CheckPoint 156-915.77 Online Practice Questions and Exam Preparation

CheckPoint 156-915.77 Online Questions & Answers

• Question 71:

  When using GAiA, it might be necessary to temporarily change the MAC address of the interface eth 0 to 00:0C:29:12:34:56. After restarting the network the old MAC address should be active. How do you configure this change?

  

  A. Option A
  B. Option B
  C. Option C
  D. Option D
  A. Option A

• Question 72:

  Which of the following are authentication methods that Security Gateway R77 uses to validate connection attempts? Select the response below that includes the MOST complete list of valid authentication methods.

  A. Proxied, User, Dynamic, Session
  B. Connection, User, Client
  C. User, Client, Session
  D. User, Proxied, Session
  C. User, Client, Session

• Question 73:

  Which of the following allows administrators to allow or deny traffic to or from a specific network based on the user's credentials?

  A. Access Policy
  B. Access Role
  C. Access Rule
  D. Access Certificate
  B. Access Role

• Question 74:

  You intend to upgrade a Check Point Gateway from R71 to R77. Prior to upgrading, you want to back up the Gateway should there be any problems with the upgrade. Which of the following allows for the Gateway configuration to be completely backed up into a manageable size in the least amount of time?

  A. database revision
  B. snapshot
  C. upgrade_export
  D. backup
  D. backup

• Question 75:

  How do you configure the Security Policy to provide user access to the Captive Portal through an external (Internet) interface?

  A. Change the gateway settings to allow Captive Portal access via an external interface.
  B. No action is necessary. This access is available by default.
  C. Change the Identity Awareness settings under Global Properties to allow Captive Portal access on all interfaces.
  D. Change the Identity Awareness settings under Global Properties to allow Captive Portal access for an external interface.
  A. Change the gateway settings to allow Captive Portal access via an external interface.

• Question 76:

  You are the Security Administrator for MegaCorp. A Check Point firewall is installed and in use on a platform using GAiA. You have trouble configuring the speed and duplex settings of your Ethernet interfaces. Which of the following commands can be used in CLISH to configure the speed and duplex settings of an Ethernet interface and will survive a reboot? Give the BEST answer.

  A. ethtool
  B. set interface
  C. mii_tool
  D. ifconfig -a
  B. set interface

• Question 77:

  From the following output of cphaprob state, which Cluster XL mode is this?

  

  A. New mode
  B. Multicast mode
  C. Legacy mode
  D. Unicast mode
  D. Unicast mode

• Question 78:

  You are the Security Administrator for ABC-Corp. A Check Point Firewall is installed and in use on GAiA. You are concerned that the system might not be retaining your entries for the interfaces and routing configuration. You would like to verify your entries in the corresponding file(s) on GAiA. Where can you view them? Give the BEST answer.

  A. /etc/sysconfig/netconf.C
  B. /etc/conf/route.C
  C. /etc/sysconfig/network-scripts/ifcfg-ethx
  D. /etc/sysconfig/network
  A. /etc/sysconfig/netconf.C

• Question 79:

  Fill in the blank.

  

  In Load Sharing Unicast mode, the internal cluster IP address is 10.4.8.3. The internal interfaces on two members are 10.4.8.1 and 10.4.8.2. Internal host 10.4.8.108 Pings 10.4.8.3, and receives replies. The following is the ARP table from the internal Windows host 10.4.8.108. Review the exhibit and type the IP address of the member serving as the pivot machine in the space below.

  A. 10.4.8.2
  A. 10.4.8.2

• Question 80:

  MicroCorp experienced a security appliance failure. (LEDs of all NICs are off.) The age of the unit required that the RMA-unit be a different model. Will a revert to an existing snapshot bring the new unit up and running?

  A. There is no dynamic update at reboot.
  B. No. The revert will most probably not match to hard disk.
  C. Yes. Everything is dynamically updated at reboot.
  D. No. At installation the necessary hardware support is selected. The snapshot saves this state.
  D. No. At installation the necessary hardware support is selected. The snapshot saves this state.