Checkpoint 156-315.77 today updated questions - Verified by Checkpoint Experts

Check Point Certified Security Expert Questions and Answers

Question 1

Which of the following is the preferred method for adding static routes in GAiA?

Options:

In the CLI with the command “route add”

In Web Portal, under Network Management > IPv4 Static Routes

In the CLI via sysconfig

In SmartDashboard under Gateway Properties > Topology

Question 2

You are preparing computers for a new ClusterXL deployment. For your cluster, you plan to use three machines with the following configurations:

Cluster Member 1: OS - GAiA; NICs - QuadCard; Memory - 1 GB; Security Gateway - version: R71 and primary Security Management Server installed, version: R77

Cluster Member 2: OS - GAiA; NICs - 4 Intel 3Com; Memory - 1 GB; Security Gateway only, version: R77

Cluster Member 3: OS - GAiA; NICs - 4 other manufacturers; Memory - 512 MB; Security Gateway only, version: R77

Are these machines correctly configured for a ClusterXL deployment?

Options:

No, Cluster Member 3 does not have the required memory.

Yes, these machines are configured correctly for a ClusterXL deployment.

No, the Security Management Server is not running the same operating system as the cluster members.

No, the Security Gateway cannot be installed on the Security Management Server.

Question 3

MegaCorp has two different types of hardware with Check Point GAiA installed and set up as gateways. The Administrator wants to provide redundancy in case one of them fails. Choose the best approach.

Options:

Configure Gateway HA

Configure Management HA for gateways

Configure ClusterXL

Configure VRRP

Question 4

Which protocol can be used to provide logs to third-party reporting?

Options:

CPMI (Check Point Management Interface)

LEA (Log Export API)

AMON (Application Monitoring)

ELA (Event Logging API)

Question 5

When using migrate to upgrade a Secure Management Server, which of the following is included in the migration?

Options:

System interface configuration

SmartEvent database

classes.C file

SmartReporter database

Question 6

During a Security Management Server migrate export, the system:

Options:

Creates a backup file that includes the SmartEvent database.

Creates a backup archive for all the Check Point configuration settings.

Saves all system settings and Check Point product configuration settings to a file.

Creates a backup file that includes the SmartReporter database.

Question 7

The process _____ is responsible for GUI Client communication with the SmartCenter.

Options:

CPGUI

CPD

FWD

FWM

Question 8

A snapshot delivers a complete backup of GAiA. How do you restore a local snapshot named MySnapshot.tgz?

Options:

Reboot the system and call the start menu. Select option Snapshot Management, provide the Expert password and select [L] for a restore from a local file. Then, provide the correct file name.

As Expert user, type command snapshot - R to restore from a local file. Then, provide the correct file name.

As Expert user, type command revert --file MySnapshot.tgz.

As Expert user, type command snapshot -r MySnapshot.tgz.

Question 9

Typically, when you upgrade the Security Management Server, you install and configure a fresh R77 installation on a new computer and then migrate the database from the original machine.

What is the correct order of the steps below to successfully complete this procedure?

1) Export databases from source.

2) Connect target to network.

3) Prepare the source machine for export.

4) Import databases to target.

5) Install new version on target.

6) Test target deployment.

Options:

3, 1, 5, 4, 2, 6

5, 2, 6, 3, 1, 4

3, 5, 1, 4, 6, 2

6, 5, 3, 1, 4, 2

Question 10

What is the correct policy installation process order?

1) Verification

2) Code generation and compilation

3) Initiation

4) Commit

5) Conversion

6) CPTA

Options:

1, 2, 3, 4, 5, 6

3, 1, 5, 2, 6, 4

4, 2, 3, 5, 6, 1

6, 5, 4, 3, 2, 1

Question 11

Public keys and digital certificates provide which of the following? Select three.

Options:

Non repudiation

Data integrity

Availability

Authentication

Question 12

If a digital signature is used to achieve both data-integrity checking and verification of sender, digital signatures are only used when implementing:

Options:

A symmetric-encryption algorithm

CBL-DES

Triple DES

An asymmetric-encryption algorithm

Question 13

For a dedicated DLP Gateway that runs in inline bridge mode, why is it important to properly define the topology?

Options:

Topology definition is necessary for correct anti-spoofing.

Topology is used for Hide NAT.

By default. My Organization is defined by the internal interfaces of a DLP Gateway.

Topology definition is used for VPN communities definition.

Question 14

Network applications accessed using SSL Network Extender have been found to fail after one of their TCP connections has been left idle for more than one hour.

You determine that you must enable sending reset (RST) packets upon TCP time-out expiration.

Where is it necessary to change the setting?

Options:

$FWDIR/conf/objects_5_0.C

$FWDIR/conf/objects.C

$WEBISDIR/conf/cpadmin.elg

$CVPNDIR/conf/cvpnd.C

Question 15

You need to verify the effectiveness of your IPS configuration for your Web server farm.

You have a colleague run penetration tests to confirm that the Web servers are secure against traffic hijacks.

Of the following, which would be the best configuration to protect from a traffic hijack attempt?

Options:

Enable the Web intelligence > SQL injection setting.

Activate the Cross-Site Scripting property.

Configure TCP defenses such as Small PMTU size.

Create resource objects for the Web farm servers and configure rules for the Web farm.

Question 16

Which changes are tracked by SmartWorkflow?

Options:

SmartDashboard, SmartView Tracker and SmartView Monitor logins and logouts

Security Policies and the Rule Base, Network Objects, Network Services, VPN Communities.

Users, Administrators, Groups and VPN Communities

Security Policies and the Rule Base, Network Objects, Network Services, Resources, Users, Administrators, Groups, VPN Communities and Servers and OPSEC Applications.

Question 17

What command will stop all (and only) Management Portal services?

Options:

cpstop

spstop

sportalstop

smartportalstop

Question 18

When upgrading to NGX R65, which Check Point products do not require a license upgrade to be current?

Options:

VPN-1 NGX (R64) and later

VPN-1 NGX (R60) and later

VPN-1 NG with Application Intelligence (R54) and later

None, all versions require a license upgrade

Question 19

Which of the following can NOT be done on the Management Portal?

Options:

Set the Management Portal to use HTTP instead of HTTPS

Configure Management Portal to bypass authentication when connecting from a specific IP address

Restrict hosts / networks that can access the portal

Run the Management Portal on a port other than the default port 4433

Question 20

What is the bit size of DES?

Options:

112

168

128

Question 21

MultiCorp is running Smartcenter R71 on an IPSO platform and wants to upgrade to a new Appliance with R77. Which migration tool is recommended?

Options:

Download Migration Tool R77 for IPSO and Splat/Linux from Check Point website.

Use already installed Migration Tool.

Use Migration Tool from CD/ISO

Fetch Migration Tool R71 for IPSO and Migration Tool R77 for Splat/Linux from CheckPoint website

Question 22

MegaCorp is running Smartcenter R70, some Gateways at R65 and some other Gateways with R60. Management wants to upgrade to the most comprehensive IPv6 support. What should the administrator do first?

Options:

Upgrade Smartcenter to R77 first.

Upgrade R60-Gateways to R65.

Upgrade every unit directly to R77.

Check the ReleaseNotes to verify that every step is supported.

Question 23

Paul has just joined the MegaCorp security administration team. Natalie, the administrator, creates a new administrator account for Paul in SmartDashboard and installs the policy. When Paul tries to login it fails. How can Natalie verify whether Paul’s IP address is predefined on the security management server?

Options:

Type cpconfig on the Management Server and select the option “GUI client List” to see if Paul’s IP address is listed.

Login in to Smart Dashboard, access Global Properties, and select Security Management, to verify whether Paul’s IP address is listed.

Access the WEBUI on the Security Gateway, and verify whether Paul’s IP address is listed as a GUI client.

Question 24

Fill in the blank.

