Check Point Certified Security Expert - 156-315.77 Exam Practice Test

Question 1

Which specific R77 GUI would you use to view the length of time a TCP connection was open?

A. SmartView Tracker

B. SmartView Monitor

C. SmartReporter

D. SmartView Status

Correct Answer: A

Question 2

Which statement is TRUE for route-based VPN's?

A. Route-based VPN's are a form of partial overlap VPN Domain.

B. IP Pool NAT must be configured on each Gateway.

C. Route-based VPN's replace domain-based VPN's.

D. Dynamic-routing protocols are not required.

Correct Answer: D

Question 3

What Shell is required in Gaia to use WinSCP?

A. UNIX

B. CLISH

C. Bash

D. CPShell

Correct Answer: C

Question 4

Consider the following actions that VPN-1 NGX can take when it control packets. The Policy Package has been configured for Traditional Mode VPN.
Identify the options that includes the available actions. Select four.

A. Accept

B. Reject

C. Hold

D. Allow

E. Client auth

F. Decrypt

G. Proxy

H. Encrypt

I. Drop

Correct Answer: A,B,H,I

Question 5

Using SmartProvisioning Profiles, which of the following could be configured for both Secure Platform and UTM-1 Edge devices?
(i) Backup
(ii) Routing
(iii) Interfaces
(iv) Hosts
(v) NTP server
(vi) DNS

A. (ii), (iii), (iv) and (vi)

B. (i), (iii), (iv) and (vi)

C. none of these options are available for both.

D. (i), (ii) and (iv)

Correct Answer: C

Question 6

What is the meaning of the option Connect to the Internet?

A. SmartDashboard will retrieve information from Check Point over the Internet.

B. SmartDashboard will retrieve information from Check Point over the Internet. No information will be sent.

C. SmartDashboard will retrieve information from Check Point over the Internet. Your information will be sent anonymously to Check Point.

D. SmartDashboard will retrieve information from Check Point over the Internet using your User Center login.

Correct Answer: D

Question 7

Which VPN Community object is used to configure VPN routing within the
SmartDashboard?

A. Star

B. Mesh

C. Remote Access

D. Map

Correct Answer: A

Question 8

You want to upgrade an NG with Application Intelligence R55 Security Gateway running on SecurePlatform to VPN-1 NGX R65 via SmartUpdate.
Which package(s) is(are) needed in the Repository prior to upgrade?

A. SecurePlatform NGX R65 package

B. VPN-1 Power/UTM NGX R65 package

C. SecurePlatform and VPN-1 Power/UTM NGX R65 packages

D. SVN Foundation and VPN-1 Power/UTM packages

Correct Answer: A

Question 9

What is the purpose of the pre-defined exclusions included with SmartEvent R77?

A. As a base for starting and building exclusions.

B. To allow SmartEvent R77 to function properly with all other R71 devices.

C. To give samples of how to write your own exclusion.

D. To avoid incorrect event generation by the default IPS event definition; a scenario that may occur in deployments that include Security Gateways of versions prior to R71.

Correct Answer: D

Question 10

CORRECT TEXT
Fill in the blanks.
To view the number of concurrent connections going through your firewall, you would use the command and syntax _____ _____ _____ _____ _____.

Correct Answer:

fw tab -t connections -s

Question 11

If Jack was concerned about the number of log entries he would receive in the SmartReporter system, which policy would he need to modify?

A. Smartreporter Policy

B. Consolidation Policy

C. Log Consolidator Policy

D. Log Sequence Policy

Correct Answer: A

Question 12

Domain name can NOT be changed in Smart Provisioning and Domain Name is grayed out.
What is a possible reason for this?

A. Override profile setting on device level is set to Mandatory.

B. There is no Smart Provisioning license installed.

C. Domain name settings are always fetched from firewall object.

D. Profile is not assigned to any Gateway.

Correct Answer: A

Question 13

What can be said about RSA algorithms? Select all that apply.

A. Long keys can be used in RSA for enhances security

B. RSA is faster to compute than DES

C. Short keys can be used for RSA efficiency.

D. RSA's key length is variable.

Correct Answer: A,C,D

Question 14

To back up all events stored in the SmartEvent Server, you should back up the contents of which folder(s)?

A. $FWDIR/distrib

B. $RTDIR/events_db

C. $FWDIR/distrib_db and $FWDIR/events

D. $RTDIR/distrib and $RTDIR/events_db

Correct Answer: D

Question 15

Organizations are sometimes faced with the need to locate cluster members in different geographic locations that are distant from each other. A typical example is replicated data centers whose location is widely separated for disaster recovery purposes. What are the restrictions of this solution?

A. There is one restriction: The synchronization network must guarantee no more than 100 ms latency.

B. There are no restrictions.

C. There is one restriction: The synchronization network must guarantee no more than 150 ms latency (ITU Standard G.114).

D. There are two restrictions: 1. The synchronization network must guarantee no more than
100ms latency and no more than 5% packet loss. 2. The synchronization network may only include switches and hubs.

Correct Answer: D

CheckPoint Check Point Certified Security Expert - 156-315.77 Exam Practice Test

Latest Update

Useful Links

Contact Us