The Down To Date Guide To 156-215.77 Free Demo

NEW QUESTION 1
You are working with three other Security Administrators.
Which SmartConsole component can be used to monitor changes to rules or object properties made by the other administrators?

• A. Eventia Tracker
• B. SmartView Monitor
• C. Eventia Monitor
• D. SmartView Tracker

Answer: D

NEW QUESTION 2
When configuring the Check Point Gateway network interfaces, you can define the direction as Internal or External. What does the option Interface leads to DMZ mean?
Exhibit:

• A. Using restricted Gateways, this option automatically turns off the counting of IP Addresses originating from this interface.
• B. Activating this option automatically turns this interface to External.
• C. It defines the DMZ Interface since this information is necessary for Content Control
• D. Select this option to automatically configure Anti-Spoofing to this net.

Answer: C

NEW QUESTION 3
Where are custom queries stored in R77 SmartView Tracker?

• A. On the SmartView Tracker PC local file system under the user's profile.
• B. On the Security Management Server tied to the GUI client IP.
• C. On the Security Management Server tied to the Administrator User Database login name.
• D. On the SmartView Tracker PC local file system shared by all users of that local PC.

Answer: C

NEW QUESTION 4
Which item below in a Security Policy would be enforced first?

• A. IP spoofing/IP options
• B. Security Policy First rule
• C. Administrator-defined Rule Base
• D. Network Address Translation

Answer: A

NEW QUESTION 5
Your company has two headquarters, one in London, one in New York. Each of the headquarters includes several branch offices. The branch offices only need to communicate with the headquarters in their country, not with each other, and the headquarters need to communicate directly. What is the BEST configuration for establishing VPN Communities among the branch offices and their headquarters, and between the two headquarters? VPN Communities comprised of:

• A. Three mesh Communities: one for London headquarters and its branches; one for New York headquarters and its branches; and one for London and New York headquarters.
• B. Two mesh and one star Community: Each mesh Community is set up for each site between headquarters their branche
• C. The star Community has New York as the center and London as its satellite.
• D. Two star communities and one mesh: A star community for each city with headquarters as center, and branches as satellite
• E. Then one mesh community for the two headquarters.
• F. One star Community with the option to mesh the center of the star: New York and London Gateways added to the center of the star with the “mesh center Gateways? option checked; all London branch offices defined in one satellite window; but, all New York branch offices defined in another satellite window.

Answer: C

NEW QUESTION 6
Which of the following is a CLI command for Security Gateway R77?

• A. fw tab -u
• B. fw shutdown
• C. fw merge
• D. fwm policy_print <policyname>

Answer: A

NEW QUESTION 7
Match the following commands to their correct function. Each command has one function only listed.
Exhibit:

• A. C1>F6; C2>F4; C3>F2; C4>F5
• B. C1>F2; C2>F1; C3>F6; C4>F4
• C. C1>F2; C2>F4; C3>F1; C4>F5
• D. C1>F4; C2>F6; C3>F3; C4>F2

Answer: A

NEW QUESTION 8
The Security Gateway is installed on GAiA R77 The default port for the Web User Interface is .

• A. TCP 18211
• B. TCP 443
• C. TCP 4433
• D. TCP 257

Answer: B

NEW QUESTION 9
Which R77 feature or command allows Security Administrators to revert to earlier Security Policy versions without changing object configurations?

• A. upgrade_export/upgrade_import
• B. fwm dbexport/fwm dbimport
• C. Database Revision Control
• D. Policy Package management

Answer: C

NEW QUESTION 10
How do you configure the Security Policy to provide user access to the Captive Portal through an external (Internet) interface?

• A. Change the gateway settings to allow Captive Portal access via an external interface.
• B. No action is necessar
• C. This access is available by default.
• D. Change the Identity Awareness settings under Global Properties to allow Captive Portal access on all interfaces.
• E. Change the Identity Awareness settings under Global Properties to allow Captive Portal access for an external interface.

Answer: A

NEW QUESTION 11
You are installing a Security Management Server. Your security plan calls for three administrators for this particular server. How many can you create during installation?

• A. One
• B. Only one with full access and one with read-only access
• C. As many as you want
• D. Depends on the license installed on the Security Management Server

Answer: A

NEW QUESTION 12
Your boss wants you to closely monitor an employee suspected of transferring company secrets to the competition. The IT department discovered the suspect installed a WinSCP client in order to use encrypted communication. Which of the following methods is BEST to accomplish this task?

• A. Use SmartView Tracker to follow his actions by filtering log entries that feature the WinSCP destination por
• B. Then, export the corresponding entries to a separate log file for documentation.
• C. Use SmartDashboard to add a rule in the firewall Rule Base that matches his IP address, and those of potential targets and suspicious protocol
• D. Apply the alert action or customized messaging.
• E. Watch his IP in SmartView Monitor by setting an alert action to any packet that matches your Rule Base and his IP address for inbound and outbound traffic.
• F. Send the suspect an email with a keylogging Trojan attached, to get direct information about his wrongdoings.

Answer: A

NEW QUESTION 13
You need to back up the routing, interface, and DNS configuration information from your R77 GAiA Security Gateway. Which backup-and-restore solution do you use?

• A. Manual copies of the directory $FWDIR/conf
• B. GAiA back up utilities
• C. upgrade_export and upgrade_import commands
• D. Database Revision Control

Answer: B

NEW QUESTION 14
You are running a R77 Security Gateway on GAiA. In case of a hardware failure, you have a server with the exact same hardware and firewall version installed. What back up method could be used to quickly put the secondary firewall into production?

• A. manual backup
• B. upgrade_export
• C. backup
• D. snapshot

Answer: D

NEW QUESTION 15
If you were NOT using IKE aggressive mode for your IPsec tunnel, how many packets would you see for normal Phase 1 exchange?

• A. 9
• B. 2
• C. 3
• D. 6

Answer: D

NEW QUESTION 16
What is the officially accepted diagnostic tool for IP Appliance Support?

• A. ipsoinfo
• B. CST
• C. uag-diag
• D. cpinfo

Answer: D

NEW QUESTION 17
ALL of the following options are provided by the GAiA sysconfig utility, EXCEPT:

• A. Export setup
• B. DHCP Server configuration
• C. Time & Date
• D. GUI Clients

Answer: D

NEW QUESTION 18
What information is found in the SmartView Tracker Management log?

• A. Creation of an administrator using cpconfig
• B. GAiA expert login event
• C. FTP username authentication failure
• D. Administrator SmartDashboard logout event

Answer: D

NEW QUESTION 19
You are trying to save a custom log query in R77 SmartView Tracker, but getting the following error:
Could not save <query-name> (Error: Database is Read Only) Which of the following is a likely explanation for this?

• A. Another administrator is currently connected to the Security Management Server with read/write permissions which impacts your ability to save custom log queries to the Security Management Server.
• B. You do not have OS write permissions on the local SmartView Tracker PC in order to save the custom query locally.
• C. You have read-only rights to the Security Management Server database.
• D. You do not have the explicit right to save a custom query in your administrator permission profile under SmartConsole customization.

Answer: C

NEW QUESTION 20
......