In Load Sharing Unicast mode, the internal cluster IP address is 10.4.8.3. The internal interfaces on two members are 10.4.8.1 and 10.4.8.2. Internal host 10.4.8.108 Pings 10.4.8.3, and receives replies. The following is the ARP table from the internal Windows host 10.4.8.108.

Review the exhibit and type the IP address of the member serving as the pivot machine in the space below.

Options:

Question 25

Fill in the blank.

Write the full fw command and syntax that you would use to troubleshoot ClusterXL sync issues.

Options:

Question 26

Jon is explaining how the inspection module works to a colleague. If a new connection passes through the inspection module and the packet matches the rule, what is the next step in the process?

Options:

Verify if another rule exists.

Verify if any logging or alerts are defined.

Verify if the packet should be moved through the TCP/IP stack.

Verify if the packet should be rejected.

Question 27

Fill in the blank.

Type the command and syntax that you would use to view the virtual cluster interfaces of a ClusterXL environment.

Options:

Question 28

Fill in the blank.

The command useful for debugging by capturing packet information, including verifying LDAP authentication on all Check Point platforms is _____

Options:

Question 29

Fill in the blank.

In New Mode HA, the internal cluster IP VIP address is 10.4.8.3. An internal host 10.4.8.108 successfully pings its Cluster and receives replies.

Review the ARP table from the internal Windows host 10.4.8.108. Based on this information, what is the active cluster member’s IP address?

Options:

Question 30

Fill in the blank.

In New Mode HA, the internal cluster IP VIP address is 10.4.8.3. The internal interfaces on two members are 10.4.8.1 and 10.4.8.2 Internal host 10.4.8.108 pings 10.4.8.3, and receives replies.

Review the ARP table from the internal Windows host 10.4.8.108. According to the output, which member is the standby machine?

Options:

Question 31

Which of the following is a CLI command for Security Gateway R77?

Options:

fw merge

fw tab -u

fw shutdown

fwm policy_print

Question 32

You intend to upgrade a Check Point Gateway from R65 to R76.

To avoid problems, you decide to back up the Gateway.

Which approach allows the Gateway configuration to be completely backed up into a manageable size in the least amount of time?

Options:

snapshot

database revision

backup

upgrade export

Question 33

Your primary SmartCenter Server is installed on a Secure PlatformPro machine, which is also a VPN-1 Pro Gateway. You want to implement Management High Availability (HA). You have a spare machine to configure as the secondary SmartCenter Server. How do you configure the new machine to be the standby SmartCenter Server, without making any changes to the existing primary SmartCenter Server? (Changes can include uninstalling and reinstalling.)

Options:

You cannot configure Management HA, when either the primary or secondary SmartCenter Server is running on a VPN-1 Pro Gateway.

The new machine cannot be installed as the Internal Certificate Authority on its own.

The secondary Server cannot be installed on a SecurePlatform Pro machine alone.

Install the secondary Server on the spare machine. Add the new machine to the same network as the primary Server.

Question 34

Which task will ThreatSpect Engine NOT do?

Options:

Look for suspicious activity by monitoring outgoing mail traffic

Review the IPS signatures

Review the networks signatures for Bot families

Perform a reputation check

Question 35

In Company XYZ, the DLP Administrator defined a new template Data Type that is based on an empty PDF form for an insurance claim.

Which of the following statements about this new data type are CORRECT?

Options:

Only completed insurance claim forms of PDF file-type that were based on the empty PDF form will be matched by this Data Type.

If the empty PDF insurance claim form is sent, it will NOT be matched by this Data Type.

Word, Excel, PDF filled in insurance claim forms that were based on the empty PDF insurance claim form will be matched by this Data Type.

The Data Type will match only files where the name and file size is similar to that of the original insurance claim forms in PDF format.

Question 36

John is the Security Administrator in his company. He installs a new R77 Security Management Server and a new R77 Gateway. He now wants to establish SIC between them. After entering the activation key, he gets the following message in SmartDashboard - "Trust established" SIC still does not seem to work because the policy won't install and interface fetching does not work. What might be a reason for this?

Options:

It always works when the trust is established

This must be a human error.

SIC does not function over the network.

