Note! Following 156-315.77 Exam is Retired now. Please select the alternative replacement for your Exam Certification.

156-315.77 Exam Dumps - Check Point Certified Security Expert

Go to page:

<< First
Prev
1
2
3
4
5
6
7
8
9
10
Next
Last >>

Question # 9

You want to upgrade a cluster with two members to VPN-1 NGX. The Smart CenterServer and both members are version VPN-1/Firewall-1 NG FP3, with the latest Hotfix.

What is the correct upgrade procedure?

1. Change the version, in the General Properties of the gateway-cluster object.

2. Upgrade the Smart CenterServer, and reboot after upgrade.

3. Run cpstop on one member, while leaving the other member running. Upgrade one member at a time, and reboot after upgrade.

4. Reinstall the Security Policy.

3, 2, 1, 4

2, 4, 3, 1

1, 3, 2, 4

2, 3, 1, 4

1, 2, 3, 4

Full Access

Question # 10

Lilly has generated an IKE debug on her Security Gateway. She has asked Jack to transfer the file to Support. Where is the file located?

$FWDIR/log/ike.elg

$FWDIR/opt/vpnd.elg

$FWDIR/opt/ike.elg

$FWDIR/log/vpnd.elg

Full Access

Question # 11

MicroCorp experienced a security appliance failure. (LEDs of all NICs are off.) The age of the unit required that the RMA-unit be a different model. Will a revert to an existing snapshot bring the new unit up and running?

There is no dynamic update at reboot.

No. The revert will most probably not match to hard disk.

Yes. Everything is dynamically updated at reboot.

No. At installation the necessary hardware support is selected. The snapshot saves this state.

Full Access

Question # 12

How does Check Point recommend that you secure the sync interface between gateways?

Use a dedicated sync network.

Configure the sync network to operate within the DMZ.

Secure each sync interface in a cluster with Endpoint.

Encrypt all sync traffic between cluster members.

Full Access

Question # 13

In Gaia, the operating system can be changed to 32-bit or 64-bit, provided the processor supports 64-bit. What command toggles to 64-bit.

set bitrate 64

set edition default 64

configure edition 64-bit

set edition default 64-bit

Full Access

Question # 14

When an Endpoint user is able to authenticate but receives a message from the client that it is unable to enforce the desktop policy, what is the most likely scenario?

The gateway could not locate the user in SmartDirectory and is allowing the connection with limitations based on a generic profile.

The userâ€™s rights prevent access to the protected network.

A Desktop Policy is not configured.

The user is attempting to connect with the wrong Endpoint client.

Full Access

Question # 15

When troubleshooting user authentication, you may see the following entries in a debug of the user authentication process. In which order are these messages likely to appear?

make_au, au_auth, au_fetchuser, au_auth_auth, cpLdapCheck, cpLdapGetUser

make_au, au_auth, au_fetchuser, cpLdapGetUser, cpLdapCheck, au_auth_auth

cpLdapGetUser, au_fetchuser, cpLdapCheck, make_au, au_auth, au_auth_auth

au_fetchuser, make_au, au_auth, cpLdapGetUser, au_auth_auth, cpLdapCheck

Full Access

Question # 16

Anytime a client initiates a connection to a server, the firewall kernel signals the FWD process using a trap. FWD spawns the _____ child service, which runs the security server.

FWSD

FWD

In.httpd

FWSSD

Full Access

Go to page: