Note! Following 156-315.77 Exam is Retired now. Please select the alternative replacement for your Exam Certification.

156-315.77 Exam Dumps - Check Point Certified Security Expert

Go to page:

<< First
Prev
3
4
5
6
7
8
9
10
11
12
Next
Last >>

Question # 57

Identity Agent is a lightweight endpoint agent that authenticates securely with Single Sign-On (SSO). Which of the following is NOT a recommended use for this method?

Leveraging machine name or identity

When accuracy in detecting identity is crucial

Identity based enforcement for non-AD users (non-Windows and guest users)

Protecting highly sensitive servers

Full Access

Question # 58

Which is NOT a method through which Identity Awareness receives its identities?

AD Query

Group Policy

Identity Agent

Captive Portal

Full Access

Question # 59

Which two processes are responsible on handling Identity Awareness?

pdp and lad

pdp and pdp-11

pep and lad

pdp and pep

Full Access

Question # 60

In the following cluster configuration; if you reboot sglondon_1 which device will be active when sglondon_1 is back up and running? Why?

sglondon_1 because it the first configured object with the lowest IP.

sglondon_2 because sglondon_1 has highest IP.

sglondon_1, because it is up again, sglondon_2 took over during reboot.

sglondon_2 because it has highest priority.

Full Access

Question # 61

MultiCorp has bought company OmniCorp and now has two active AD domains. How would you deploy Identity Awareness in this environment?

You must run an ADquery for every domain.

Identity Awareness can only manage one AD domain.

Only one ADquery is necessary to ask for all domains.

Only Captive Portal can be used.

Full Access

Question # 62

If using AD Query for seamless identity data reception from Microsoft Active Directory (AD), which of the following methods is NOT Check Point recommended?

Identity-based enforcement for non-AD users (non-Windows and guest users)

Basic identity enforcement in the internal network

Leveraging identity in Internet application control

Identity-based auditing and logging

Full Access

Question # 63

All of the following are used by the DLP engine to match a message during a scan, EXCEPT:

Message Body

Protocol

Data Type

Destination

Full Access