CheckPoint 156-915.77 Online Practice Questions and Exam Preparation

CheckPoint 156-915.77 Online Questions & Answers

• Question 191:

  What is the purpose of the pre-defined exclusions included with SmartEvent R77?

  A. To allow SmartEvent R77 to function properly with all other R71 devices.
  B. To avoid incorrect event generation by the default IPS event definition; a scenario that may occur in deployments that include Security Gateways of versions prior to R71.
  C. As a base for starting and building exclusions.
  D. To give samples of how to write your own exclusion.
  B. To avoid incorrect event generation by the default IPS event definition; a scenario that may occur in deployments that include Security Gateways of versions prior to R71.

• Question 192:

  As a Security Administrator, you must refresh the Client Authentication authorization time- out every time a new user connection is authorized. How do you do this? Enable the Refreshable Timeout setting:

  A. in the user object's Authentication screen.
  B. in the Gateway object's Authentication screen.
  C. in the Limit tab of the Client Authentication Action Properties screen.
  D. in the Global Properties Authentication screen.
  C. in the Limit tab of the Client Authentication Action Properties screen.

• Question 193:

  Type the command and syntax to configure the Cluster Control Protocol (CCP) to use Broadcast.

  A. cphaconf set_ccp broadcast
  A. cphaconf set_ccp broadcast

• Question 194:

  Your internal network is configured to be 10.1.1.0/24. This network is behind your perimeter R77 Gateway, which connects to your ISP provider. How do you configure the Gateway to allow this network to go out to the Internet?

  A. Use Hide NAT for network 10.1.1.0/24 behind the external IP address of your perimeter Gateway.
  B. Use Hide NAT for network 10.1.1.0/24 behind the internal interface of your perimeter Gateway.
  C. Use automatic Static NAT for network 10.1.1.0/24.
  D. Do nothing, as long as 10.1.1.0 network has the correct default Gateway.
  A. Use Hide NAT for network 10.1.1.0/24 behind the external IP address of your perimeter Gateway.

• Question 195:

  If your firewall is performing a lot of IPS inspection and the CPUs assigned to fw_worker_thread are at or near 100%, which of the following could you do to improve performance?

  A. Add more RAM to the system.
  B. Add more Disk Drives.
  C. Assign more CPU cores to CoreXL
  D. Assign more CPU cores to SecureXL.
  C. Assign more CPU cores to CoreXL

• Question 196:

  Which of the following CLISH commands would you use to set the admin user's shell to bash?

  A. set user admin shell bash
  B. set user admin shell /bin/bash
  C. set user admin shell = /bin/bash
  D. set user admin /bin/bash
  B. set user admin shell /bin/bash

• Question 197:

  MegaCorp is using SmartCenter Server with several gateways. Their requirements result in a heavy log load. Would it be feasible to add the SmartEvent Correlation Unit and SmartEvent Server to their SmartCenter Server?

  A. No. SmartCenter SIC will interfere with the function of SmartEvent.
  B. No. If SmartCenter is already under stress, the use of a separate server for SmartEvent is recommended.
  C. No, SmartEvent and Smartcenter cannot be installed on the same machine at the same time.
  D. Yes. SmartEvent must be installed on your SmartCenter Server.
  B. No. If SmartCenter is already under stress, the use of a separate server for SmartEvent is recommended.

• Question 198:

  _________ is the called process that starts when opening Smart View Tracker application.

  A. logtrackerd
  B. fwlogd
  C. CPLMD
  D. FWM
  C. CPLMD

• Question 199:

  The file snapshot generates is very large, and can only be restored to:

  A. The device that created it, after it has been upgraded
  B. Individual members of a cluster configuration
  C. Windows Server class systems
  D. A device having exactly the same Operating System as the device that created the file
  D. A device having exactly the same Operating System as the device that created the file

• Question 200:

  A ClusterXL configuration is limited to ___ members.

  A. There is no limit.
  B. 16
  C. 6
  D. 2
  C. 6