CheckPoint 156-915.77 Online Practice Questions and Exam Preparation

CheckPoint 156-915.77 Online Questions & Answers

• Question 51:

  You have created a Rule Base for firewall, websydney. Now you are going to create a new policy package with security and address translation rules for a second Gateway.

  

  What is TRUE about the new package's NAT rules?

  A. Rules 1, 2, 3 will appear in the new package.
  B. Only rule 1 will appear in the new package.
  C. NAT rules will be empty in the new package.
  D. Rules 4 and 5 will appear in the new package.
  A. Rules 1, 2, 3 will appear in the new package.

• Question 52:

  The process ________ is responsible for Management High Availability synchronization.

  A. CPLMD
  B. FWM
  C. Fwsync
  D. CPD
  B. FWM

• Question 53:

  Your primary Security Gateway runs on GAiA. What is the easiest way to back up your Security Gateway R77 configuration, including routing and network configuration files?

  A. Copying the directories $FWDIR/conf and $FWDIR/lib to another location.
  B. Using the native GAiA backup utility from command line or in the Web based user interface.
  C. Using the command upgrade_export.
  D. Run the pre_upgrade_verifier and save the .tgz file to the directory /temp.
  B. Using the native GAiA backup utility from command line or in the Web based user interface.

• Question 54:

  Study the Rule base and Client Authentication Action properties screen After being authenticated by the Security Gateway, when a user starts an HTTP connection to a Web site, the user tries to FTP to another site using the command line. What happens to the user? The:

  

  A. user is prompted for authentication by the Security Gateway again.
  B. FTP data connection is dropped after the user is authenticated successfully.
  C. user is prompted to authenticate from that FTP site only, and does not need to enter his username and password for Client Authentication.
  D. FTP connection is dropped by Rule 2.
  C. user is prompted to authenticate from that FTP site only, and does not need to enter his username and password for Client Authentication.

• Question 55:

  Several Security Policies can be used for different installation targets. The Firewall protecting Human Resources' servers should have its own Policy Package. These rules must be installed on this machine and not on the Internet Firewall. How can this be accomplished?

  A. A Rule Base is always installed on all possible targets. The rules to be installed on a Firewall are defined by the selection in the Rule Base row Install On.
  B. When selecting the correct Firewall in each line of the Rule Base row Install On, only this Firewall is shown in the list of possible installation targets after selecting Policy > Install on Target.
  C. In the menu of SmartDashboard, go to Policy > Policy Installation Targets and select the correct firewall via Specific Targets.
  D. A Rule Base can always be installed on any Check Point Firewall object. It is necessary to select the appropriate target directly after selecting Policy > Install on Target.
  C. In the menu of SmartDashboard, go to Policy > Policy Installation Targets and select the correct firewall via Specific Targets.

• Question 56:

  Fill in the blank with a numeric value. The default port number for standard TCP connections with the LDAP server is:

  A. 389
  A. 389

• Question 57:

  MultiCorp is running Smartcenter R71 on an IPSO platform and wants to upgrade to a new Appliance with R77. Which migration tool is recommended?

  A. Download Migration Tool R77 for IPSO and Splat/Linux from Check Point website.
  B. Use already installed Migration Tool.
  C. Use Migration Tool from CD/ISO
  D. Fetch Migration Tool R71 for IPSO and Migration Tool R77 for Splat/Linux from CheckPoint website
  A. Download Migration Tool R77 for IPSO and Splat/Linux from Check Point website.

• Question 58:

  You have selected the event Port Scan from Internal Network in SmartEvent, to detect an event when 30 port scans have occurred within 60 seconds. You also want to detect two port scans from a host within 10 seconds of each other. How would you accomplish this?

  A. Define the two port-scan detections as an exception.
  B. You cannot set SmartEvent to detect two port scans from a host within 10 seconds of each other.
  C. Select the two port-scan detections as a sub-event.
  D. Select the two port-scan detections as a new event.
  A. Define the two port-scan detections as an exception.

• Question 59:

  After implementing Static Address Translation to allow Internet traffic to an internal Web Server on your DMZ, you notice that any NATed connections to that machine are being dropped by anti-spoofing protections. Which of the following is the MOST LIKELY cause?

  A. The Global Properties setting Translate destination on client side is unchecked. But the topology on the DMZ interface is set to Internal - Network defined by IP and Mask. Check the Global Properties setting Translate destination on client side.
  B. The Global Properties setting Translate destination on client side is unchecked. But the topology on the external interface is set to Others +. Change topology to External.
  C. The Global Properties setting Translate destination on client side is checked. But the topology on the external interface is set to External. Change topology to Others +.
  D. The Global Properties setting Translate destination on client side is checked. But the topology on the DMZ interface is set to Internal - Network defined by IP and Mask. Uncheck the Global Properties setting Translate destination on client side.
  A. The Global Properties setting Translate destination on client side is unchecked. But the topology on the DMZ interface is set to Internal - Network defined by IP and Mask. Check the Global Properties setting Translate destination on client side.

• Question 60:

  Fill in the blank. The command that typically generates the firewall application, operating system, and hardware specific drivers is _________ .

  A. snapshot
  A. snapshot