156-315.77 Exam Dumps - Check Point Certified Security Expert

The cluster link is down.

The physical interface is administratively set to DOWN.

The physical interface is down.

CCP packets couldn't be sent to or didn't arrive from neighbor member.

fw tab -t connections -s

fw tab -t connections -u

fw tab -t connections

fw tab

3, 2, 1, 4

2, 4, 3, 1

1, 3, 2, 4

2, 3, 1, 4

1, 2, 3, 4

$FWDIR/log/ike.elg

$FWDIR/opt/vpnd.elg

$FWDIR/opt/ike.elg

$FWDIR/log/vpnd.elg

There is no dynamic update at reboot.

No. The revert will most probably not match to hard disk.

Yes. Everything is dynamically updated at reboot.

No. At installation the necessary hardware support is selected. The snapshot saves this state.

Use a dedicated sync network.

Configure the sync network to operate within the DMZ.

Secure each sync interface in a cluster with Endpoint.

Encrypt all sync traffic between cluster members.

set bitrate 64

set edition default 64

configure edition 64-bit

set edition default 64-bit

The gateway could not locate the user in SmartDirectory and is allowing the connection with limitations based on a generic profile.

The user’s rights prevent access to the protected network.

A Desktop Policy is not configured.

The user is attempting to connect with the wrong Endpoint client.

make_au, au_auth, au_fetchuser, au_auth_auth, cpLdapCheck, cpLdapGetUser

make_au, au_auth, au_fetchuser, cpLdapGetUser, cpLdapCheck, au_auth_auth

cpLdapGetUser, au_fetchuser, cpLdapCheck, make_au, au_auth, au_auth_auth

au_fetchuser, make_au, au_auth, cpLdapGetUser, au_auth_auth, cpLdapCheck

FWSD

FWD

In.httpd

FWSSD

cvpnd

fwm

vpnd

fwssd

ldapauth

cpauth

ldapd

cpShared

$FWDIR/conf/users.NDB

$FWDIR/conf/fwmuser.conf

$FWDIR/conf/fwusers.conf

$FWDIR/conf/fwauth.NDB

cpd

cvpnd

fwm

vpnd

fwm

vpnd

cpd

cvpnd

Group Agnostic

All Account-Unit's Users

Only Sub Tree

Only Group in Branch

Edit affinity.conf and change the settings

Run fw affinity and change the settings

Edit $FWDIR/conf/fwaffinity.conf and change the settings

Run sim affinity and change the settings

AMON status pull from the Gateway

Management High Availability (HA) sync

SIC (Secure Internal Communication) functions

Policy installation

Open the SmartDashboard, Select Global properties, select Identity Awareness; check the boxes for Password must include an upper character, Password must include a digit, Password must include a symbol and change the password length to 8 characters.

Open the SmartDashboard, Select Global properties, select User Authority; check the boxes for Password must include an upper character, Password must include a digit and Password must include a symbol.

Open the SmartDashboard, Select Global Properties, select User Directory, check the boxes for Password must include an uppercase character, Password must include a digit, and Password must include a symbol.

Open the SmartDashboard, Select Global Properties, select User Directory, check the boxes for Password must include an uppercase character, Password must include a digit, Password must include a symbol and change the password length to 8 characters.

dynamic encryption

Certificate-based encryption

static encryption

Symmetric encryption

Asymmetric encryption

In the Security Server window in Global Properties

In SmartDefense SMTP settings

In the smtp.conf file on the SmartCenter Server

In the gateway object's SMTP settings in the Advanced window

In the SMTP resource object

Download Migration Tool R77 for IPSO and Splat/Linux from Check Point website.

Use already installed Migration Tool.

Use Migration Tool from CD/ISO

Fetch Migration Tool R71 for IPSO and Migration Tool R77 for Splat/Linux from CheckPoint website

IPSO 3.9

Windows XP SP2

Windows 2000 Professional

RedHat Linux 8.0

MacOSX

WebUI

SmartProvisioning

Smart Dashboard

SmartUpdate

The VPN1-Gateway must be configured to work with Visitor Mode

The specific VPN-1 Security Gateway must be configured as a member of the VPN-1 Remote Access Community.

There are distinctly separate access rules required for Secure Client users vs. SSL Network Extender users.

To use Integrity Clientless Security (ICS), you must install the ICS server or configuration tool.

Successive alerts

Successive DoS attacks

Successive multiple connections

HTTP protocol inspection

Upgrade Smartcenter to R77 first.

Upgrade R60-Gateways to R65.

Upgrade every unit directly to R77.

Check the ReleaseNotes to verify that every step is supported.

cpstop

spstop

sportalstop

smartportalstop

RDP

IPSec

CCP

HA OPCODE

CKPP

SmartDashboard, SmartView Tracker and SmartView Monitor logins and logouts

Security Policies and the Rule Base, Network Objects, Network Services, VPN Communities.

