What Breathing 156-915.77 Exam Price Is

NEW QUESTION 1

What is the syntax for uninstalling a package using newpkg?

• A. -u <pathname of package>
• B. -i <full pathname of package>
• C. -S <pathname of package>
• D. newpkg CANNOT be used to uninstall a package

Answer: D

NEW QUESTION 2

Which of the following items should be configured for the Security Management Server to authenticate via LDAP?

• A. Check Point Password
• B. Active Directory Server object
• C. Windows logon password
• D. WMI object

Answer: B

NEW QUESTION 3

Several Security Policies can be used for different installation targets. The Firewall protecting Human Resources’ servers should have its own Policy Package. These rules must be installed on this machine and not on the Internet Firewall. How can this be accomplished?

• A. A Rule Base is always installed on all possible target
• B. The rules to be installed on a Firewall are defined by the selection in the Rule Base row Install On.
• C. When selecting the correct Firewall in each line of the Rule Base row Install On, only this Firewall is shown in the list of possible installation targets after selecting Policy > Install on Target.
• D. In the menu of SmartDashboard, go to Policy > Policy Installation Targets and select the correct firewall via Specific Targets.
• E. A Rule Base can always be installed on any Check Point Firewall objec
• F. It is necessary to select the appropriate target directly after selecting Policy > Install on Target.

Answer: C

NEW QUESTION 4

Which two processes are responsible on handling Identity Awareness?

• A. pdp and lad
• B. pdp and pdp-11
• C. pep and lad
• D. pdp and pep

Answer: D

NEW QUESTION 5

Which of the following options is available with the GAiA cpconfig utility on a Management Server?

• A. Export setup
• B. DHCP Server configuration
• C. GUI Clients
• D. Time & Date

Answer: C

NEW QUESTION 6

What is the primary benefit of using the command upgrade_export over either backup or snapshot?

• A. upgrade_export is operating system independent and can be used when backup or snapshot is not available.
• B. upgrade_export will back up routing tables, hosts files, and manual ARP configurations, where backup and snapshot will not.
• C. The commands backup and snapshot can take a long time to run whereas upgrade_export will take a much shorter amount of time.
• D. upgrade_export has an option to back up the system and SmartView Tracker logs while backup and snapshot will not.

Answer: A

NEW QUESTION 7

When a packet is flowing through the security gateway, which one of the following is a valid inspection path?

• A. Acceleration Path
• B. Small Path
• C. Firewall Path
• D. Medium Path

Answer: D

NEW QUESTION 8

Which of the following commands can provide the most complete restoration of a R77 configuration?

• A. upgrade_import
• B. cpinfo -recover
• C. cpconfig
• D. fwm dbimport -p <export file>

Answer: A

NEW QUESTION 9

Your company is running Security Management Server R77 on GAiA, which has been migrated through each version starting from Check Point 4.1. How do you add a new administrator account?

• A. Using SmartDashboard, under Users, select Add New Administrator
• B. Using SmartDashboard or cpconfig
• C. Using the Web console on GAiA under Product configuration, select Administrators
• D. Using cpconfig on the Security Management Server, choose Administrators

Answer: A

NEW QUESTION 10

You are trying to configure Directional VPN Rule Match in the Rule Base. But the Match column does not have the option to see the Directional Match. You see the following window.

What must you enable to see the Directional Match?

• A. directional_match(true) in the objects_5_0.C file on Security Management Server
• B. VPN Directional Match on the Gateway object’s VPN tab
• C. VPN Directional Match on the VPN advanced window, in Global Properties
• D. Advanced Routing on each Security Gateway

Answer: C

NEW QUESTION 11
Install the Security Policy.

• A. Yes
• B. Not Mastered

Answer: A

NEW QUESTION 12

Your internal network is configured to be 10.1.1.0/24. This network is behind your perimeter R77 Gateway, which connects to your ISP provider. How do you configure the Gateway to allow this network to go out to the Internet?

• A. Use Hide NAT for network 10.1.1.0/24 behind the external IP address of your perimeter Gateway.
• B. Use Hide NAT for network 10.1.1.0/24 behind the internal interface of your perimeter Gateway.
• C. Use automatic Static NAT for network 10.1.1.0/24.
• D. Do nothing, as long as 10.1.1.0 network has the correct default Gateway.

Answer: A

NEW QUESTION 13

You are the Security Administrator for ABC-Corp. A Check Point Firewall is installed and in use on GAiA. You are concerned that the system might not be retaining your entries for the interfaces and routing configuration. You would like to verify your entries in the corresponding file(s) on GAiA. Where can you view them? Give the BEST answer.

• A. /etc/sysconfig/netconf.C
• B. /etc/conf/route.C
• C. /etc/sysconfig/network-scripts/ifcfg-ethx
• D. /etc/sysconfig/network

Answer: A

NEW QUESTION 14

Which command allows you to view the contents of an R77 table?

• A. fw tab -a <tablename>
• B. fw tab -t <tablename>
• C. fw tab -s <tablename>
• D. fw tab -x <tablename>

Answer: B

NEW QUESTION 15
CORRECT TEXT
MultiCorp is located in Atlanta. It has a branch office in Europe, Asia, and Africa. Each location has its own AD controller for local user login. How many ADqueries have to be configured?

• A. Yes
• B. Not Mastered

Answer: A

NEW QUESTION 16

You find that Users are not prompted for authentication when they access their Web servers, even though you have created an HTTP rule via User Authentication. Choose the BEST reason why.

• A. You checked the cache password on desktop option in Global Properties.
• B. Another rule that accepts HTTP without authentication exists in the Rule Base.
• C. You have forgotten to place the User Authentication Rule before the Stealth Rule.
• D. Users must use the SecuRemote Client, to use the User Authentication Rule.

Answer: B

NEW QUESTION 17

Which operating systems are supported by a Check Point Security Gateway on an open server? Select MOST complete list.

• A. Sun Solaris, Red Hat Enterprise Linux, Check Point SecurePlatform, IPSO, Microsoft Windows
• B. Check Point GAiA and SecurePlatform, and Microsoft Windows
• C. Check Point GAiA, Microsoft Windows, Red Hat Enterprise Linux, Sun Solaris, IPSO
• D. Check Point GAiA and SecurePlatform, IPSO, Sun Solaris, Microsoft Windows

Answer: B

NEW QUESTION 18
CORRECT TEXT
Fill in the blank. To enter the router shell, use command .

• A. Yes
• B. Not Mastered

Answer: A

NEW QUESTION 19

Your company’s Security Policy forces users to authenticate to the Gateway explicitly, before they can use any services. The Gateway does not allow the Telnet service to itself from any location. How would you configure authentication on the Gateway? With a:

• A. Client Authentication rule using the manual sign-on method, using HTTP on port 900
• B. Client Authentication rule, using partially automatic sign on
• C. Client Authentication for fully automatic sign on
• D. Session Authentication rule

Answer: A

NEW QUESTION 20

Which of the following tools is used to generate a Security Gateway R77 configuration report?

• A. fw cpinfo
• B. infoCP
• C. cpinfo
• D. infoview

Answer: C

NEW QUESTION 21
......