Act now and download your CheckPoint 156-915.77 test today! Do not waste time for the worthless CheckPoint 156-915.77 tutorials. Download Most up-to-date CheckPoint Check Point Certified Security Expert Update Blade exam with real questions and answers and begin to learn CheckPoint 156-915.77 with a classic professional.
Also have 156-915.77 free dumps questions for you:
NEW QUESTION 1
Your company has the requirement that SmartEvent reports should show a detailed and accurate view of network activity but also performance should be guaranteed. Which actions should be taken to achieve that?
1) Use same hard drive for database directory, log files, and temporary directory.
2) Use Consolidation Rules.
3) Limit logging to blocked traffic only.
4) Use Multiple Database Tables.
- A. 2, 4
- B. 1, 3, 4
- C. 1, 2, 4
- D. 1, 2
Answer: A
NEW QUESTION 2
CORRECT TEXT
In a zero downtime scenario, which command do you run manually after all cluster members are upgraded?
Solution:
cphaconf set_ccp multicast
Does this meet the goal?
- A. Yes
- B. Not Mastered
Answer: A
NEW QUESTION 3
CORRECT TEXT
Type the full cphaprob command and syntax that will show full synchronization status.
Solution:
cphaprob -i list
Does this meet the goal?
- A. Yes
- B. Not Mastered
Answer: A
NEW QUESTION 4
CORRECT TEXT
Fill in the blank. To verify the SecureXL status, you would enter command ______.
Solution:
fwaccel stat
Does this meet the goal?
- A. Yes
- B. Not Mastered
Answer: A
NEW QUESTION 5
Which of the following tools is used to generate a Security Gateway R77 configuration report?
- A. fw cpinfo
- B. infoCP
- C. cpinfo
- D. infoview
Answer: C
NEW QUESTION 6
Configure the new interface via sysconfig from the "non-member" Gateway.
Solution:
Does this meet the goal?
- A. Yes
- B. Not Mastered
Answer: A
NEW QUESTION 7
Reboot the gateway.
- A.
Answer: B
NEW QUESTION 8
If you need strong protection for the encryption of user data, what option would be the BEST choice?
- A. Use Diffie-Hellman for key construction and pre-shared keys for Quick Mod
- B. Choose SHA in Quick Mode and encrypt with AE
- C. Use AH protoco
- D. Switch to Aggressive Mode.
- E. When you need strong encryption, IPsec is not the best choic
- F. SSL VPN’s are a better choice.
- G. Use certificates for Phase 1, SHA for all hashes, AES for all encryption and PFS, and use ESP protocol.
- H. Disable Diffie-Hellman by using stronger certificate based key-derivatio
- I. Use AES-256 bit on all encrypted channels and add PFS to QuickMod
- J. Use double encryption by implementing AH and ESP as protocols.
Answer: C
NEW QUESTION 9
Your users are defined in a Windows 2008 R2 Active Directory server. You must add LDAP users to a Client Authentication rule. Which kind of user group do you need in the Client Authentication rule in R77?
- A. External-user group
- B. LDAP group
- C. A group with a generic user
- D. All Users
Answer: B
NEW QUESTION 10
Install the Security Policy.
Solution:
Does this meet the goal?
- A. Yes
- B. Not Mastered
Answer: A
NEW QUESTION 11
CORRECT TEXT
Fill in the blank. To save your OSPF configuration in GAiA, enter the command _____.
Solution:
save config
Does this meet the goal?
- A. Yes
- B. Not Mastered
Answer: A
NEW QUESTION 12
Can you implement a complete IPv6 deployment without IPv4 addresses?
- A. N
- B. SmartCenter cannot be accessed from everywhere on the Internet.
- C. Ye
- D. Only one TCP stack (IPv6 or IPv4) can be used at the same time.
- E. Yes, There is no requirement for managing IPv4 addresses.
- F. N
- G. IPv4 addresses are required for management.
Answer: C
NEW QUESTION 13
To qualify as an Identity Awareness enabled rule, which column MAY include an Access Role?
- A. Action
- B. Source
- C. User
- D. Track
Answer: B
NEW QUESTION 14
ALL of the following options are provided by the GAiA sysconfig utility, EXCEPT:
- A. Export setup
- B. DHCP Server configuration
- C. Time & Date
- D. GUI Clients
Answer: D
NEW QUESTION 15
The connection to the ClusterXL member ‘A’ breaks. The ClusterXL member ‘A’ status is now ‘down’. Afterwards the switch admin set a port to ClusterXL member ‘B’ to ‘down’. What will happen?
- A. ClusterXL member ‘B’ also left the cluster.
- B. ClusterXL member ‘B’ stays active as last member.
- C. Both ClusterXL members share load equally.
- D. ClusterXL member ‘A’ is asked to come back to cluster.
Answer: B
NEW QUESTION 16
Update the topology in the cluster object.
Solution:
Does this meet the goal?
- A. Yes
- B. Not Mastered
Answer: A
NEW QUESTION 17
How do you configure the Security Policy to provide user access to the Captive Portal through an external (Internet) interface?
- A. Change the gateway settings to allow Captive Portal access via an external interface.
- B. No action is necessar
- C. This access is available by default.
- D. Change the Identity Awareness settings under Global Properties to allow Captive Portal access on all interfaces.
- E. Change the Identity Awareness settings under Global Properties to allow Captive Portal access for an external interface.
Answer: A
NEW QUESTION 18
After implementing Static Address Translation to allow Internet traffic to an internal Web Server on your DMZ, you notice that any NATed connections to that machine are being dropped by anti-spoofing protections. Which of the following is the MOST LIKELY cause?
- A. The Global Properties setting Translate destination on client side is unchecke
- B. But the topology on the DMZ interface is set to Internal - Network defined by IP and Mas
- C. Check the Global Properties setting Translate destination on client side.
- D. The Global Properties setting Translate destination on client side is unchecke
- E. But the topology on the external interface is set to Others +. Change topology to External.
- F. The Global Properties setting Translate destination on client side is checke
- G. But the topology on the external interface is set to Externa
- H. Change topology to Others +.
- I. The Global Properties setting Translate destination on client side is checke
- J. But the topology on the DMZ interface is set to Internal - Network defined by IP and Mas
- K. Uncheck the Global Properties setting Translate destination on client side.
Answer: A
NEW QUESTION 19
......
100% Valid and Newest Version 156-915.77 Questions & Answers shared by 2passeasy, Get Full Dumps HERE: https://www.2passeasy.com/dumps/156-915.77/ (New 203 Q&As)