Users, Administrators, Groups and VPN Communities

Security Policies and the Rule Base, Network Objects, Network Services, Resources, Users, Administrators, Groups, VPN Communities and Servers and OPSEC Applications.

The processing of all connections handled by the faulty machine is immediately taken over by the other member(s).

The processing of all connections handled by the faulty machine is dropped, so all connections need to be re-established through the other machine(s).

There is no state synchronization on Load Sharing, only on High Availability.

The connections are dropped as Load Sharing does not support High Availability.

Highlight the suspicious connection in SmartView Tracker > Active mode.Block the connection using the Tools > Block Intruder menu.Use the Active mode to confirm that the suspicious connection does not reappear.

Highlight the suspicious connection in SmartView Tracker > Log mode.Block the connection using Tools > Block Intruder menu.Use Log mode to confirm that the suspicious connection does not reappear.

Highlight the suspicious connection in SmartView Tracker > Active mode.Block the connection using Tools > Block Intruder menu.Use Active mode to confirm that the suspicious connection is dropped.

Highlight the suspicious connection in SmartView Tracker > Log mode.Block the connection using Tools > Block Intruder menu.Use the Log mode to confirm that the suspicious connection is dropped.

Login to Smart Dashboard, access Properties of the SMS, and verify whether Paul’s IP address is listed.

Type cpconfig on the Management Server and select the option “GUI client List” to see if Paul’s IP address is listed.

Login in to Smart Dashboard, access Global Properties, and select Security Management, to verify whether Paul’s IP address is listed.

Access the WEBUI on the Security Gateway, and verify whether Paul’s IP address is listed as a GUI client.

Manual copies of the directory $FWDIR/conf

GAiA back up utilities

Database Revision Control

Commands upgrade_export and upgrade_import

Initiation

Validation

Code compilation

Code generation

No, Cluster Member 3 does not have the required memory.

Yes, these machines are configured correctly for a ClusterXL deployment.

No, the Security Management Server is not running the same operating system as the cluster members.

No, the Security Gateway cannot be installed on the Security Management Server.

upgrade_export will back up routing tables, hosts files, and manual ARP configurations, where backup and snapshot will not.

upgrade_export is operating system independent and can be used when backup or snapshot is not available.

upgrade_export has an option to backup the system and SmartView Tracker logs while backup and snapshot will not.

The commands backup and snapshot can take a long time to run whereas upgrade_export will take a much shorter amount of time.

Configure Gateway HA

Configure Management HA for gateways

Configure ClusterXL

Configure VRRP

[expert@HostName]# ./cpsizeme.exe –v

[expert@HostName]# ./cpsizeme.exe –version

[expert@HostName]# ./cpsizeme –V

[expert@HostName]# ./cpsizeme –version

In the CLI with the command “route add”

In Web Portal, under Network Management > IPv4 Static Routes

In the CLI via sysconfig

In SmartDashboard under Gateway Properties > Topology

Using the command ethtool in Expert Mode

Viewing the file /config/active

Via the Gaia WebUI

Via the command show configuration in CLISH

configdbd

confd

fwm

ipsrd

cp /etc/sysconfig/network.C [location]

ifconfig > [filename].txt

ipconfig –a > [filename].txt

netstat –rn > [filename].txt

Route-based

Must be chosen/configured manually by the Administrator in the Policy > Global Properties

Domain-based

Must be chosen/configured manually by the Administrator in the VPN community object

The VPN Client selects which Security Gateway takes over, should the first connection fail.

MEP VPN’s are restricted to the location of the gateways.

State synchronization between Security Gateways is required.

MEP Security Gateways cannot be managed by separate Management Servers.

For deployment of Identity Agents

Identity-based enforcement for non-AD users (non-Windows and guest users)

Leveraging identity in Internet application control

Basic identity enforcement in the internal network

From the Internet

Through all interfaces

Through internal interfaces

Through the Firewall policy

Leveraging machine name or identity

When accuracy in detecting identity is crucial

Identity based enforcement for non-AD users (non-Windows and guest users)

Protecting highly sensitive servers

AD Query

Group Policy

Identity Agent

Captive Portal

pdp and lad

pdp and pdp-11

pep and lad

pdp and pep

sglondon_1 because it the first configured object with the lowest IP.

sglondon_2 because sglondon_1 has highest IP.

sglondon_1, because it is up again, sglondon_2 took over during reboot.

sglondon_2 because it has highest priority.

You must run an ADquery for every domain.

Identity Awareness can only manage one AD domain.

Only one ADquery is necessary to ask for all domains.

Only Captive Portal can be used.

