Note! Following 156-115.77 Exam is Retired now. Please select the alternative replacement for your Exam Certification.

156-115.77 Exam Dumps - Check Point Certified Security Master

Go to page:

Question # 4

By default, the size of the fwx_alloc table is:

65535

65536

25000

1024

Full Access

Question # 5

Server A is subject to automatically static NAT and also resides on a network which is subject to automatic Hide NAT. With regards to address translation what will happen when Server A initiates outbound communication?

This will cause a policy verification error.

This is called hairpin NAT, the traffic will return to the server.

The static NAT will take precedence.

The Hide NAT will take precedence.

Full Access

Question # 6

What considerations are required when configuring IPV6 with Wire mode?

IPv6 in Wire mode is only supported in R77.

IPV6 must be configured on both end points.

IPV6 is not supported in Wire mode.

You must use internal IPv6 addressing space to use Wire mode.

Full Access

Question # 7

Which feature is not supported with unnumbered VTI?

Proxy interfaces

High availability

Policy based routing

Anti-spoofing

Full Access

Question # 8

In Wire mode. if a packet reaches the gateway from a trusted source and is destined to a trusted destination, will the firewall do stateful inspection?

No, but IPS inspection will still be enforced.

Yes, the Firewall always performs stateful inspection.

Yes, but only if SecureXL is disabled.

Full Access

Go to page: