The Down To Date Guide To 156-915.77 Dumps

NEW QUESTION 1
CORRECT TEXT
Fill in the blanks. To view the number of concurrent connections going through core 0 on the firewall, you would use the command and syntax _____.

• A. Yes
• B. Not Mastered

Answer: A

NEW QUESTION 2
CORRECT TEXT
In a zero downtime firewall cluster environment, what command syntax do you run to avoid switching problems around the cluster for command cphaconf?

• A. Yes
• B. Not Mastered

Answer: A

NEW QUESTION 3

Which command will erase all CRL’s?

• A. vpn crladmin
• B. cpstop/cpstart
• C. vpn crl_zap
• D. vpn flush

Answer: C

NEW QUESTION 4
CORRECT TEXT
Type the command and syntax to view critical devices on a cluster member in a ClusterXL environment.

• A. Yes
• B. Not Mastered

Answer: A

NEW QUESTION 5

Users with Identity Awareness Agent installed on their machines login with , so that when the user logs into the domain, that information is also used to meet Identity Awareness credential requests.

• A. Key-logging
• B. ICA Certificates
• C. SecureClient
• D. Single Sign-On

Answer: D

NEW QUESTION 6
CORRECT TEXT
Fill in the blank. To remove site-to-site IKE and IPSEC keys you would enter command ____ and select the option to delete all IKE and IPSec SA’s.

• A. Yes
• B. Not Mastered

Answer: A

NEW QUESTION 7
Update the topology in the cluster object for the cluster and both members.

• A. Yes
• B. Not Mastered

Answer: A

NEW QUESTION 8
Update the new topology in the cluster object from SmartDashboard.

• A. Yes
• B. Not Mastered

Answer: A

NEW QUESTION 9
CORRECT TEXT
Write the full fw command and syntax that you would use to troubleshoot ClusterXL sync issues.

• A. Yes
• B. Not Mastered

Answer: A

NEW QUESTION 10

Which of the following are authentication methods that Security Gateway R77 uses to validate connection attempts? Select the response below that includes the MOST complete list of valid authentication methods.

• A. Proxied, User, Dynamic, Session
• B. Connection, User, Client
• C. User, Client, Session
• D. User, Proxied, Session

Answer: C

NEW QUESTION 11

MegaCorp is using SmartCenter Server with several gateways. Their requirements result in a heavy log load. Would it be feasible to add the SmartEvent Correlation Unit and SmartEvent Server to their SmartCenter Server?

• A. N
• B. SmartCenter SIC will interfere with the function of SmartEvent.
• C. N
• D. If SmartCenter is already under stress, the use of a separate server for SmartEvent is recommended.
• E. No, SmartEvent and Smartcenter cannot be installed on the same machine at the same time.
• F. Ye
• G. SmartEvent must be installed on your SmartCenter Server.

Answer: B

NEW QUESTION 12
CORRECT TEXT
Type the full cphaprob command and syntax that will show full synchronization status.

• A. Yes
• B. Not Mastered

Answer: A

NEW QUESTION 13

What is the purpose of the pre-defined exclusions included with SmartEvent R77?

• A. To allow SmartEvent R77 to function properly with all other R71 devices.
• B. To avoid incorrect event generation by the default IPS event definition; a scenario that may occur in deployments that include Security Gateways of versions prior to R71.
• C. As a base for starting and building exclusions.
• D. To give samples of how to write your own exclusion.

Answer: B

NEW QUESTION 14

How can you check whether IP forwarding is enabled on an IP Security Appliance?

• A. clish -c show routing active enable
• B. cat /proc/sys/net/ipv4/ip_forward
• C. echo 1 > /proc/sys/net/ipv4/ip_forward
• D. ipsofwd list

Answer: D

NEW QUESTION 15

Use the table to match the BEST Management High Availability synchronication-status descriptions for your Security Management Server (SMS).
Exhibit:

• A. A-5, B-3, C-1, D-2
• B. A-3, B-1, C-4, D-2
• C. A-3, B-5, C-2, D-4
• D. A-3, B-1, C-5, D-4

Answer: D

NEW QUESTION 16

Your users are defined in a Windows 2008 R2 Active Directory server. You must add LDAP users to a Client Authentication rule. Which kind of user group do you need in the Client Authentication rule in R77?

• A. External-user group
• B. LDAP group
• C. A group with a generic user
• D. All Users

Answer: B

NEW QUESTION 17

You have configured Automatic Static NAT on an internal host-node object. You clear the box Translate destination on client site from Global Properties > NAT. Assuming all other NAT settings in Global Properties are selected, what else must be configured so that a host on the Internet can initiate an inbound connection to this host?

• A. No extra configuration is needed.
• B. A proxy ARP entry, to ensure packets destined for the public IP address will reach the Security Gateway's external interface.
• C. The NAT IP address must be added to the external Gateway interface anti-spoofing group.
• D. A static route, to ensure packets destined for the public NAT IP address will reach the Gateway's internal interface.

Answer: D

NEW QUESTION 18

Which operating systems are supported by a Check Point Security Gateway on an open server? Select MOST complete list.

• A. Sun Solaris, Red Hat Enterprise Linux, Check Point SecurePlatform, IPSO, Microsoft Windows
• B. Check Point GAiA and SecurePlatform, and Microsoft Windows
• C. Check Point GAiA, Microsoft Windows, Red Hat Enterprise Linux, Sun Solaris, IPSO
• D. Check Point GAiA and SecurePlatform, IPSO, Sun Solaris, Microsoft Windows

Answer: B

NEW QUESTION 19
......