Identity-based enforcement for non-AD users (non-Windows and guest users)

Basic identity enforcement in the internal network

Leveraging identity in Internet application control

Identity-based auditing and logging

Message Body

Protocol

Data Type

Destination

cp /etc/sysconfig/network.C [location]

ipconfig -a > [filename].txt

ifconfig > [filename].txt

netstat -m > [filename].txt

Firewall logging and ICA key-exchange information

RIP traffic

Outgoing traffic originating from the Security Gateway

SmartUpdate connections

Copy the contents of the selected cells.

Save the information in the active tab to an .exe file.

Enter new credential for accessing the computer information.

Run Google.com search using the contents of the selected cell.

The restore is not possible because the backup file does not have the same build number (version).

The restore is done by selecting Snapshot Management from the SecurePlatform boot menu.

The restore can be done easily by the command restore and selecting the appropriate backup file.

A back up cannot be restored, because the binary files are missing.

ifconfig -a

arping

telnet

ping

Gateway Setting

NAT Rules

Global Properties > NAT definition

Implied Rules

NAT_dst_any_list

NAT_alloc

NAT_src_any_list

fwx_alloc

set static-route default nexthop gateway address 192.168.255.1 priority 1 on

set static-route 192.168.255.0/24 nexthop gateway logical ethl on

set static-route 192.168.255.0/24 nexthop gateway address 192.168.255.1 priority 1 on

set static-route nexthop default gateway logical 192.168.255.1 priority 1 on

There is more than one cluster connected to the same VLAN

A firewall cluster is configured to use Multicast for CCP traffic

There are more than two members in a firewall cluster

A firewall cluster is configured to use Broadcast for CCP traffic

Member 1 is at a lower version than member 2

You have not run cpconfig on member 2 yet.

You have a different number of cores defined for CoreXL between the two members

Member 1 has CoreXL disabled and member 2 does not

No, the Security Management Servers must reside on the same network.

No, the Security Management Servers do not have the same number of NICs.

No, the Security Management Servers must be installed on the same operating system.

No, a R77 Security Management Server cannot run on Red Hat Linux 9.0.

Run Google.com search using the contents of the selected cell.

Enter new credential for accessing the computer information.

Save the information in the active tab to an .exe file.

Copy the contents of the selected cells.

SmartEvent Correlation Unit

SmartEvent Server

SmartEvent Analysis DataServer

SmartEvent Client

An Account Unit is the Check Point account that SmartDirectory uses to access an (LDAP) server

An Account Unit is a system account on the Check Point gateway that SmartDirectory uses to access an (LDAP) server

An Account Unit is the administration account on the LDAP server that SmartDirectory uses to access to (LDAP) server

An Account Unit is the interface which allows interaction between the Security Management server and Security Gateways, and the SmartDirectory (LDAP) server.

MGCP MAC address response to a Multicast IP request

Multicast MAC address response to a Unicast IP request

Unicast MAC address response to a Multicast IP request

Multicast MAC address response to a RARP request

SmartReporter-Standard Reports

SmartView Tracker

Smartview Monitor

SmartReporter-Express Reports

Hot Standby Load Sharing

Multicast Load Sharing

Unicast Load Sharing

CCP Load Sharing

Analyzing traffic patterns against public resources.

Possible worm/malware activity.

Analyzing access attempts via social-engineering.

Tracking attempted port scans.

fwm

vpnd

cvpnd

cpd

(ii) and (iii)

All

(i), (ii) and (iii)

(ii) only

ICMP Port Unreachable

TCP keep alive

IKE Key Exchange

ICMP Destination Unreachable

UDP keep alive

Telnet

FTP

SMTP

HTTP

The fwaccel command determines the default setting. The command cpconfig can dynamically change the setting, but after the reboot it reverts to the default setting.

Both commands function identically.

The command cpconfig works on the Security Platform only. The command fwaccel can be used on all platforms.

The cpconfig command enables acceleration. The command fwaccel can dynamically change the setting, but after the reboot it reverts to the default setting.

Secure PlatformPro

Solaris

IPSO 4.0 +

Windows Server 2008

Disable "accept all encrypted traffic", and put FTP and HTTP in the Excluded services in the Community object. Add a rule in the Security Policy for services FTP and http, with the Community object in the VPN field.

Disable "accept all encrypted traffic" in the Community, and add FTP and HTTP services to the Security Policy, with that Community object in the VPN field.

Enable "accept all encrypted traffic", but put FTP and HTTP in the Excluded services in the Community. Add a rule in the Security Policy, with services FTP and http, and the Community object in the VPN field.

Put FTP and HTTP in the Excluded services in the Community object. Then add a rule in the Security Policy to allow Any as the service, with the Community object in the VPN field.

Edit the masters. conf file on the Portal server.

Modify the file cp_httpd_admin .conf.

Run sysconfig and change the management interface

Re-initialize SIC

NG-AI R55 HFAJ7

NGX R60

NGXR65HFA_50

NGX R71