CheckPoint 156-915.77 Online Practice Questions and Exam Preparation

CheckPoint 156-915.77 Online Questions & Answers

• Question 201:

  Select the correct statement about Secure Internal Communications (SIC) Certificates. SIC Certificates:

  A. Are used for securing internal network communications between the SmartDashboard and the Security Management Server.
  B. For R75 Security Gateways are created during the Security Management Server installation.
  C. Decrease network security by securing administrative communication among the Security Management Servers and the Security Gateway.
  D. Uniquely identify Check Point enabled machines; they have the same function as VPN Certificates.
  D. Uniquely identify Check Point enabled machines; they have the same function as VPN Certificates.

• Question 202:

  Which of the following is the preferred method for adding static routes in GAiA?

  A. In the CLI with the command "route add"
  B. In Web Portal, under Network Management > IPv4 Static Routes
  C. In the CLI via sysconfig
  D. In SmartDashboard under Gateway Properties > Topology
  B. In Web Portal, under Network Management > IPv4 Static Routes

• Question 203:

  Your organization maintains several IKE VPN's. Executives in your organization want to know which mechanism Security Gateway R77 uses to guarantee the authenticity and integrity of messages. Which technology should you explain to the executives?

  A. Certificate Revocation Lists
  B. Application Intelligence
  C. Key-exchange protocols
  D. Digital signatures
  D. Digital signatures

• Question 204:

  SmartReporter reports can be used to analyze data from a penetration-testing regimen in all of the following examples, EXCEPT:

  A. Analyzing traffic patterns against public resources.
  B. Possible worm/malware activity.
  C. Analyzing access attempts via social-engineering.
  D. Tracking attempted port scans.
  C. Analyzing access attempts via social-engineering.

• Question 205:

  Type the command and syntax you would use to verify that your Check Point cluster is functioning correctly.

  A. cphaprob state
  A. cphaprob state

• Question 206:

  You want to generate a cpinfo file via CLI on a system running GAiA. This will take about 40 minutes since the log files are also needed. What action do you need to take regarding timeout?

  A. No action is needed because cpshell has a timeout of one hour by default.
  B. Log in as the default user expert and start cpinfo.
  C. Log in as admin, switch to expert mode, set the timeout to one hour with the command, idle 60, then start cpinfo.
  D. Log in as Administrator, set the timeout to one hour with the command idle 60 and start cpinfo.
  D. Log in as Administrator, set the timeout to one hour with the command idle 60 and start cpinfo.

• Question 207:

  Fill in the blank. To save your OSPF configuration in GAiA, enter the command ___________ .

  A. save config
  A. save config

• Question 208:

  How do you verify the Check Point kernel running on a firewall?

  A. fw ctl get kernel
  B. fw ctl pstat
  C. fw kernel
  D. fw ver -k
  D. fw ver -k

• Question 209:

  Your company has the requirement that SmartEvent reports should show a detailed and accurate view of network activity but also performance should be guaranteed. Which actions should be taken to achieve that?

  1) Use same hard drive for database directory, log files, and temporary directory.

  2) Use Consolidation Rules.

  3) Limit logging to blocked traffic only.

  4) Use Multiple Database Tables.

  A. 2, 4
  B. 1, 3, 4
  C. 1, 2, 4
  D. 1, 2
  A. 2, 4

• Question 210:

  Which Security Gateway R77 configuration setting forces the Client Authentication authorization time-out to refresh, each time a new user is authenticated? The:

  A. Time properties, adjusted on the user objects for each user, in the Client Authentication rule Source.
  B. IPS > Application Intelligence > Client Authentication > Refresh User Timeout option enabled.
  C. Refreshable Timeout setting, in Client Authentication Action Properties > Limits.
  D. Global Properties > Authentication parameters, adjusted to allow for Regular Client Refreshment.
  C. Refreshable Timeout setting, in Client Authentication Action Properties > Limits.