How Many Questions Of 156-915.77 Practice

NEW QUESTION 1

You are MegaCorp’s Security Administrator. There are various network objects which must be NATed. Some of them use the Automatic Hide NAT method, while others use the Automatic Static NAT method. What is the rule order if both methods are used together? Give the BEST answer.

• A. The Administrator decides the rule order by shifting the corresponding rules up and down.
• B. The Static NAT rules have priority over the Hide NAT rules and the NAT on a node has priority over the NAT on a network or an address range.
• C. The Hide NAT rules have priority over the Static NAT rules and the NAT on a node has priority over the NAT on a network or an address range.
• D. The rule position depends on the time of their creatio
• E. The rules created first are placed at the top; rules created later are placed successively below the others.

Answer: B

NEW QUESTION 2

Complete this statement from the options provided. Using Captive Portal, unidentified users may be either; blocked, allowed to enter required credentials, or required to download the___.

• A. Identity Awareness Agent
• B. Full Endpoint Client
• C. ICA Certificate
• D. SecureClient

Answer: A

NEW QUESTION 3
CORRECT TEXT
The command useful for debugging by capturing packet information, including verifying LDAP authentication on all Check Point platforms is

• A. Yes
• B. Not Mastered

Answer: A

NEW QUESTION 4

What are you required to do before running the command upgrade_export?

• A. Run a cpstop on the Security Gateway.
• B. Run a cpstop on the Security Management Server.
• C. Close all GUI clients.
• D. Run cpconfig and set yourself up as a GUI client.

Answer: C

NEW QUESTION 5

The third-shift Administrator was updating Security Management Server access settings in Global Properties. He managed to lock all administrators out of their accounts. How should you unlock these accounts?

• A. Delete the file admin.lock in the Security Management Server directory $FWDIR/tmp/.
• B. Reinstall the Security Management Server and restore using upgrade_import.
• C. Type fwm lock_admin -ua from the Security Management Server command line.
• D. Login to SmartDashboard as the special cpconfig_admin user account; right-click on each administrator object and select unlock.

Answer: C

NEW QUESTION 6
Re-enable "Cluster membership" on the Gateway.

• A. Yes
• B. Not Mastered

Answer: A

NEW QUESTION 7
CORRECT TEXT
Fill in the blank. To save your OSPF configuration in GAiA, enter the command _____.

• A. Yes
• B. Not Mastered

Answer: A

NEW QUESTION 8

Your expanding network currently includes ClusterXL running Multicast mode on two members, as shown in this topology:
Exhibit:

You need to add interfaces: 10.10.10.1/24 on Member A, and 10.10.10.2/24 on Member B. The virtual IP address for these interfaces is 10.10.10.3/24. Both cluster gateways have a Quad card with an available eth3 interface. What is the correct procedure to add these interfaces?

• A. Yes
• B. Not Mastered

Answer: A

NEW QUESTION 9

What is the officially accepted diagnostic tool for IP Appliance Support?

• A. ipsoinfo
• B. CST
• C. uag-diag
• D. cpinfo

Answer: B

NEW QUESTION 10

You have a diskless appliance platform. How do you keep swap file wear to a minimum?

• A. Issue FW-1 bases its package structure on the Security Management Server, dynamically loading when the firewall is booted.
• B. The external PCMCIA-based flash extension has the swap file mapped to it, allowing easy replacement.
• C. Use PRAM flash devices, eliminating the longevity.
• D. A RAM drive reduces the swap file thrashing which causes fast wear on the device.

Answer: D

NEW QUESTION 11

When restoring R77 using the command upgrade_import, which of the following items are NOT restored?

• A. SIC Certificates
• B. Licenses
• C. Route tables
• D. Global properties

Answer: C

NEW QUESTION 12

What command with appropriate switches would you use to test Identity Awareness connectivity?

• A. test_ldap
• B. test_ad_connectivity
• C. test_ldap_connectivity
• D. test_ad

Answer: B

NEW QUESTION 13

You enable Hide NAT on the network object, 10.1.1.0 behind the Security Gateway’s external interface. You browse to the Google Website from host, 10.1.1.10 successfully. You enable a log on the rule that allows 10.1.1.0 to exit the network. How many log entries do you see for that connection in SmartView Tracker?

• A. Two, one for outbound, one for inbound
• B. Only one, outbound
• C. Two, both outbound, one for the real IP connection and one for the NAT IP connection
• D. Only one, inbound

Answer: B

NEW QUESTION 14

How could you compare the Fingerprint shown to the Fingerprint on the server? Run cpconfig and select:
Exhibit:

• A. the Certificate Authority option and view the fingerprint.
• B. the GUI Clients option and view the fingerprint.
• C. the Certificate's Fingerprint option and view the fingerprint.
• D. the Server Fingerprint option and view the fingerprint.

Answer: C

NEW QUESTION 15

An internal host initiates a session to the Google.com website and is set for Hide NAT behind the Security Gateway. The initiating traffic is an example of .

• A. client side NAT
• B. source NAT
• C. destination NAT
• D. None of these

Answer: B

NEW QUESTION 16

Study the Rule base and Client Authentication Action properties screen -

After being authenticated by the Security Gateway, when a user starts an HTTP connection to a Web site, the user tries to FTP to another site using the command line. What happens to the user? The:

• A. user is prompted for authentication by the Security Gateway again.
• B. FTP data connection is dropped after the user is authenticated successfully.
• C. user is prompted to authenticate from that FTP site only, and does not need to enter his username and password for Client Authentication.
• D. FTP connection is dropped by Rule 2.

Answer: C

NEW QUESTION 17

Which three of the following are ClusterXL member requirements?
1) same operating systems
2) same Check Point version
3) same appliance model
4) same policy

• A. 1, 3, and 4
• B. 1, 2, and 4
• C. 2, 3, and 4
• D. 1, 2, and 3

Answer: B

NEW QUESTION 18

Which command displays the installed Security Gateway version?

• A. fw printver
• B. fw ver
• C. fw stat
• D. cpstat -gw

Answer: B

NEW QUESTION 19
CORRECT TEXT
Fill in the blank. The user wants to replace a failed Windows-based firewall with a new server running GAiA. For the most complete restore of an GAiA configuration, he or she will use the command

• A. Yes
• B. Not Mastered

Answer: A

NEW QUESTION 20

You intend to upgrade a Check Point Gateway from R71 to R77. Prior to upgrading, you want to back up the Gateway should there be any problems with the upgrade. Which of the following allows for the Gateway configuration to be completely backed up into a manageable size in the least amount of time?

• A. database revision
• B. snapshot
• C. upgrade_export
• D. backup

Answer: D

NEW QUESTION 21
......