The Gateway's time is several days or weeks in the future and the SIC certificate is not yet valid.

Question 37

The TotallyCoolSecurity Company has a large security staff. Bob configured a new IPS Chicago_Profile for fw-chicago using Detect mode. After reviewing logs, Matt noticed that fw-Chicago is not detecting any of the IPS protections that Bob had previously setup.

Analyze the output below and determine how Matt can correct the problem.

Options:

Matt should assign the fw-chicago Security Gateway to the Chicago_Profile.

Matt should change the Chicago_Profile to use Protect mode because Detect mode will not work.

Matt should re-create the Chicago_Profile and select Activate protections manually instead of per the IPS Policy.

Matt should activate the Chicago_Profile as it is currently not activated.

Question 38

Jack needs to configure CoreXL on his Red Security Gateway. What are the correct steps to enable CoreXL?

Options:

SSH to Red Security Gateway, run cpconfig > select Configure Check Point CoreXL > enable CoreXL > exit cpconfig > reboot the Security Gateway

SSH to Red Security Gateway, run cpconfig > select Configure Check Point CoreXL > exit cpconfig > reboot the Security Gateway

Open the SmartDashboard, Open the Red Check Point Object, select ClusterXL, check the CoreXL box, and push policy

Open the SmartDashboard, Open the Red Check Point Object, select Optimizations, check the CoreXL box, and push policy

Question 39

You have installed a R77 Security Gateway on GAiA. To manage the Gateway from the enterprise Security Management Server, you create a new Gateway object and Security Policy.

When you install the new Policy from the Policy menu, the Gateway object does not appear in the Install Policy window as a target. What is the problem?

Options:

The new Gateway's temporary license has expired.

The object was created with Node > Gateway.

The Gateway object is not specified in the first policy rule column Install On.

No Masters file is created for the new Gateway.

Question 40

Which of the following commands can be used to stop Management portal services?

Options:

fw stopportal

cpportalstop

cpstop / portal

smartportalstop

Question 41

For Management High Availability, if an Active SMS goes down, does the Standby SMS automatically take over?

Options:

Yes, if you set up VRRP

Yes, if you set up ClusterXL

No, the transition should be initiated manually

Yes, if you set up SecureXL

Question 42

In Management High Availability, what is an Active SMS?

Options:

Active Security Master Server

Active Smart Master Server

Active Smart Management Server

Active Security Management Server

Question 43

What configuration change must you make to change an existing ClusterXL cluster object from Multicast to Unicast mode?

Options:

Change the cluster mode to Unicast on the cluster object. Reinstall the Security Policy.

Change the cluster mode to Unicast on each of the cluster-member objects.

Run cpstop and cpstart, to re-enable High Availability on both objects. Select Pivot mode in cpconfig.

Reset Secure Internal Communications (SIC) on the cluster-member objects. Reinstall the Security Policy.

Question 44

When a packet is flowing through the security gateway, which one of the following is a valid inspection path?

Options:

Acceleration Path

Small Path

Firewall Path

Medium Path

Question 45

Which method of load balancing describes “Round Robin”?

Options:

Assigns service requests to servers at random.

Ensures that incoming requests are handled by the server with the fastest response time.

Measures the load on each server to determine which server has the most available resources.

Assigns service requests to the next server in a series.

Question 46

What SmartConsole application allows you to change the SmartReporter Policy?

Options:

SmartDashboard

SmartReporter

SmartEvent Server

SmartUpdate

Question 47

You are reviewing computer information collected in ClientInfo. You can NOT:

Options:

Run Google.com search using the contents of the selected cell.

Enter new credential for accessing the computer information.

Save the information in the active tab to an .exe file.

Copy the contents of the selected cells.

Question 48

How can you disable SecureXL via the command line (it does not need to survive a reboot)?

Options:

fw ctl accel off

securexl off

fwaccel off

fw xl off

Question 49

Fill in the blank. The command that typically generates the firewall application, operating system, and hardware specific drivers is _____.

