Note! Following 156-115.77 Exam is Retired now. Please select the alternative replacement for your Exam Certification.

156-115.77 Exam Dumps - Check Point Certified Security Master

Go to page:

Question # 33

John is a Security Administrator of a Check Point platform. He has a mis-configuration issue that points to the Rule Base. To obtain information about the issue, John runs the command:

fw debug fw on and checks the file fwm.elg.

fw kdebug fwm on and checks the file fwm.elg.

fw debug fwm on and checks the file fwm.elg.

fw kdebug fwm on and checks the file fw.elg.

Full Access

Question # 34

Which process should you debug when SmartDashboard authentication is rejected?

fwm

cpd

fwd

DAService

Full Access

Question # 35

In IKEView while troubleshooting a VPN issue between your gateway and a partner site you see an entry that states â€œInvalid IDâ€. Which of the following is the most likely cause?

IKEv1 is not supported by the peer.

Time is not matching between two members.

The encryption parameters (hash, encryption type, etc.) do not match.

Wrong subnets are being negotiated.

Full Access

Question # 36

What command should a firewall administrator use to begin debugging SecureXL?

fwaccel dbg api + verbose add

fwaccel debug â€“m

fwaccel dbg -m

SecureXL cannot be dubugged and the kernel debug will give enough output to help the firewall administrator to understand the firewalls behaviour. The right command to use is fw ctl debug â€“m fw.

Full Access

Question # 37

Look at the follow Rule Base display. Rule 5 contains a TIME object. What is the effect on the following rules?

Rule 6 will be eligible but Rule 7 will not.

All subsequent rules below Rule 5 will not be templated, regardless of the rule

No effect. Rules 6 and 7 will be eligible for templating.

The restriction on one rule does not affect later rules with regards to templates.

Full Access

Question # 38

What command can be used to get the following output?

fw ctl kdebug

fw monitor â€“e â€œaccept;â€

fwaccel conns

netstat -ni

Full Access

Question # 39

SecureXL uses templating to accelerate traffic passing through the gateway. What command should you run to determine if Accept, Drop and NAT templating is enabled?

fwaccel stat

fw ctl pstat

cphaprob -a if

cpconfig

Full Access

Question # 40

A system administrator wants to convert an IPv6 gateway from a standard gateway into a gateway running VSX mode. What does he need to consider?

It is not possible to convert a gateway with IPv6 enabled to VSX mode.

There needs to be proper IPv6 routing setup.

At least two interfaces need to be configured with IPv6.

Policy needs to be properly applied to the gateway before converting the system to VSX mode.

Full Access