All About 156-315.77 real exam Nov 2021

Guarantee to Check Point Check Point exam, Exambible.com offers you things you need to pass Check Point Check Point exam which is a Check Point certification. Each of our practice tests which contain most up-to-date actual questions together with actual answers are usually incomparable in good quality and 100% guarantee to make an individual pass the Check Point Check Point exam. Otherwise, we will offer you the full refund of ones purchasing charge. We would be the only vendor that offers a pair of versions without fee any other costs, printable Pdf and check engine.

2021 Nov 156-315.77 actual test

Q421. - (Topic 4) 

Which file defines the fields for each object used in the file objects.C (color, num/string, default value…)? 

A. $FWDIR/conf/classes.C 

B. $FWDIR/conf/scheam.C 

C. $FWDIR/conf/table.C 

D. $FWDIR/conf/fields.C 

Answer:


Q422. - (Topic 4) 

John is the MegaCorp Security Administrator, and is using Check Point R71. Malcolm is the Security Administrator of a partner company and is using a different vendor's product and both have to build a VPN tunnel between their companies. Both are using clusters with Load Sharing for their firewalls and John is using ClusterXL as a Check Point clustering solution. While trying to establish the VPN, they are constantly noticing problems and the tunnel is not stable and then Malcolm notices that there seems to be 2 SPIs with the same IP from the Check Point site. How can they solve this problem and stabilize the tunnel? 

A. This can be solved by running the command Sticky VPN on the Check Point CLI. This keeps the VPN Sticky to one member and the problem is resolved. 

B. This is surely a problem in the ISPs network and not related to the VPN configuration. 

C. This can be solved when using clusters; they have to use single firewalls. 

D. This can easily be solved by using the Sticky decision function in ClusterXL. 

Answer:


Q423. - (Topic 3) 

______________ is NOT anSmart Eventevent-triggered Automatic Reaction. 

A. SNMP Trap 

B. Mail 

C. Block Access 

D. External Script 

Answer:


Q424. - (Topic 2) 

Which process is responsible for kernel table information sharing across all cluster members? 

A. fwd daemon using an encrypted TCP connection 

B. CPHA using an encrypted TCP connection 

C. fw kernel using an encrypted TCP connection 

D. cpd using an encrypted TCP connection 

Answer:


Q425. - (Topic 6) 

Smart Provisioningis an integral part of the Security Management or Provider-1 CMA. To enableSmart Provisioningon the Security Management server: 

A. Obtain aSmart Provisioninglicense, add the License to the Security Management server or CMA, turn onSmart Provisioningon each Gateway to be controlled. 

B. Obtain aSmart Provisioninglicense, add the License to the Security Management server or CMA, disable SecureXL. 

C. Obtain aSmart Provisioninglicense, add the License to the Security Management server or CMA. 

D. Obtain aSmart Provisioninglicense, add the License to the Security Management server or CMA, select the box under Policy forSmart Provisioning. 

Answer:


Up to date 156-315.77 test question:

Q426. - (Topic 3) 

A VPN Tunnel Interface (VTI) is defined onSecure PlatformPro as: vpn shell interface add numbered 10.10.0.1 10.10.0.2 madrid.cp What do you know about this VTI? 

A. 10.10.0.1 is the local Gateway's internal interface, and 10.10.0.2 is the internal interface of the remote Gateway. 

B. The peer Security Gateway's name is madrid.cp. 

C. The VTI name is madrid.cp. 

D. The local Gateway's object name is madrid.cp. 

Answer:


Q427. - (Topic 7) 

You have selected the event Port Scan from Internal Network in SmartEvent, to detect an event when 30 port scans have occurred within 60 seconds. You also want to detect two port scans from a host within 10 seconds of each other. How would you accomplish this? 

A. Select the two port-scan detections as a sub-event. 

B. Define the two port-scan detections as an exception. 

C. You cannot set SmartEvent to detect two port scans from a host within 10 seconds of each other. 

D. Select the two port-scan detections as a new event. 

Answer:


Q428. - (Topic 4) 

If Jack was concerned about the number of log entries he would receive in the SmartReporter system, which policy would he need to modify? 

A. Consolidation Policy 

B. Log Consolidator Policy 

C. Log Sequence Policy 

D. Report Policy 

Answer:


Q429. - (Topic 6) 

The London office just upgraded their DNS servers so their Gateway needs to be updated with the new settings. What would be the BEST way for Henry to change the DNS settings for London's Gateway? 

A. Edit the Canada Profile 

B. Edit the Gateway's DNS settings from the Edit Gateway, then selecting the DNS tab 

C. DNS settings for that Gateway cannot be changed 

D. Edit the Europe Profile 

Answer:


Q430. - (Topic 5) 

When configuring site-to-site VPN High Availability (HA) with MEP, which of the following is correct? 

A. MEP Gateways cannot be geographically separated machines. 

B. The decision on which MEP Gateway to use is made on the MEP Gateway’s side of the tunnel. 

C. MEP Gateways must be managed by the sameSmart CenterServer. 

D. If one MEP Security Gateway fails, the connection is lost and the backup Gateway picks up the next connection. 

Answer:



see more 156-315.77 dumps