Options:

Question 50

_____ manages Standard Reports and allows the administrator to specify automatic uploads of reports to a central FTP server.

Options:

SmartReporter Database

SmartReporter

SmartDashboard Log Consolidator

Security Management Server

Question 51

The process that performs the authentication for SSL VPN Users is:

Options:

cpd

cvpnd

fwm

vpnd

Question 52

Which process should you debug if SmartDashboard login fails?

Options:

sdm

cpd

fwd

fwm

Question 53

Control connections between the Security Management Server and the Gateway are not encrypted by the VPN Community. How are these connections secured?

Options:

They are not secured.

They are not encrypted, but are authenticated by the Gateway

They are encrypted and authenticated using SIC.

They are secured by PPTP

Question 54

When configuring an LDAP Group object, select option _____ if you want the gateway to reference a specific group defined on the LDAP server for authentication purposes.

Options:

Group Agnostic

All Account-Unit's Users

Only Sub Tree

Only Group in Branch

Question 55

What is the proper command for importing users into the R77 User Database?

Options:

fwm importusrs

fwm dbimport

fwm import

fwm importdb

Question 56

Which of the following is a valid Active Directory designation for user Jane Doe in the MIS department of AcmeCorp.com?

Options:

Cn=jane_doe,ou=MIS,dc=acmecorp,dc=com

Cn= jane_doe,ou=MIS,cn=acmecorp,dc=com

Cn= jane_doe,ca=MIS,dc=acmecorp,dc=com

Cn= jane_doe,ca=MIS,cn=acmecorp,dc=com

Question 57

User definitions are stored in _____.

Options:

$FWDIR/conf/users.NDB

$FWDIR/conf/fwmuser.conf

$FWDIR/conf/fwusers.conf

$FWDIR/conf/fwauth.NDB

Question 58

Fill in the blank.

MultiCorp is located in Atlanta. It has a branch office in Europe, Asia, and Africa. Each location has its own AD controller for local user login. How many ADqueries have to be configured?

Options:

Question 59

When an Endpoint user is able to authenticate but receives a message from the client that it is unable to enforce the desktop policy, what is the most likely scenario?

Options:

The gateway could not locate the user in SmartDirectory and is allowing the connection with limitations based on a generic profile.

The user’s rights prevent access to the protected network.

A Desktop Policy is not configured.

The user is attempting to connect with the wrong Endpoint client.

Question 60

The process _____ is responsible for the authentication for Remote Access clients.

Options:

fwm

vpnd

cvpnd

cpd

Question 61

What does the command vpn crl_zap do?

Options:

Nothing, it is not a valid command

Erases all CRL’s from the gateway cache

Erases VPN certificates from cache

Erases CRL’s from the management server cache

Question 62

Which graded parameters help determine the protections to activate for security and which can be safely deactivated? Select the most correct answer.

Options:

Type, Severity, Confidence level, Performance impact, Geo information.

Severity, Confidence level, Performance impact, Protection type.

Type, Severity, Confidence level, Performance impact.

Type, Severity, Confidence level, Performance impact, Protection type.

Question 63

Katie has enabled User Directory and applied the license to Security Management Server, Green. Her supervisor has asked her to configure the Password Strength options of the least one digit, one symbol, 8 characters long and include an uppercase character. How should she accomplish this?

Options:

Open the SmartDashboard, Select Global properties, select Identity Awareness; check the boxes for Password must include an upper character, Password must include a digit, Password must include a symbol and change the password length to 8 characters.

Open the SmartDashboard, Select Global properties, select User Authority; check the boxes for Password must include an upper character, Password must include a digit and Password must include a symbol.

Open the SmartDashboard, Select Global Properties, select User Directory, check the boxes for Password must include an uppercase character, Password must include a digit, and Password must include a symbol.

Open the SmartDashboard, Select Global Properties, select User Directory, check the boxes for Password must include an uppercase character, Password must include a digit, Password must include a symbol and change the password length to 8 characters.

Question 64

In GAiA, if one is unsure about a possible command, what command lists all possible commands.

