Check Point 156-215.77 Exam Questions and Answers 2021

NEW QUESTION 1
Which of the following commands can provide the most complete restoration of a R77 configuration?

• A. upgrade_import
• B. cpinfo -recover
• C. cpconfig
• D. fwm dbimport -p <export file>

Answer: A

NEW QUESTION 2
What is a Consolidation Policy?

• A. The collective name of the Security Policy, Address Translation, and IPS Policies.
• B. The specific Policy written in SmartDashboard to configure which log data is stored in the SmartReporter database.
• C. The collective name of the logs generated by SmartReporter.
• D. A global Policy used to share a common enforcement policy for multiple Security Gateways.

Answer: B

NEW QUESTION 3
Which statement is TRUE about implicit rules?

• A. You create them in SmartDashboard.
• B. The Gateway enforces implicit rules that enable outgoing packets only.
• C. Changes to the Security Gateway’s default settings do not affect implicit rules.
• D. They are derived from Global Properties and explicit object properties.

Answer: D

NEW QUESTION 4
What action can be performed from SmartUpdate R77?

• A. upgrade_export
• B. fw stat -l
• C. cpinfo
• D. remote_uninstall_verifier

Answer: C

NEW QUESTION 5
Which R77 feature or command allows Security Administrators to revert to earlier Security Policy versions without changing object configurations?

• A. upgrade_export/upgrade_import
• B. fwm dbexport/fwm dbimport
• C. Database Revision Control
• D. Policy Package management

Answer: C

NEW QUESTION 6
Your manager requires you to setup a VPN to a new business partner site. The administrator from the partner site gives you his VPN settings and you notice that he setup AES 128 for IKE phase 1 and AES 256 for IKE phase 2. Why is this a problematic setup?

• A. The two algorithms do not have the same key length and so don’t work togethe
• B. You will get the error …. No proposal chosen….
• C. All is fine as the longest key length has been chosen for encrypting the data and a shorter key length for higher performance for setting up the tunnel.
• D. Only 128 bit keys are used for phase 1 keys which are protecting phase 2, so the longer key length in phase 2 only costs performance and does not add security due to a shorter key in phase 1.
• E. All is fine and can be used as is.

Answer: C

NEW QUESTION 7
When you use the Global Properties’ default settings on R77, which type of traffic will be dropped if NO explicit rule allows the traffic?

• A. SmartUpdate connections
• B. Outgoing traffic originating from the Security Gateway
• C. Firewall logging and ICA key-exchange information
• D. RIP traffic

Answer: D

NEW QUESTION 8
SmartUpdate is mainly for which kind of work –
1. Monitoring Performance and traffic
2. Provision Package
3. Managing licenses
4. Creating a Rule Base

• A. 2, 3
• B. 1, 2
• C. 1, 3
• D. 2, 4

Answer: A

NEW QUESTION 9
What is the Manual Client Authentication TELNET port?

• A. 23
• B. 264
• C. 900
• D. 259

Answer: D

NEW QUESTION 10
How can you check whether IP forwarding is enabled on an IP Security Appliance?

• A. clish -c show routing active enable
• B. cat /proc/sys/net/ipv4/ip_forward
• C. echo 1 > /proc/sys/net/ipv4/ip_forward
• D. ipsofwd list

Answer: D

NEW QUESTION 11
John Adams is an HR partner in the ACME organization. ACME IT wants to limit access to HR servers to a set of designated IP addresses to minimize malware infection and unauthorized access risks. Thus, the gateway policy permits access only from John's desktop which is assigned a static IP address 10.0.0.19.
He has received a new laptop and wants to access the HR Web Server from anywhere in the organization. The IT department gave the laptop a static IP address, but that limits him to operating it only from his desk. The current Rule Base contains a rule that lets John Adams access the HR Web Server from his laptop with a static IP (10.0.0.19).
He wants to move around the organization and continue to have access to the HR Web
Server. To make this scenario work, the IT administrator:
1) Enables Identity Awareness on a gateway, selects AD Query as one of the Identity Sources, and installs the policy.
2) Adds an access role object to the Firewall Rule Base that lets John Adams access the HR Web Server from any machine and from any location and installs policy.
John plugged in his laptop to the network on a different network segment and was not able to connect to the HR Web server. What is the next BEST troubleshooting step?

• A. Investigate this as a network connectivity issue
• B. Install the Identity Awareness Agent
• C. Set static IP to DHCP
• D. After enabling Identity Awareness, reboot the gateway

Answer: C

NEW QUESTION 12
Which of the following actions take place in IKE Phase 2 with Perfect Forward Secrecy disabled?

• A. Symmetric IPsec keys are generated.
• B. Each Security Gateway generates a private Diffie-Hellman (DH) key from random pools.
• C. The DH public keys are exchanged.
• D. Peers authenticate using certificates or preshared secrets.

Answer: B

NEW QUESTION 13
When configuring anti-spoofing on the Security Gateway object interfaces, which of the following is NOT a valid R77 topology configuration?

• A. External
• B. Any
• C. Specific
• D. Not Defined

Answer: B

NEW QUESTION 14
Central license management allows a Security Administrator to perform which of the following functions?
1. Check for expired licenses.
2. Sort licenses and view license properties.
3. Attach both R77 Central and Local licesnes to a remote module.
4. Delete both R77 Local Licenses and Central licenses from a remote module.
5. Add or remove a license to or from the license repository.
6. Attach and/or delete only R77 Central licenses to a remote module (not Local licenses).

• A. 1, 2, 5, & 6
• B. 2, 3, 4, & 5
• C. 2, 5, & 6
• D. 1, 2, 3, 4, & 5

Answer: D

NEW QUESTION 15
If you were NOT using IKE aggressive mode for your IPsec tunnel, how many packets would you see for normal Phase 1 exchange?

• A. 9
• B. 2
• C. 3
• D. 6

Answer: D

NEW QUESTION 16
What information is found in the SmartView Tracker Management log?

• A. Creation of an administrator using cpconfig
• B. GAiA expert login event
• C. FTP username authentication failure
• D. Administrator SmartDashboard logout event

Answer: D

NEW QUESTION 17
What does SmartUpdate allow you to do?

• A. SmartUpdate only allows you to update Check Point and OPSEC certified products.
• B. SmartUpdate only allows you to manage product licenses.
• C. SmartUpdate allows you to update Check Point and OPSEC certified products and to manage product licenses.
• D. SmartUpdate is not a Check Point product.

Answer: C