Breathing of checkpoint 156 215.77 free practice questions materials and study guides for Check Point certification for customers, Real Success Guaranteed with Updated checkpoint 156 215.77 pdf dumps vce Materials. 100% PASS Check Point Certified Security Administrator – GAiA exam Today!
♥♥ 2021 NEW RECOMMEND ♥♥
Free VCE & PDF File for Check Point 156-215.77 Real Exam (Full Version!)
★ Pass on Your First TRY ★ 100% Money Back Guarantee ★ Realistic Practice Exam Questions
Free Instant Download NEW 156-215.77 Exam Dumps (PDF & VCE):
Available on:
http://www.surepassexam.com/156-215.77-exam-dumps.html
Q1. - (Topic 1)
You have installed a R77 Security Gateway on GAiA. To manage the Gateway from the enterprise Security Management Server, you create a new Gateway object and Security Policy. When you install the new Policy from the Policy menu, the Gateway object does not appear in the Install Policy window as a target. What is the problem?
A. The new Gateway's temporary license has expired.
B. The object was created with Node > Gateway.
C. The Gateway object is not specified in the first policy rule column Install On.
D. No Masters file is created for the new Gateway.
Answer: B
Q2. - (Topic 3)
When using vpn tu, which option must you choose if you only want to clear phase 2 for a specific IP (gateway)?
A. (8) Delete all IPsec+IKE SAs for a given User (Client)
B. (5) Delete all IPsec SAs for a given peer (GW)
C. (6) Delete all IPsec SAs for a given User (Client)
D. (7) Delete all IPsec+IKE SAs for a given peer (GW)
Answer: B
Q3. - (Topic 3)
You want to establish a VPN, using certificates. Your VPN will exchange certificates with an external partner. Which of the following activities should you do first?
A. Manually import your partner's Access Control List.
B. Manually import your partner's Certificate Revocation List.
C. Create a new logical-server object to represent your partner's CA.
D. Exchange exported CA keys and use them to create a new server object to represent your partner's Certificate Authority (CA).
Answer: D
Q4. - (Topic 1)
The London Security Gateway Administrator has just installed the Security Gateway and Management Server. He has not changed any default settings. As he tries to configure the Gateway, he is unable to connect. Which troubleshooting suggestion will NOT help him?
A. Check if some intermediate network device has a wrong routing table entry, VLAN
assignment, duplex-mismatch, or trunk issue.
B. Verify that the Rule Base explicitly allows management connections.
C. Test the IP address assignment and routing settings of the Security Management Server, Gateway, and console client.
D. Verify the SIC initialization.
Answer: B
Q5. - (Topic 3)
You believe Phase 2 negotiations are failing while you are attempting to configure a site-to-site VPN with one of your firm’s business partners. Which SmartConsole application should you use to confirm your suspicions?
A. SmartDashboard
B. SmartUpdate
C. SmartView Status
D. SmartView Tracker
Answer: B
Q6. - (Topic 1)
You are the Security Administrator for MegaCorp. A Check Point firewall is installed and in use on a platform using GAiA. You have trouble configuring the speed and duplex settings of your Ethernet interfaces. Which of the following commands can be used in Expert Mode to configure the speed and duplex settings of an Ethernet interface and will survive a reboot? Give the BEST answer.
A. eth_set
B. mii_tool
C. ifconfig -a
D. ethtool
Answer: A
Q7. - (Topic 2)
Looking at the SYN packets in the Wireshark output,
select the statement that is true about NAT.
A. This is an example of Hide NAT.
B. This is an example of Static NAT and Translate destination on client side unchecked in Global Properties.
C. There is not enough information provided in the Wireshark capture to determine the NAT settings.
D. This is an example of Static NAT and Translate destination on client side checked in Global Properties.
Answer: D
Q8. - (Topic 3)
True or False? SmartView Monitor can be used to create alerts on a specified Gateway.
A. False, alerts can only be set in SmartDashboard Global Properties.
B. True, by choosing the Gateway and selecting System Information.
C. False, an alert cannot be created for a specified Gateway.
D. True, by right-clicking on the Gateway and selecting Configure Thresholds.
Answer: D
Q9. - (Topic 3)
When attempting to connect with SecureClient Mobile you get the following error message:
The certificate provided is invalid. Please provide the username and password.
What is the probable cause of the error?
A. Your user configuration does not have an office mode IP address so the connection failed.
B. There is no connection to the server, and the client disconnected.
C. Your certificate is invalid.
D. Your user credentials are invalid.
Answer: C
Q10. - (Topic 3)
Which R75 component displays the number of packets accepted, rejected, and dropped on a specific Security Gateway, in real time?
A. SmartView Monitor
B. SmartView Status
C. SmartEvent
D. SmartUpdate
Answer: A