Options:

show all |grep commands

show configuration

show commands

get all commands

Question 65

Lilly has generated an IKE debug on her Security Gateway. She has asked Jack to transfer the file to Support. Where is the file located?

Options:

$FWDIR/log/ike.elg

$FWDIR/opt/vpnd.elg

$FWDIR/opt/ike.elg

$FWDIR/log/vpnd.elg

Question 66

Which of the following is NOT an internal/native Check Point command?

Options:

fwaccel on

fw ctl debug

tcpdump

cphaprob

Question 67

In Gaia, the operating system can be changed to 32-bit or 64-bit, provided the processor supports 64-bit. What command toggles to 64-bit.

Options:

set bitrate 64

set edition default 64

configure edition 64-bit

set edition default 64-bit

Question 68

Fill in the blank.

You can set Acceleration to ON or OFF using command syntax _____.

Options:

Question 69

How do you verify the Check Point kernel running on a firewall?

Options:

fw ver -k

fw ctl pstat

fw ctl get kernel

fw kernel

Question 70

Frank is concerned with performance and wants to configure the affinities settings. His gateway does not have the Performance pack running. What would Frank need to perform in order configure those settings?

Options:

Edit affinity.conf and change the settings

Run fw affinity and change the settings

Edit $FWDIR/conf/fwaffinity.conf and change the settings

Run sim affinity and change the settings

Question 71

Where do you define NAT properties so that NAT is performed either client side or server side? In SmartDashboard under:

Options:

Gateway Setting

NAT Rules

Global Properties > NAT definition

Implied Rules

Question 72

The “MAC Magic” value must be modified under the following condition:

Options:

There is more than one cluster connected to the same VLAN

A firewall cluster is configured to use Multicast for CCP traffic

There are more than two members in a firewall cluster

A firewall cluster is configured to use Broadcast for CCP traffic

Question 73

What firewall kernel table stores information about port allocations for Hide NAT connections?

Options:

NAT_dst_any_list

NAT_alloc

NAT_src_any_list

fwx_alloc

Question 74

What is the proper CLISH syntax to configure a default route via 192.168.255.1 in GAiA?

Options:

set static-route default nexthop gateway address 192.168.255.1 priority 1 on

set static-route 192.168.255.0/24 nexthop gateway logical ethl on

set static-route 192.168.255.0/24 nexthop gateway address 192.168.255.1 priority 1 on

set static-route nexthop default gateway logical 192.168.255.1 priority 1 on

Question 75

You are the MegaCorp Security Administrator. This company uses a firewall cluster, consisting of two cluster members. The cluster generally works well but one day you find that the cluster is behaving strangely. You assume that there is a connectivity problem with the cluster synchronization link (cross-over cable). Which of the following commands is the BEST for testing the connectivity of the crossover cable?

Options:

ifconfig -a

arping

telnet

ping

Question 76

Which is NOT a method through which Identity Awareness receives its identities?

Options:

AD Query

Group Policy

Identity Agent

Captive Portal

Question 77

Which of the following access options would you NOT use when configuring Captive Portal?

Options:

From the Internet

Through all interfaces

Through internal interfaces

Through the Firewall policy

Question 78

When using Captive Portal to send unidentified users to a Web portal for authentication, which of the following is NOT a recommended use for this method?

Options:

For deployment of Identity Agents

Identity-based enforcement for non-AD users (non-Windows and guest users)

Leveraging identity in Internet application control

Basic identity enforcement in the internal network

Question 79

Which two processes are responsible on handling Identity Awareness?

Options:

pdp and lad

pdp and pdp-11

pep and lad

pdp and pep

Question 80

In the following cluster configuration; if you reboot sglondon_1 which device will be active when sglondon_1 is back up and running? Why?

Options:

sglondon_1 because it the first configured object with the lowest IP.

sglondon_2 because sglondon_1 has highest IP.

sglondon_1, because it is up again, sglondon_2 took over during reboot.

sglondon_2 because it has highest priority.

Question 81

You want to upgrade a cluster with two members to VPN-1 NGX. The Smart CenterServer and both members are version VPN-1/Firewall-1 NG FP3, with the latest Hotfix.

