CheckPoint 156-915.77 Online Practice Questions and Exam Preparation

CheckPoint 156-915.77 Online Questions & Answers

• Question 81:

  What gives administrators more flexibility when configuring Captive Portal instead of LDAP query for Identity Awareness authentication?

  A. Captive Portal is more secure than standard LDAP
  B. Nothing, LDAP query is required when configuring Captive Portal
  C. Captive Portal works with both configured users and guests
  D. Captive Portal is more transparent to the user
  C. Captive Portal works with both configured users and guests

• Question 82:

  In a zero downtime firewall cluster environment, what command syntax do you run to avoid switching problems around the cluster for command cphaconf?

  A. set_ccp broadcast
  A. set_ccp broadcast

• Question 83:

  You are trying to configure Directional VPN Rule Match in the Rule Base. But the Match column does not have the option to see the Directional Match. You see the following window.

  

  What must you enable to see the Directional Match?

  A. directional_match(true) in the objects_5_0.C file on Security Management Server
  B. VPN Directional Match on the Gateway object's VPN tab
  C. VPN Directional Match on the VPN advanced window, in Global Properties
  D. Advanced Routing on each Security Gateway
  C. VPN Directional Match on the VPN advanced window, in Global Properties

• Question 84:

  Which of the following authentication methods can be configured in the Identity Awareness setup wizard?

  A. Check Point Password
  B. TACACS
  C. LDAP
  D. Windows password
  C. LDAP

• Question 85:

  David wants to manage hundreds of gateways using a central management tool. What tool would David use to accomplish his goal?

  A. Smart Provisioning
  B. Smart Blade
  C. Smart Dashboard
  D. Smart LSM
  B. Smart Blade

• Question 86:

  What is the officially accepted diagnostic tool for IP Appliance Support?

  A. ipsoinfo
  B. CST
  C. uag-diag
  D. cpinfo
  B. CST

• Question 87:

  ALL of the following options are provided by the GAiA sysconfig utility, EXCEPT:

  A. Export setup
  B. DHCP Server configuration
  C. Time and Date
  D. GUI Clients
  D. GUI Clients

• Question 88:

  Which of the following statements accurately describes the upgrade export command?

  A. Used primarily when upgrading the Security Management Server, upgrade export stores all object databases and the conf directories for importing to a newer version of the Security Gateway.
  B. Used when upgrading the Security Gateway, upgrade export includes modified files, such as in the directories /lib and /conf.
  C. upgrade export is used when upgrading the Security Gateway, and allows certain files to be included or excluded before exporting.
  D. upgrade export stores network-configuration data, objects, global properties, and the database revisions prior to upgrading the Security Management Server.
  A. Used primarily when upgrading the Security Management Server, upgrade export stores all object databases and the conf directories for importing to a newer version of the Security Gateway.

• Question 89:

  In SmartDashboard, Translate destination on client side is checked in Global Properties. When Network Address Translation is used:

  A. It is not necessary to add a static route to the Gateway's routing table.
  B. It is necessary to add a static route to the Gateway's routing table.
  C. The Security Gateway's ARP file must be modified.
  D. VLAN tagging cannot be defined for any hosts protected by the Gateway.
  A. It is not necessary to add a static route to the Gateway's routing table.

• Question 90:

  Before upgrading SecurePlatform to GAiA, you should create a backup. To save time, many administrators use the command backup. This creates a backup of the Check Point configuration as well as the system configuration.

  An administrator has installed the latest HFA on the system for fixing traffic problem after creating a backup file. There is a mistake in the very complex static routing configuration. The Check Point configuration has not been changed. Can the administrator use a restore to fix the errors in static routing?

  A. The restore is not possible because the backup file does not have the same build number (version).
  B. The restore is done by selecting Snapshot Management from the boot menu of GAiA.
  C. The restore can be done easily by the command restore and copying netconf.C from the production environment.
  D. A backup cannot be restored, because the binary files are missing.
  C. The restore can be done easily by the command restore and copying netconf.C from the production environment.