156-915.77 Online Practice Questions and Answers

Before upgrading SecurePlatform to GAiA, you should create a backup. To save time, many administrators use the command backup. This creates a backup of the Check Point configuration as well as the system configuration.

An administrator has installed the latest HFA on the system for fixing traffic problem after creating a backup file. There is a mistake in the very complex static routing configuration. The Check Point configuration has not been changed. Can the administrator use a restore to fix the errors in static routing?

A. The restore is not possible because the backup file does not have the same build number (version).

B. The restore is done by selecting Snapshot Management from the boot menu of GAiA.

C. The restore can be done easily by the command restore and copying netconf.C from the production environment.

D. A backup cannot be restored, because the binary files are missing.

You intend to upgrade a Check Point Gateway from R71 to R77. Prior to upgrading, you want to back up the Gateway should there be any problems with the upgrade. Which of the following allows for the Gateway configuration to be completely backed up into a manageable size in the least amount of time?

A. database revision

B. snapshot

C. upgrade_export

D. backup

You enable Automatic Static NAT on an internal host node object with a private IP address of 10.10.10.5, which is NATed into 216.216.216.5. (You use the default settings in Global Properties / NAT.)

When you run fw monitor on the R77 Security Gateway and then start a new HTTP connection from host

10.10.10.5 to browse the Internet, at what point in the monitor output will you observe the HTTP SYN-ACK packet translated from 216.216.216.5 back into 10.10.10.5?

A. o=outbound kernel, before the virtual machine

B. I=inbound kernel, after the virtual machine

C. O=outbound kernel, after the virtual machine

D. i=inbound kernel, before the virtual machine

You cannot use SmartDashboard's User Directory features to connect to the LDAP server. What should you investigate?

1) Verify you have read-only permissions as administrator for the operating system.

2) Verify there are no restrictions blocking SmartDashboard's User Manager from connecting to the LDAP server.

3) Check that the login Distinguished Name configured has root permission (or at least write permission Administrative access) in the LDAP Server's access control configuration.

A. 1, 2, and 3

B. 2 and 3

C. 1 and 2

D. 1 and 3

Charles requests a Website while using a computer not in the net_singapore network.

What is TRUE about his location restriction?

A. Source setting in Source column always takes precedence.

B. Source setting in User Properties always takes precedence.

C. As location restrictions add up, he would be allowed from net_singapore and net_sydney.

D. It depends on how the User Auth object is configured; whether User Properties or Source Restriction takes precedence.

Which of the following allows administrators to allow or deny traffic to or from a specific network based on the user's credentials?

A. Access Policy

B. Access Role

C. Access Rule

D. Access Certificate

Which of the following items should be configured for the Security Management Server to authenticate using LDAP?

A. Login Distinguished Name and password

B. Windows logon password

C. Check Point Password

D. WMI object

In a zero downtime scenario, which command do you run manually after all cluster members are upgraded?

A. cphaconf set_ccp multicast

MegaCorp is running Smartcenter R70, some Gateways at R65 and some other Gateways with R60. Management wants to upgrade to the most comprehensive IPv6 support. What should the administrator do first?

A. Upgrade Smartcenter to R77 first.

B. Upgrade R60-Gateways to R65.

C. Upgrade every unit directly to R77.

D. Check the ReleaseNotes to verify that every step is supported.

Which process should you debug if SmartDashboard login fails?

A. sdm

B. cpd

C. fwd

D. fwm

A ClusterXL configuration is limited to ___ members.

A. There is no limit.

B. 16

C. 6

D. 2

Match the ClusterXL modes with their configurations. Exhibit:

A. A-2, B-3, C-4, D-1

B. A-2, B-3, C-1, D-5

C. A-3, B-5, C-1, D-4

D. A-5, B-2, C-4, D-1

Type the full cphaprob command and syntax that will show full synchronization status.

A. cphaprob -i list

What is the purpose of the pre-defined exclusions included with SmartEvent R77?

A. To allow SmartEvent R77 to function properly with all other R71 devices.

B. To avoid incorrect event generation by the default IPS event definition; a scenario that may occur in deployments that include Security Gateways of versions prior to R71.

C. As a base for starting and building exclusions.

D. To give samples of how to write your own exclusion.

How do you verify the Check Point kernel running on a firewall?

A. fw ctl get kernel

B. fw ctl pstat

C. fw kernel

D. fw ver -k