156-315.77 Online Practice Questions and Answers

Which command would you use to save the routing information before upgrading aSecure PlatformGateway?

A. cp /etc/sysconfig/network.C [location]

B. netstat 璻n > [filename].txt

C. ifconfig > [filename].txt

D. ipconfig

Where do you verify thatSmart Directoryis enabled?

A. Global properties > Authentication> UseSmart Directory(LDAP) for Security Gateways is checked

B. Gateway properties> Smart Directory (LDAP) > UseSmart Directory(LDAP) for Security Gateways is checked

C. Gateway properties > Authentication> UseSmart Directory(LDAP) for Security Gateways is checked

D. Global properties > Smart Directory (LDAP) > UseSmart Directory(LDAP) for Security Gateways is checked

Which of the following commands shows full synchronization status?

A. fw hastat

B. cphaprob -i list

C. cphaprob -a if

D. fw ctl iflist

Which of the following is a supported Sticky Decision Function of Sticky Connections for Load Sharing?

A. Multi-connection support for VPN-1 cluster members

B. Support for all VPN deployments (except those with third-party VPN peers)

C. Support forSecure Client/Secure mote/SSL Network Extender encrypted connections

D. Support for Performance Pack acceleration

What is the reason for the following error?

A. A third-party cluster solution is implemented.

B. Cluster membership is not enabled on the gateway.

C. Objects.C does not contain a cluster object.

D. Device Name contains non-ASCII characters.

In CoreXL, what process is responsible for processing incoming traffic from the network interfaces, securely accelerating authorized packets, and distributing non-accelerated packets among kernel instances?

A. NAD (Network Accelerator Daemon)

B. SND (Secure Network Distributor)

C. SSD (Secure System Distributor)

D. SNP (System Networking Process)

You want only RAS signals to pass through H.323 Gatekeeper and other H.323 protocols, passing directly between end points. Which routing mode in the VoIP Domain Gatekeeper do you select?

A. Direct

B. Direct and Call Setup

C. Call Setup

D. Call Setup and Call Control

To change the default port of the Management Portal:

A. Edit the masters. conf file on the Portal server.

B. Modify the file cp_httpd_admin .conf.

C. Run sysconfig and change the management interface

D. Re-initialize SIC

You are preparing to deploy a VPN-1 Pro Gateway for VPN-1 NGX. You have five systems to choose from for the new Gateway, and you must conform to the following requirements: Operating-system vendor's license agreement

Check Point's license agreement

Minimum operating-system hardware specification

Minimum Gateway hardware specification

Gateway installed on a supported operating system (OS)

Which machine meets ALL of the following requirements?

A. Processor: 1.1 GHz RAM: 512MB Hard disk: 10 GB OS: Windows 2000 Workstation

B. Processor: 2.0 GHz RAM: 512MB Hard disk: 10 GB OS: Windows ME

C. Processor: 1.5 GHz RAM: 256 MB Hard disk: 20 GB OS: Red Hat Linux 8.0

D. Processor: 1.67 GHz RAM: 128 MB Hard disk: 5 GB OS: FreeBSD

E. Processor: 2.2 GHz RAM: 256 MB Hard disk: 20 GB OS: Windows 2000 Server

What is the maximum number of cores supported by CoreXL?

A. 4

B. 8

C. 12

D. 6

What port is used for communication to the UserCenter with SmartUpdate?

A. HTTP

B. HTTPS

C. TCP 8080

D. CPMI

Identify the correct step performed by SmartUpdate to upgrade a remote Security Gateway.

A. After selecting "Packages > Distribute..." and choosing the target gateway, the selected package is copied from the Package Repository on the SmartCenter to the Security Gateway but the installation IS NOT performed.

B. After selecting "Packages > Distribute..." and choosing the target gateway, the SmartUpdate wizard walks the Administrator through a Distributed Installation.

C. After selecting "Packages > Distribute..." and choosing the target gateway, the selected package is copied from the Package Repository on the SmartCenter to the Security Gateway and the installation IS performed.

D. After selecting "Packages > Distribute..." and choosing the target gateway, the selected package is copied from the CDROM of the SmartUpdate PC directly to the Security Gateway and the installation IS performed.

How is Smart Workflow disabled?

A. In cpconfig, choose Disable Smart Workflow from the menu

B. InSmart ViewTracker, click onSmart Workflow> Disable Smart Workflow

C. InSmart Dashboard, click on View > Smart Workflow > Disable Smart Workflow

D. Open Smart Workflow as admin. Create new session and name it Disable Smart Workflow. InSmart Dashboardclick Smart Workflow > Disable Smart Workflow, click OK in the warning box, click Save and Continue

Among the authentication schemes SSL VPN employs for users, which scheme does Check Point recommend so all servers are replicated?

A. User certificates

B. LDAP

C. Username and password

D. RADIUS

You want to upgrade a cluster with two members to R76. The Security Management Server and both members are version NGX R65, with the latest Hotfix Accumulator. What is the correct upgrade procedure?

1.

Change the version in the General Properties of the Gateway-cluster object.

2.

Upgrade the Security Management Server, and reboot.

3.

Run cpstop on one member, while leaving the other member running. Upgrade one member at a time and reboot after upgrade.

4.

Reinstall the Security Policy.

A. 3,2,1,4

B. 2,4,3,1

C. 1,3,2,4

D. 2,3,1,4