Check Point 156-215.77 Exam Questions 2021

NEW QUESTION 1
Which feature in R77 permits blocking specific IP addresses for a specified time period?

• A. Suspicious Activity Monitoring
• B. HTTP Methods
• C. Local Interface Spoofing
• D. Block Port Overflow

Answer: A

NEW QUESTION 2
You have just installed your Gateway and want to analyze the packet size distribution of your traffic with SmartView Monitor.

Unfortunately, you get the message.
"There are no machines that contain Firewall Blade and SmartView Monitor."

What should you do to analyze the packet size distribution of your traffic? Give the BEST answer.

• A. Purchase the SmartView Monitor license for your Security Management Server.
• B. Enable Monitoring on your Security Management Server.
• C. Purchase the SmartView Monitor license for your Security Gateway.
• D. Enable Monitoring on your Security Gateway.

Answer: D

NEW QUESTION 3
What is the purpose of a Stealth Rule?

• A. To prevent users from connecting directly to the gateway.
• B. To permit management traffic.
• C. To drop all traffic to the management server that is not explicitly permitted.
• D. To permit implied rules.

Answer: A

NEW QUESTION 4
If a SmartUpdate upgrade or distribution operation fails on GAiA, how is the system recovered?

• A. The Administrator can only revert to a previously created snapshot (if there is one) with the command cprinstall snapshot <object name> <filename>.
• B. The Administrator must reinstall the last version via the command cprinstall revert <object name> <file name>.
• C. The Administrator must remove the rpm packages manually, and re-attempt the upgrade.
• D. GAiA will reboot and automatically revert to the last snapshot version prior to upgrade.

Answer: D

NEW QUESTION 5
You are reviewing the Security Administrator activity for a bank and comparing it to the change log. How do you view Security Administrator activity?

• A. SmartView Tracker cannot display Security Administrator activity; instead, view the system logs on the Security Management Server’s Operating System.
• B. SmartView Tracker in Network and Endpoint Mode
• C. SmartView Tracker in Active Mode
• D. SmartView Tracker in Management Mode

Answer: D

NEW QUESTION 6
Which of the following objects is a valid source in an authentication rule?

• A. Host@Any
• B. User@Network
• C. User_group@Network
• D. User@Any

Answer: C

NEW QUESTION 7
By default, when you click File > Switch Active File in SmartView Tracker, the Security Management Server:

• A. Saves the current log file, names the log file by date and time, and starts a new log file.
• B. Purges the current log file, and starts a new log file.
• C. Prompts you to enter a filename, and then saves the log file.
• D. Purges the current log file, and prompts you for the new log’s mode.

Answer: A

NEW QUESTION 8
Match the terms with their definitions: Exhibit:

• A. A-3, B-2, C-4, D-1
• B. A-2, B-3, C-4, D-1
• C. A-3, B-2, C-1, D-4
• D. A-3, B-4, C-1, D-2

Answer: A

NEW QUESTION 9
Jack has locked himself out of the Kirk Security Gateway with an incorrect policy and can no longer connect from the McCoy Management Server.
Jack still has access to an out of band console connection on the Kirk Security Gateway. He is logged into the Gaia CLI, what does he need to enter in order to be able to fix his mistake and push policy?

• A. Kirk> fw unload local
• B. Kirk> fw unloadlocal
• C. Kirk> fw unload policy
• D. Kirk> fw fetch policy

Answer: B

NEW QUESTION 10
What happens when you select File > Export from the SmartView Tracker menu?

• A. Current logs are exported to a new *.log file.
• B. Exported log entries are not viewable in SmartView Tracker.
• C. Logs in fw.log are exported to a file that can be opened by Microsoft Excel.
• D. Exported log entries are deleted from fw.log.

Answer: C

NEW QUESTION 11
NAT can NOT be configured on which of the following objects?

• A. HTTP Logical Server
• B. Gateway
• C. Address Range
• D. Host

Answer: A

NEW QUESTION 12
Your company is running Security Management Server R77 on GAiA, which has been migrated through each version starting from Check Point 4.1.
How do you add a new administrator account?

• A. Using SmartDashboard, under Users, select Add New Administrator
• B. Using SmartDashboard or cpconfig
• C. Using the Web console on GAiA under Product configuration, select Administrators
• D. Using cpconfig on the Security Management Server, choose Administrators

Answer: A

NEW QUESTION 13
What happens when you run the command. fw sam -J src [Source IP Address]?

• A. Connections from the specified source are blocked without the need to change the Security Policy.
• B. Connections to the specified target are blocked without the need to change the Security Policy.
• C. Connections to and from the specified target are blocked without the need to change the Security Policy.
• D. Connections to and from the specified target are blocked with the need to change the Security Policy.

Answer: A

NEW QUESTION 14
Which item below in a Security Policy would be enforced first?

• A. IP spoofing/IP options
• B. Security Policy First rule
• C. Administrator-defined Rule Base
• D. Network Address Translation

Answer: A

NEW QUESTION 15
How do you use SmartView Monitor to compile traffic statistics for your company’s Internet Web activity during production hours?

• A. Select Tunnels view, and generate a report on the statistics.
• B. Configure a Suspicious Activity Rule which triggers an alert when HTTP traffic passes through the Gateway.
• C. Use Traffic settings and SmartView Monitor to generate a graph showing the total HTTP traffic for the day.
• D. View total packets passed through the Security Gateway.

Answer: C

NEW QUESTION 16
What mechanism does a gateway configured with Identity Awareness and LDAP initially use to communicate with a Windows 2003 or 2008 server?

• A. WMI
• B. CIFS
• C. RCP
• D. LDAP

Answer: A

NEW QUESTION 17
_____ is an R77 component that displays the number of packets accepted, rejected, and dropped on a specific Security Gateway, in real time.

• A. SmartEvent
• B. SmartView Status
• C. SmartUpdate
• D. SmartView Monitor

Answer: D