10 Tips For 156-115.77 IT examinee

Our 156-115.77 training materials with regard to Check Point certification are obtainable in different formats, like Pdf, downloadable engine, that will help you get through your exam. Youll be able to make full preparation for the Check Point 156-115.77 certification assessment. Whether youd similar to to research from the ebook or in your computer, youll be able to review the particular Check Point Check Point certification test together with your own pace. You have considerably freedom to select related Check Point questions and answers in order to prepare the best for your 156-115.77 exam.

2016 Dec 156-115.77 test questions

Q111. - (Topic 1) 

The command _____________ shows which firewall chain modules are active on a gateway. 

A. fw stat 

B. fw ctl debug 

C. fw ctl chain 

D. fw ctl multik stat 

Answer:


Q112. - (Topic 5) 

What command show the same information as fwaccel stats –l? 

A. cat /proc/ppk/cpls 

B. cat /proc/ppk/statistics 

C. cphaprob –a hconf 

D. fwaccell stats –s –u -k 

Answer:


Q113. - (Topic 9) 

When the IPS ‘Bypass under Load’ mechanism detects that the certain CPU and memory usage thresholds have been reached, which of the following occurs? 

A. The mechanism configures all IPS protections in ‘Detect Mode’ 

B. IPS is disabled completely 

C. The mechanism disables all IPS protections by placing them under ‘exception’ 

D. Stateful Inspection is disabled 

Answer:


Q114. - (Topic 4) 

What is the log file that shows the keep alive packets during the debug process? 

A. $FWDIR/log/ikev2.xmll 

B. $FWDIR/log/ike.xmll 

C. $FWDIR/log/ike.elg 

D. $FWDIR/log/vpnd.elg 

Answer:


Q115. - (Topic 1) 

What command would you use for a packet capture on an absolute position for TCP streaming (out) 1ffffe0 

A. fw ctl chain -po 1ffffe0 -o monitor.out 

B. fw monitor -po -0x1ffffe0 -o monitor.out 

C. fw monitor -e 0x1ffffe0 -o monitor.out 

D. fw monitor -pr 1ffffe0 -o monitor.out 

Answer:


Up to the minute 156-115.77 exam fees:

Q116. - (Topic 6) 

What is the difference between “connection establishment acceleration” (templating) and “traffic acceleration”? 

A. These are the same technologies with different names. 

B. “Connection establishment acceleration” only accelerates a single connection, while “traffic acceleration” accelerates similar traffic. 

C. “Traffic acceleration” is accelerated through hardware, and “connection establishment acceleration” is accelerated in software. 

D. “Traffic acceleration” only accelerates a single connection, while “connection establishment acceleration” accelerates similar traffic. 

Answer:


Q117. - (Topic 9) 

How would one enable ‘INSPECT debugging’ if one suspects IPS false positives? 

A. Run command fw ctl set int enable_inspect_debug.1.from the command line. 

B. Toggle the checkbox in Global Properties > Firewalls > Inspection section. 

C. WebUI 

D. Set the following parameter to true using GuiDBedit: enable_inspect_debug_compilation. 

Answer:


Q118. - (Topic 9) 

“If the machine is under stress, we do not want to leave the stress condition due to a single measurement (which could be an anomaly), but rather wait for a given length of time, before changing the condition.” …describes which of the following “Bypass under Load” setting kernel parameters? 

A. ids_assume_stress 

B. ide_tolerance_no_stress 

C. ids_tolerance_stress 

D. ids_timeout 

Answer:


Q119. - (Topic 1) 

When performing a fwm debug, to which directory are the logs written? 

A. $FWDIR/log 

B. $FWDIR/log/fwm.elg 

C. $FWDIR/conf/fwm.elg 

D. $CPDIR/log/fwm.elg 

Answer:


Q120. - (Topic 11) 

Where do you configure VTIs on your R77 gateway in VSX mode? 

A. VTIs are configured in each VS context. 

B. VTIs are configured in VS0 context. 

C. VTIs are not supported in VSX mode. 

D. VTIs are configured in SmartDashboard. 

Answer:

Explanation: 

C11O3-5 - Advanced VPN 



see more 156-115.77 dumps