Top Tips Of Up To The Minute 156-215.77 Testing Bible

NEW QUESTION 1
Where can an administrator specify the notification action to be taken by the firewall in the event that available disk space drops below 15%?

• A. SmartView Monitor > Gateway Status > Threshold Settings
• B. SmartView Tracker > Audit Tab > Gateway Counters
• C. SmartView Monitor > Gateway Status > System Information > Thresholds
• D. This can only be monitored by a user-defined script.

Answer: C

NEW QUESTION 2
You are using SmartView Tracker to troubleshoot NAT entries. Which column do you check to view the NAT'd source port if you are using Source NAT?

• A. XlateDst
• B. XlateSPort
• C. XlateDPort
• D. XlateSrc

Answer: B

NEW QUESTION 3
Which of the following methods is NOT used by Identity Awareness to catalog identities?

• A. AD Query
• B. Captive Portal
• C. Identity Agent
• D. GPO

Answer: D

NEW QUESTION 4
Which of the following statements accurately describes the command snapshot?

• A. snapshot creates a full OS-level backup, including network-interface data, Check Point product information, and configuration settings during an upgrade of a GAiA Security Gateway.
• B. snapshot creates a Security Management Server full system-level backup on any OS.
• C. snapshot stores only the system-configuration settings on the Gateway.
• D. A Gateway snapshot includes configuration settings and Check Point product information from the remote Security Management Server.

Answer: A

NEW QUESTION 5
You are the Security Administrator for MegaCorp. A Check Point firewall is installed and in use on a platform using GAiA. You have trouble configuring the speed and duplex settings of your Ethernet interfaces. Which of the following commands can be used in CLISH to configure the speed and duplex settings of an Ethernet interface and will survive a reboot? Give the BEST answer.

• A. ethtool
• B. set interface <options>
• C. mii_tool
• D. ifconfig -a

Answer: B

NEW QUESTION 6
A Cleanup rule:

• A. logs connections that would otherwise be dropped without logging by default.
• B. drops packets without logging connections that would otherwise be dropped and logged by default.
• C. logs connections that would otherwise be accepted without logging by default.
• D. drops packets without logging connections that would otherwise be accepted and logged by default.

Answer: A

NEW QUESTION 7
Central license management allows a Security Administrator to perform which of the following functions?
1. Check for expired licenses.
2. Sort licenses and view license properties.
3. Attach both R77 Central and Local licesnes to a remote module.
4. Delete both R77 Local Licenses and Central licenses from a remote module.
5. Add or remove a license to or from the license repository.
6. Attach and/or delete only R77 Central licenses to a remote module (not Local licenses).

• A. 1, 2, 5, & 6
• B. 2, 3, 4, & 5
• C. 2, 5, & 6
• D. 1, 2, 3, 4, & 5

Answer: D

NEW QUESTION 8
The SIC certificate is stored in the directory .

• A. $CPDIR/registry
• B. $CPDIR/conf
• C. $FWDIR/database
• D. $FWDIR/conf

Answer: B

NEW QUESTION 9
What happens if you select Web Server in the dialog box? Exhibit:

• A. An implied rule will be added allowing HTTP requests to the host.
• B. Anti-virus settings will be applied to the host.
• C. Web Intelligence will be applied to the host.
• D. An implied rule will be added allowing HTTP request from and to the host.

Answer: C

NEW QUESTION 10
You manage a global network extending from your base in Chicago to Tokyo, Calcutta and Dallas. Management wants a report detailing the current software level of each Enterprise class Security Gateway. You plan to take the opportunity to create a proposal outline, listing the most cost-effective way to upgrade your Gateways.
Which two SmartConsole applications will you use to create this report and outline?

• A. SmartView Tracker and SmartView Monitor
• B. SmartLSM and SmartUpdate
• C. SmartDashboard and SmartView Tracker
• D. SmartView Monitor and SmartUpdate

Answer: D

NEW QUESTION 11
Which of the following is a hash algorithm?

• A. 3DES
• B. IDEA
• C. DES
• D. MD5

Answer: D

NEW QUESTION 12
Tom has been tasked to install Check Point R77 in a distributed deployment. Before Tom installs the systems this way, how many machines will he need if he does NOT include a SmartConsole machine in his calculations?

• A. Three machines
• B. One machine
• C. Two machines
• D. One machine, but it needs to be installed using SecurePlatform for compatibility purposes

Answer: C

NEW QUESTION 13
Your company is still using traditional mode VPN configuration on all Gateways and policies. Your manager now requires you to migrate to a simplified VPN policy to benefit from the new features. This needs to be done with no downtime due to critical applications which must run constantly. How would you start such a migration?

• A. This cannot be done without downtime as a VPN between a traditional mode Gateway and a simplified mode Gateway does not work.
• B. This can not be done as it requires a SIC- reset on the Gateways first forcing an outage.
• C. You first need to completely rewrite all policies in simplified mode and then push this new policy to all Gateways at the same time.
• D. Convert the required Gateway policies using the simplified VPN wizard, check their logic and then migrate Gateway per Gateway.

Answer: D

NEW QUESTION 14
Your bank’s distributed R77 installation has Security Gateways up for renewal.
Which SmartConsole application will tell you which Security Gateways have licenses that will expire within the next 30 days?

• A. SmartView Tracker
• B. SmartPortal
• C. SmartUpdate
• D. SmartDashboard

Answer: C

NEW QUESTION 15
What type of traffic can be re-directed to the Captive Portal?

• A. SMTP
• B. HTTP
• C. All of the above
• D. FTP

Answer: B

NEW QUESTION 16
Can you use Captive Portal with HTTPS?

• A. No, it only works with FTP
• B. No, it only works with FTP and HTTP
• C. Yes
• D. No, it only works with HTTP

Answer: C

NEW QUESTION 17
Which of the below is the MOST correct process to reset SIC from SmartDashboard?

• A. Run cpconfig, and click Reset.
• B. Click the Communication button for the firewall object, then click Rese
• C. Run cpconfig and type a new activation key.
• D. Run cpconfig, and select Secure Internal Communication > Change One Time Password.
• E. Click Communication > Reset on the Gateway object, and type a new activation key.

Answer: B

NEW QUESTION 18
Which SmartConsole tool would you use to see the last policy pushed in the audit log?

• A. SmartView Tracker
• B. None, SmartConsole applications only communicate with the Security Management Server.
• C. SmartView Status
• D. SmartView Server

Answer: A

NEW QUESTION 19
......