CheckPoint 156-915.77 Online Practice Questions and Exam Preparation

CheckPoint 156-915.77 Online Questions & Answers

• Question 61:

  Suppose the Security Gateway hard drive fails and you are forced to rebuild it. You have a snapshot file stored to a TFTP server and backups of your Security Management Server. What is the correct procedure for rebuilding the Gateway quickly?

  A. Reinstall the base operating system (i.e., GAiA). Configure the Gateway interface so that the Gateway can communicate with the TFTP server. Revert to the stored snapshot image, and install the Security Policy.
  B. Run the command revert to restore the snapshot, establish SIC, and install the Policy.
  C. Run the command revert to restore the snapshot. Reinstall any necessary Check Point products. Establish SIC and install the Policy.
  D. Reinstall the base operating system (i.e., GAia). Configure the Gateway interface so that the Gateway can communicate with the TFTP server. Reinstall any necessary Check Point products and previously applied hotfixes. Revert to the stored snapshot image, and install the Policy.
  A. Reinstall the base operating system (i.e., GAiA). Configure the Gateway interface so that the Gateway can communicate with the TFTP server. Revert to the stored snapshot image, and install the Security Policy.

• Question 62:

  Which of the following is NOT defined by an Access Role object?

  A. Source Network
  B. Source Machine
  C. Source User
  D. Source Server
  D. Source Server

• Question 63:

  Many companies have defined more than one administrator. To increase security, only one administrator should be able to install a Rule Base on a specific Firewall. How do you configure this?

  A. Define a permission profile in SmartDashboard with read/write privileges, but restrict it to all other firewalls by placing them in the Policy Targets field. Then, an administrator with this permission profile cannot install a policy on any Firewall not listed here.
  B. Put the one administrator in an Administrator group and configure this group in the specific Firewall object in Advanced > Permission to Install.
  C. In the object General Properties representing the specific Firewall, go to the Software Blades product list and select Firewall. Right-click in the menu, select Administrator to Install to define only this administrator.
  D. Right-click on the object representing the specific administrator, and select that Firewall in Policy Targets.
  B. Put the one administrator in an Administrator group and configure this group in the specific Firewall object in Advanced > Permission to Install.

• Question 64:

  The connection to the ClusterXL member `A' breaks. The ClusterXL member `A' status is now `down'. Afterwards the switch admin set a port to ClusterXL member `B' to `down'. What will happen?

  A. ClusterXL member `B' also left the cluster.
  B. ClusterXL member `B' stays active as last member.
  C. Both ClusterXL members share load equally.
  D. ClusterXL member `A' is asked to come back to cluster.
  B. ClusterXL member `B' stays active as last member.

• Question 65:

  When, during policy installation, does the atomic load task run?

  A. It is the first task during policy installation.
  B. It is the last task during policy installation.
  C. Before CPD runs on the Gateway.
  D. Immediately after fwm load runs on the Smart Center.
  B. It is the last task during policy installation.

• Question 66:

  Charles requests a Website while using a computer not in the net_singapore network.

  

  What is TRUE about his location restriction?

  A. Source setting in Source column always takes precedence.
  B. Source setting in User Properties always takes precedence.
  C. As location restrictions add up, he would be allowed from net_singapore and net_sydney.
  D. It depends on how the User Auth object is configured; whether User Properties or Source Restriction takes precedence.
  D. It depends on how the User Auth object is configured; whether User Properties or Source Restriction takes precedence.

• Question 67:

  Where do you verify that UserDirectory is enabled?

  A. Verify that Security Gateway > General Properties > Authentication > Use UserDirectory (LDAP) for Security Gateways is checked
  B. Verify that Global Properties > Authentication > Use UserDirectory (LDAP) for Security Gateways is checked
  C. Verify that Security Gateway > General Properties > UserDirectory (LDAP) > Use UserDirectory (LDAP) for Security Gateways is checked
  D. Verify that Global Properties > UserDirectory (LDAP) > Use UserDirectory (LDAP) for Security Gateways is checked
  D. Verify that Global Properties > UserDirectory (LDAP) > Use UserDirectory (LDAP) for Security Gateways is checked

• Question 68:

  Which of the following tools is used to generate a Security Gateway R77 configuration report?

  A. fw cpinfo
  B. infoCP
  C. cpinfo
  D. infoview
  C. cpinfo

• Question 69:

  How could you compare the Fingerprint shown to the Fingerprint on the server? Exhibit:

  

  A. Run cpconfig, select the Certificate's Fingerprint option and view the fingerprint
  B. Run cpconfig, select the GUI Clients option and view the fingerprint
  C. Run cpconfig, select the Certificate Authority option and view the fingerprint
  D. Run sysconfig, select the Server Fingerprint option and view the fingerprint
  A. Run cpconfig, select the Certificate's Fingerprint option and view the fingerprint

• Question 70:

  Which Check Point address translation method allows an administrator to use fewer ISP- assigned IP addresses than the number of internal hosts requiring Internet connectivity?

  A. Hide
  B. Static Destination
  C. Static Source
  D. Dynamic Destination
  A. Hide