Check Point Certified Security Expert Update Blade

Question 1

What firewall kernel table stores information about port allocations for Hide NAT connections?

A. fwx_alloc

B. NAT_src_any_list

C. NAT_dst_any_list

D. host_ip_addrs

Correct Answer: A

Question 2

Where do you define NAT properties so that NAT is performed either client side or server side?

A. In Smart Dashboard in the NAT Rules

B. In file $DFWDIR/lib/table.def

C. In Smart Dashboard under Gateway setting

D. In Smart Dashboard under Global Properties > NAT definition

Correct Answer: D

Question 3

Concerning these products: Secure Platform, VPN-1 Pro Gateway, User Authority Server,
Nokia OS, UTM-1, Eventia Reporter, and Performance Pack, which statement is TRUE?

A. All but Performance Pack can be upgraded to VPN-1 NGX R65 with Smart Update.

B. All can be upgraded to VPN-1 NGX R65 with Smart Update.

C. All but the UTM-1 can be upgraded to VPN-1 NGX R65 with Smart Update.

D. All but the Nokia OS can be upgraded to VPN-1 NGX R65 with Smart Update.

Correct Answer: B

Question 4

Your organization has many VPN-1 Edge gateways at various branch offices, to allow VPN-1 Secure Client users to access company resources. For security reasons, your organization's Security Policy requires all Internet traffic initiated behind the VPN-1 Edge gateways first be inspected by your headquarters' VPN-1 Pro Security Gateway. How do you configure VPN routing in this star VPN Community?

A. To the center only

B. To the center; or through the center to other satellites, then to the Internet and other VPN targets

C. To the center and other satellites, through the center

D. To the Internet and other targets only

Correct Answer: B

Question 5

You are running thelicense upgradetool on your Secure Platform Gateway. Which of the following can you NOT do with the upgrade tool?

A. View the licenses in the Smart Update License Repository.

B. View the status of currently installed licenses.

C. Perform the actual license-upgrade process.

D. Simulate the license-upgrade process.

Correct Answer: A

Question 6

By default, a standby Security Management Server is automatically synchronized by an active Security Management Server, when:

A. The Security Policy is saved.

B. The standby Security Management Server starts for the first time.

C. The user data base is installed.

D. The Security Policy is installed.

Correct Answer: D

Question 7

Which Check Point QoS feature allows a Security Administrator to define special classes of service for delay-sensitive applications?

A. Weighted Fair Queuing

B. Low Latency Queuing

C. Differentiated Services

D. Guarantees

Correct Answer: B

Question 8

Which of the following is NOT an advantage of Smart Log?

A. Smart Log creates an index of log entries, increasing query speed.

B. Smart Log displays query results across multiple log files, reducing the need to open previous files to view results.

C. Smart Log requires less disk space by consolidating log entries into fewer records.

D. Smart Log has a "Top Results" pane showing things like top sources, rules, and users.

Correct Answer: C

Question 9

Your network traffic requires preferential treatment by other routers on the network, in addition to the QoS Module, which Check Point QoS feature should you use?

A. Weighted Fair Queuing

B. Low Latency Queuing

C. Limits

D. Differentiated Services

E. Guarantees

Correct Answer: D

Question 10

After repairing a Smart Workflow session:

A. The session is discarded and a new session is automatically started.

B. The session moves to status Awaiting Repair and must be resubmitted.

C. The session is continued with status Not approved and a new session must be started.

D. The session moves to status Repaired and a new session can be started.

Correct Answer: D

Question 11

CORRECT TEXT
To stop acceleration on a GAiA Security Gateway, enter command ________ .

Correct Answer:

fwaccel off

Question 12

When using ClusterXL in Load Sharing, what is the default method?

A. IPs, SPIs

B. IPs, Ports, SPIs

C. IPs, Ports

D. IPs

Correct Answer: B

Question 13

Security server configuration settings are stored in _______________ .

A. $FWDIR/conf/AMT.conf

B. $FWDIR/conf/fwauthd.conf

C. $FWDIR/conf/fwrl.conf

D. $FWDIR/conf/fwopsec.conf

Correct Answer: B

Question 14

You are concerned that the processor for your firewall running NGX R71 Secure Platform may be overloaded. What file would you view to determine the speed of your processor(s)?

A. cat /etc/sysconfig/cpuinfo

B. cat /etc/cpuinfo

C. cat /proc/cpuinfo

D. cat /var/opt/CPsuite-R71/fw1/conf/cpuinfo

Correct Answer: C

CheckPoint Check Point Certified Security Expert Update Blade - 156-915.77 Exam Practice Test

Latest Update

Useful Links

Contact Us