What is the correct upgrade procedure?

1. Change the version, in the General Properties of the gateway-cluster object.

2. Upgrade the Smart CenterServer, and reboot after upgrade.

3. Run cpstop on one member, while leaving the other member running. Upgrade one member at a time, and reboot after upgrade.

4. Reinstall the Security Policy.

Options:

3, 2, 1, 4

2, 4, 3, 1

1, 3, 2, 4

2, 3, 1, 4

1, 2, 3, 4

Question 82

A Smart ProvisioningGateway could be a member of which VPN communities?

(i) Center In Star Topology

(ii) Satellite in Star Topology

(iii) Carter in Remote Access Community

(iv) Meshed Community

Options:

(ii) and (iii)

All

(i), (ii) and (iii)

(ii) only

Question 83

Match the Best Management High Availability synchronization-status descriptions for your Security Management Server (SMS):

Options:

A - 3, B - 1, C - 2, D - 4

A - 3, B - 1, C - 4, D - 2

A - 4, B - 3, C - 1, D - 2

A - 3, B - 2, C - 1, D - 4

Question 84

Based on the following information, which of the statements below is FALSE?

A DLP Rule Base has the following conditions:

Data Type =Password Protected File

Source=My Organization

Destination=Outside My Organization

Protocol=Any

Action=Ask User

Exception: Data Type=Any,

Source=Research and Development (R&D)

Destination=Pratner1.com

Protocol=Any

All other rules are set to Detect. User Check is enabled and installed on all client machines.

Options:

When a user from R&D sends an e-mail with a password protected PDF file as an attachment to xyz@partner1 .com, he will be prompted by User Check.

When a user from Finance sends an e-mail with an encrypted ZIP file as an attachment to. He will be prompted by User Check.

Another rule is added: Source = R&D, Destination = partner1.com, Protocol = Any, Action = Inform. When a user from R&D sends an e-mail with an encrypted ZIP file as an attachment to, he will be prompted by User Check.

When a user from R&D sends an e-mail with an encrypted ZIP file as an attachment to , he will NOT be prompted by User Check.

Question 85

In Company XYZ, the DLP Administrator defined a new Keywords Data Type that contains a list of secret project names; i.e., Ayalon, Yarkon, Yarden. The threshold is set to At least 2 keywords or phrases. Based on this information, which of the following scenarios will be a match to the Rule Base?

Options:

A PDF file that contains the following textYarkon1 can be the code name for the new product.Yardens list of protected sites

An MS Excel file that contains the following text Mort resources for Yarkon project..Are you certain this is about Yarden?

A word file that contains the following text will match:AyalonayalonAYALON

A password protected MS Excel file that contains the following text AyalonYarkonYarden

Question 86

What command will allow you to disable sync on a cluster firewall member?

Options:

fw ctl syncstat stop

fw ctl setsync off

fw ctl setsync 0

fw ctl syncstat off

Question 87

What is the lowest possible version a Security Gateway may be running in order to use it as an LSM enabled Gateway?

Options:

NG-AI R55 HFAJ7

NGX R60

NGXR65HFA_50

NGX R71

Question 88

Match the SmartDashboard session status icons with the appropriate SmartWorkflow session status:

Options:

1-A, 2-B, 3-C, 4-D, 5-E

1-B, 2-A, 3-D, 4-E, 5-C

1-C, 2-B, 3-A, 4-D, 5-E

1-E, 2-D, 3-C, 4-B, 5-A

Question 89

What Smart Console application allows you to change the Log Consolidation Policy?

Options:

Smart Dashboard

Smart Reporter

Smart Update

Smart Event Server

Question 90

Which technology is responsible for assembling packet streams and passing ordered data to the protocol parsers in IPS?

Options:

Pattern Matcher

Content Management Infrastructure

Accelerated INSPECT

Packet Streaming Layer

Question 91

You are trying to configure Directional VPN Rule Match in the Rule Base. But the Match column does not have the option to see the Directional Match. You see the following window. What must you enable to see the Directional Match?

