The Secret Of CheckPoint 156-915.77 Preparation

NEW QUESTION 1

A ClusterXL configuration is limited to members.

• A. There is no limit.
• B. 16
• C. 6
• D. 2

Answer: C

NEW QUESTION 2

A snapshot delivers a complete GAiA backup. The resulting file can be stored on servers or as a local file in /var/CPsnapshot/snapshots. How do you restore a local snapshot named MySnapshot.tgz?

• A. Reboot the system and call the start men
• B. Select the option Snapshot Management, provide the Expert password and select [L] for a restore from a local fil
• C. Then, provide the correct file name.
• D. As expert user, type the command snapshot -r MySnapshot.tgz.
• E. As expert user, type the command revert --file MySnapshot.tgz.
• F. As expert user, type the command snapshot - R to restore from a local fil
• G. Then, provide the correct file name.

Answer: C

NEW QUESTION 3

You intend to upgrade a Check Point Gateway from R71 to R77. Prior to upgrading, you want to back up the Gateway should there be any problems with the upgrade. Which of the following allows for the Gateway configuration to be completely backed up into a manageable size in the least amount of time?

• A. database revision
• B. snapshot
• C. upgrade_export
• D. backup

Answer: D

NEW QUESTION 4

Suppose the Security Gateway hard drive fails and you are forced to rebuild it. You have a snapshot file stored to a TFTP server and backups of your Security Management Server. What is the correct procedure for rebuilding the Gateway quickly?

• A. Reinstall the base operating system (i.e., GAiA). Configure the Gateway interface so that the Gateway can communicate with the TFTP serve
• B. Revert to the stored snapshot image, and install the Security Policy.
• C. Run the command revert to restore the snapshot, establish SIC, and install the Policy.
• D. Run the command revert to restore the snapsho
• E. Reinstall any necessary Check Point product
• F. Establish SIC and install the Policy.
• G. Reinstall the base operating system (i.e., GAia). Configure the Gateway interface so that the Gateway can communicate with the TFTP serve
• H. Reinstall any necessary Check Point products and previously applied hotfixe
• I. Revert to the stored snapshot image, and install the Policy.

Answer: A

NEW QUESTION 5
CORRECT TEXT
In a zero downtime scenario, which command do you run manually after all cluster members are upgraded?

• A. Yes
• B. Not Mastered

Answer: A

NEW QUESTION 6
Reboot the gateway.

• A.

Answer: B

NEW QUESTION 7

MultiCorp is running Smartcenter R71 on an IPSO platform and wants to upgrade to a new Appliance with R77. Which migration tool is recommended?

• A. Download Migration Tool R77 for IPSO and Splat/Linux from Check Point website.
• B. Use already installed Migration Tool.
• C. Use Migration Tool from CD/ISO
• D. Fetch Migration Tool R71 for IPSO and Migration Tool R77 for Splat/Linux from CheckPoint website

Answer: A

NEW QUESTION 8

Which of the following is a CLI command for Security Gateway R77?

• A. fw tab -u
• B. fw shutdown
• C. fw merge
• D. fwm policy_print <policyname>

Answer: A

NEW QUESTION 9

Looking at the SYN packets in the Wireshark output, select the statement that is true about
NAT.

• A. This is an example of Hide NAT.
• B. There is not enough information provided in the Wireshark capture to determine the NAT settings.
• C. This is an example of Static NAT and Translate destination on client side unchecked in Global Properties.
• D. This is an example of Static NAT and Translate destination on client side checked in Global Properties.

Answer: D

NEW QUESTION 10
CORRECT TEXT
Fill in the blank. You can set Acceleration to ON or OFF using command syntax ____ .

• A. Yes
• B. Not Mastered

Answer: A

NEW QUESTION 11

Which CLI tool helps on verifying proper ClusterXL sync?

• A. fw stat
• B. fw ctl sync
• C. fw ctl pstat
• D. cphaprob stat

Answer: C

NEW QUESTION 12
CORRECT TEXT
To stop acceleration on a GAiA Security Gateway, enter command:

• A. Yes
• B. Not Mastered

Answer: A

NEW QUESTION 13
CORRECT TEXT
Fill in the blank. To verify the SecureXL status, you would enter command ______.

• A. Yes
• B. Not Mastered

Answer: A

NEW QUESTION 14
CORRECT TEXT
Type the command and syntax you would use to verify that your Check Point cluster is functioning correctly.

• A. Yes
• B. Not Mastered

Answer: A

NEW QUESTION 15

When using AD Query to authenticate users for Identity Awareness, identity data is received seamlessly from the Microsoft Active Directory (AD). What is NOT a recommended usage of this method?

• A. Leveraging identity in the application control blade
• B. Basic identity enforcement in the internal network
• C. Identity-based auditing and logging
• D. Identity-based enforcement for non-AD users (non-Windows and guest users)

Answer: D

NEW QUESTION 16

After implementing Static Address Translation to allow Internet traffic to an internal Web Server on your DMZ, you notice that any NATed connections to that machine are being dropped by anti-spoofing protections. Which of the following is the MOST LIKELY cause?

• A. The Global Properties setting Translate destination on client side is unchecke
• B. But the topology on the DMZ interface is set to Internal - Network defined by IP and Mas
• C. Check the Global Properties setting Translate destination on client side.
• D. The Global Properties setting Translate destination on client side is unchecke
• E. But the topology on the external interface is set to Others +. Change topology to External.
• F. The Global Properties setting Translate destination on client side is checke
• G. But the topology on the external interface is set to Externa
• H. Change topology to Others +.
• I. The Global Properties setting Translate destination on client side is checke
• J. But the topology on the DMZ interface is set to Internal - Network defined by IP and Mas
• K. Uncheck the Global Properties setting Translate destination on client side.

Answer: A

NEW QUESTION 17
......