Top Check Point 156-115.77 free samples Choices

It is more faster and easier to pass the Check Point 156-115.77 exam by using Real Check Point Check Point Certified Security Master questuins and answers. Immediate access to the Latest 156-115.77 Exam and find the same core area 156-115.77 questions with professionally verified answers, then PASS your exam with a high score now.

2016 Nov 156-115.77 exam question

Q81. - (Topic 6) 

Which information CANNOT be displayed by issuing the command cat /proc/cpuinfo? 

A. CPU family 

B. NFS_Unstable 

C. fpu 

D. vendor_id 

Answer:


Q82. - (Topic 11) 

Where can you configure Wire mode? 

A. In Global properties 

B. In the gateway object on the “IPSec VPN” > “VPN Advanced” page 

C. In sysconfig 

D. In CLISH 

Answer:


Q83. - (Topic 3) 

Which command should you use to stop kernel module debugging (excluding SecureXL)? 

A. fw ctl debug 0 

B. fw ctl zdebug - all 

C. fw debug fwd off; vpn debug off 

D. fw debug fwd off 

Answer:


Q84. - (Topic 6) 

Your ARP cache is overflowing negatively impacting users experience on your network. Which command can you issue to increase the ARP cache on the fly? You do not need this to survive reboot. 

A. Modify the /etc/sysctl.conf: net.ipv4.neigh.default.gc_thresh3 = 1024. 

B. echo 1024 > /proc/sys/net/ipv4/neigh/default/gc_thresh3 

C. arp cache table > 1024 

D. You cannot increase the size of the ARP cache on the fly. 

Answer:


Q85. - (Topic 1) 

Which process should you debug when SmartDashboard authentication is rejected? 

A. fwm 

B. cpd 

C. fwd 

D. DAService 

Answer:


Most recent 156-115.77 testing engine:

Q86. - (Topic 4) 

You are attempting to establish a VPN tunnel between a Check Point gateway and a 3rd party vendor. When attempting to send traffic to the peer gateway it is failing. You look in SmartView Tracker and see that the failure is due to “Encryption failure: no response from peer”. After running a VPN debug on the problematic gateway, what is one of the files you would want to analyze? 

A. $FWDIR/log/fw.log 

B. $FWDIR/log/fwd.elg 

C. $FWDIR/log/ike.elg 

D. /var/log/fw_debug.txt 

Answer:


Q87. - (Topic 3) 

How many sync interfaces are supported on Check Point R77 GAiA? 

A. 3 B. 4 

C. 2 

D. 1 

Answer:


Q88. - (Topic 6) 

You have a requirement to implement a strict security policy. With this in mind, you must create a stealth rule. How will this impact your packet acceleration? 

A. Using a stealth rule disables SecureXL. 

B. There will be no impact as long as the rule is not logged. 

C. NAT templates will not work. 

D. There will be no impact, since stealth rules do not affect SecureXL. 

Answer:


Q89. - (Topic 6) 

The 'Maximum Entries' value in the GAiA Portal corresponds to the 'gc_thresh3' parameter in the Linux kernel and has value of 1024. Knowing this, you know that gc_thresh2 and gc_thresh1 if are automatically set to the values: 

A. gc_thresh2=256 and gc_thresh1=128 

B. gc_thresh2=512 and gc_thresh1=256 

C. gc_thresh2=1024 and gc_thresh1=1024 

D. gc_thresh1=256 and gc_thresh2=128 

Answer:


Q90. - (Topic 9) 

In IPS which of the two initial profiles is the more resource intensive? 

A. Prevention 

B. Standard 

C. Default 

D. Recommended 

Answer:



see more 156-115.77 dumps