comprehensive diagnostic information to Check Point Technical Support?

  A. fw cpinfo
  B. cpinfo -o date.cpinfo.txt
  C. diag
  D. cpstat - date.cpstat.txt
  B. cpinfo -o date.cpinfo.txt

• Question 178:

  John Adams is an HR partner in the ACME organization. ACME IT wants to limit access to HR servers to designated IP addresses to minimize malware infection and unauthorized access risks. Thus, the gateway policy permits access only

  from John's desktop which is assigned a static IP address 10.0.0.19.

  John received a laptop and wants to access the HR Web Server from anywhere in the organization. The IT department gave the laptop a static IP address, but that limits him to operating it only from his desk. The current Rule Base contains a

  rule that lets John Adams access the HR Web Server from his laptop with a static IP (10.0.0.19). He wants to move around the organization and continue to have access to the HR Web Server.

  To make this scenario work, the IT administrator:

  1) Enables Identity Awareness on a gateway, selects AD Query as one of the Identity Sources installs the policy.

  2) Adds an access role object to the Firewall Rule Base that lets John Adams PC access the HR Web Server from any machine and from any location.

  What should John do when he cannot access the web server from a different personal computer?

  A. John should lock and unlock his computer
  B. Investigate this as a network connectivity issue
  C. The access should be changed to authenticate the user instead of the PC
  D. John should install the Identity Awareness Agent
  C. The access should be changed to authenticate the user instead of the PC

• Question 179:

  How are cached usernames and passwords cleared from the memory of a R77 Security Gateway?

  A. By using the Clear User Cache button in SmartDashboard.
  B. Usernames and passwords only clear from memory after they time out.
  C. By retrieving LDAP user information using the command fw fetchldap.
  D. By installing a Security Policy.
  D. By installing a Security Policy.

• Question 180:

  Which of the following items should be configured for the Security Management Server to authenticate via LDAP?

  A. Check Point Password
  B. Active Directory Server object
  C. Windows logon password
  D. WMI object
  B. Active Directory Server object