Virtual 156-215.77 Exam Questions 2021

NEW QUESTION 1
Which SmartConsole component can Administrators use to track changes to the Rule Base?

• A. WebUI
• B. SmartView Tracker
• C. SmartView Monitor
• D. SmartReporter

Answer: B

NEW QUESTION 2
SmartView Tracker logs the following Security Administrator activities, EXCEPT:

• A. Object creation, deletion, and editing
• B. Tracking SLA compliance
• C. Administrator login and logout
• D. Rule Base changes

Answer: B

NEW QUESTION 3
What is a possible reason for the IKE failure shown in this screenshot?

• A. Mismatch in VPN Domains.
• B. Mismatch in preshared secrets.
• C. Mismatch in Diffie-Hellman group.
• D. Mismatch in encryption schemes.

Answer: B

NEW QUESTION 4
Complete this statement from the options provided. Using Captive Portal, unidentified users may be either; blocked, allowed to enter required credentials, or required to download the
.

• A. Identity Awareness Agent
• B. Full Endpoint Client
• C. ICA Certificate
• D. SecureClient

Answer: A

NEW QUESTION 5
Which tool CANNOT be launched from SmartUpdate R77?

• A. IP Appliance Voyager
• B. snapshot
• C. GAiA WebUI
• D. cpinfo

Answer: B

NEW QUESTION 6
When translation occurs using automatic Hide NAT, what also happens?

• A. Nothing happens.
• B. The destination is modified.
• C. The destination port is modified.
• D. The source port is modified.

Answer: D

NEW QUESTION 7
Your company has two headquarters, one in London, one in New York. Each of the headquarters includes several branch offices. The branch offices only need to communicate with the headquarters in their country, not with each other, and the headquarters need to communicate directly. What is the BEST configuration for establishing VPN Communities among the branch offices and their headquarters, and between the two headquarters? VPN Communities comprised of:

• A. Three mesh Communities: one for London headquarters and its branches; one for New York headquarters and its branches; and one for London and New York headquarters.
• B. Two mesh and one star Community: Each mesh Community is set up for each site between headquarters their branche
• C. The star Community has New York as the center and London as its satellite.
• D. Two star communities and one mesh: A star community for each city with headquarters as center, and branches as satellite
• E. Then one mesh community for the two headquarters.
• F. One star Community with the option to mesh the center of the star: New York and London Gateways added to the center of the star with the “mesh center Gateways? option checked; all London branch offices defined in one satellite window; but, all New York branch offices defined in another satellite window.

Answer: C

NEW QUESTION 8
Choose the SmartLog property that is TRUE.

• A. SmartLog has been an option since release R71.10.
• B. SmartLog is not a Check Point product.
• C. SmartLog and SmartView Tracker are mutually exclusive.
• D. SmartLog is a client of SmartConsole that enables enterprises to centrally track log records and security activity with Google-like search.

Answer: D

NEW QUESTION 9
What information is found in the SmartView Tracker Management log?

• A. Historical reports log
• B. Policy rule modification date/time stamp
• C. Destination IP address
• D. Most accessed Rule Base rule

Answer: B

NEW QUESTION 10
A Web server behind the Security Gateway is set to Automatic Static NAT. Client side NAT is not checked in the Global Properties. A client on the Internet initiates a session to the Web Server. Assuming there is a rule allowing this traffic, what other configuration must be done to allow the traffic to reach the Web server?

• A. Automatic ARP must be unchecked in the Global Properties.
• B. Nothing else must be configured.
• C. A static route must be added on the Security Gateway to the internal host.
• D. A static route for the NAT IP must be added to the Gateway’s upstream router.

Answer: C

NEW QUESTION 11
Choose the BEST sequence for configuring user management in SmartDashboard, using an LDAP server.

• A. Configure a server object for the LDAP Account Unit, enable LDAP in Global Properties, and create an LDAP resource object.
• B. Configure a workstation object for the LDAP server, configure a server object for the LDAP Account Unit, and enable LDAP in Global Properties.
• C. Enable User Directory in Global Properties, configure a host-node object for the LDAP server, and configure a server object for the LDAP Account Unit.
• D. Configure a server object for the LDAP Account Unit, and create an LDAP resource object.

Answer: C

NEW QUESTION 12
You have included the Cleanup Rule in your Rule Base. Where in the Rule Base should the Accept ICMP Requests implied rule have no effect?

• A. Last
• B. After Stealth Rule
• C. First
• D. Before Last

Answer: A

NEW QUESTION 13
You are using SmartView Tracker to troubleshoot NAT entries. Which column do you check to view the NAT'd source port if you are using Source NAT?

• A. XlateDst
• B. XlateSPort
• C. XlateDPort
• D. XlateSrc

Answer: B

NEW QUESTION 14
Which type of R77 Security Server does not provide User Authentication?

• A. SMTP Security Server
• B. HTTP Security Server
• C. FTP Security Server
• D. HTTPS Security Server

Answer: A

NEW QUESTION 15
You believe Phase 2 negotiations are failing while you are attempting to configure a site-to- site VPN with one of your firm’s business partners.
Which SmartConsole application should you use to confirm your suspicions?

• A. SmartDashboard
• B. SmartUpdate
• C. SmartView Status
• D. SmartView Tracker

Answer: D

NEW QUESTION 16
You can include External commands in SmartView Tracker by the menu Tools > Custom Commands.
The Security Management Server is running under GAiA, and the GUI is on a system running Microsoft Windows. How do you run the command traceroute on an IP address?

• A. There is no possibility to expand the three pre-defined options Ping, Whois, and Nslookup.
• B. Go to the menu Tools > Custom Commands and configure the Windows command tracert.exe to the list.
• C. Use the program GUIdbedit to add the command traceroute to the Security Management Server properties.
• D. Go to the menu, Tools > Custom Commands and configure the Linux command traceroute to the list.

Answer: B

NEW QUESTION 17
You are responsible for the configuration of MegaCorp’s Check Point Firewall. You need to allow two NAT rules to match a connection. Is it possible? Give the BEST answer.

• A. No, it is not possible to have more than one NAT rule matching a connectio
• B. When the firewall receives a packet belonging to a connection, it compares it against the first rule in the Rule Base, then the second rule, and so o
• C. When it finds a rule that matches, it stops checking and applies that rule.
• D. Yes, it is possible to have two NAT rules which match a connection, but only in using Manual NAT (bidirectional NAT).
• E. Yes, there are always as many active NAT rules as there are connections.
• F. Yes, it is possible to have two NAT rules which match a connection, but only when using Automatic NAT (bidirectional NAT).

Answer: D