Exhibit:

Options:

directional_match (true) in the objects_5_0.C file on Security Management Server

VPN Directional Match on the Gateway object’s VPN tab

VPN Directional Match on the VPN advanced window, in Global Properties

Advanced Routing on each Security Gateway

Question 92

What is the command to show OSPF adjacencies?

Options:

show ospf summary-address

show ospf interface

show ospf neighbors

show running-config

Question 93

A VPN Tunnel Interface (VTI) is defined on GAiA as:

vpn shell interface add numbered 10.10.0.1 10.10.0.2 madrid.cp

What do you know about this VTI?

Options:

10.10.0.1 is the local Gateway’s internal interface, and 10.10.0.2 is the internal interface of the remote Gateway.

The peer Security Gateway’s name is madrid.cp.

The VTI name is madrid.cp.

The local Gateway's object name is madrid.cp.

Question 94

Review the following list of actions that Security Gateway R75 can take when it controls packets. The Policy Package has been configured for Simplified Mode VPN. Select the response below that includes the available actions:

Options:

Accept, Reject, Encrypt, Drop

Accept, Hold, Reject, Proxy

Accept, Drop, Reject, Client Auth

Accept, Drop, Encrypt, Session Auth

Question 95

What type of object may be explicitly defined as a MEP VPN?

Options:

Star VPN Community

Any VPN Community

Mesh VPN Community

Remote Access VPN Community

Question 96

Which of the following statements is TRUE concerning MEP VPN’s?

Options:

MEP Security Gateways can be managed by separate Management Servers.

The VPN Client is assigned a Security Gateway to connect to based on a priority list, should the first connection fail.

State synchronization between Security Gateways is required.

MEP VPN’s are restricted to the location of the gateways.

Question 97

Which type of VPN routing relies on a VPN Tunnel Interface (VTI) to route traffic?

Options:

Host-based VPN

Route-based VPN

Domain-based VPN

Subnet-based VPN

Question 98

Which of the following is TRUE concerning numbered VPN Tunnel Interfaces (VTIs)?

Options:

VTIs are assigned only local addresses, not remote addresses

VTIs cannot share IP addresses

VTIs are only supported on IPSO

VTIs cannot use an already existing physical-interface IP address

Question 99

There are times when you want to use Link Selection to manage high-traffic VPN connections. With Link Selection you can:

Options:

Assign links to specific VPN communities.

Probe links for availability.

Use links based on authentication method.

Use links based on Day/Time.

Question 100

When configuring numbered VPN Tunnel Interfaces (VTIs) in a clustered environment, what issues need to be considered?

1) Each member must have a unique source IP address.

2) Every interface on each member requires a unique IP address.

3) All VTI's going to the same remote peer must have the same name.

4) Cluster IP addresses are required.

Options:

1, 2, and 4

2 and 3

1, 2, 3 and 4

1, 3, and 4

Load More 156-315.77 Questions

Labour Day Special Limited Time 70% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: 70percent

Checkpoint 156-315.77 Check Point Certified Security Expert Exam Practice Test

Check Point Certified Security Expert Questions and Answers

Options:

Answer:

Options:

Answer:

Options:

Answer:

Options:

Answer:

Options:

Answer:

Options:

Answer:

Options:

Answer:

Options:

Answer:

Options:

Answer:

Options:

Answer:

Options:

Answer:

Options:

Answer:

Options:

Answer:

Options:

Answer:

Options:

Answer:

Options:

Answer:

Options:

Answer:

Options:

Answer:

Options:

Answer:

Options:

Answer:

Options:

Answer:

Options:

Answer:

Options:

Answer:

Options:

Answer:

Options:

Answer:

Options:

Answer:

Options:

Answer:

Options:

Answer:

Options:

Answer:

Options:

Answer:

Options:

Answer:

Options:

Answer:

Options:

Answer:

Options:

Answer:

Explanation:

Options:

Answer:

Options:

Answer:

Options:

Answer:

Options:

Answer: