Note! Following 156-115.77 Exam is Retired now. Please select the alternative replacement for your Exam Certification.

156-115.77 Exam Dumps - Check Point Certified Security Master

Go to page:

Question # 25

What will be the outcome if you set the kernel parameters cphwd_nat_templates_enabled and cphwd_nat_templates_support?

This would enable Hide NAT support.

These parameters are mutually exclusive and cannot be used at the same time.

This would enable SecureXL NAT templates.

These are not valid parameters.

Full Access

Question # 26

Your gateway object is currently defined with a max connection count of 25k connections in Smart Dashboard. Which of the following commands would show you the current and peak connection counts?

show connections all

fw ctl conn

fw ctl chain

fw ctl pstat

Full Access

Question # 27

What would be considered Best Practice to determine which IPS protections you can safely disable for your environment?

You should use vulnerability tools to perform an assessment of your environment.

Work through turning on each protection to see which signatures get alerts.

You should set all protections to â€œDetectâ€.

You should not disable any IPS protections.

Full Access

Question # 28

When performing a Clean IPS procedure to resolve a corrupt IPS files issue, what file is modified in order for the SDUU process to automatically update the IPS files after completing the procedure?

asm.C

inspect.C

objects_5_0.C

profiles.C

Full Access

Question # 29

SNORT is a popular open source IDS, you would like to import SNORT rules from plain text into Check Point Smart Center. How can you accomplish this?

Under the IPS tree Protections > By Protocol > IPS Software Blade > Application Intelligence > SNORT import and select the SNORT import option.

IPS profiles must be manually configured on each gateway.

Check Point does not support third party signatures.

From the command line, run: ips_export_import import -f [-p ].

Full Access

Question # 30

When the IPS â€˜Bypass under Loadâ€™ mechanism detects that the certain CPU and memory usage thresholds have been reached, which of the following occurs?

The mechanism configures all IPS protections in â€˜Detect Modeâ€™

IPS is disabled completely

The mechanism disables all IPS protections by placing them under â€˜exceptionâ€™

Stateful Inspection is disabled

Full Access

Question # 31

What command would you use for a packet capture on an absolute position for TCP streaming (out) 1ffffe0

fw ctl chain -po 1ffffe0 -o monitor.out

fw monitor -po -0x1ffffe0 -o monitor.out

fw monitor -e 0x1ffffe0 -o monitor.out

fw monitor -pr 1ffffe0 -o monitor.out

Full Access