Nest 0 Cart
Nest Account
Popular Exams
All Categories...
Nest
Nest 0
Contact
Log In / Sign Up
Copyright 2024 © store. All rights reserved.
Home Checkpoint 156-215.77

Checkpoint 156-215.77 Exam Practice Questions (P. 4)

  • Full Access (388 questions)
  • Six months of Premium Access
  • Access to one million comments
  • Seamless ChatGPT Integration
  • Ability to download PDF files
  • Anki Flashcard files for revision
  • No Captcha & No AdSense
  • Advanced Exam Configuration
Get Contributor Access
Question #31
Several Security Policies can be used for different installation targets. The Firewall protecting Human Resources' servers should have its own Policy Package.
These rules must be installed on this machine and not on the Internet Firewall. How can this be accomplished?
  1. A
    A Rule Base is always installed on all possible targets. The rules to be installed on a Firewall are defined by the selection in the Rule Base row Install On.
  2. B
    When selecting the correct Firewall in each line of the Rule Base row Install On, only this Firewall is shown in the list of possible installation targets after selecting Policy > Install on Target.
  3. C
    In the menu of SmartDashboard, go to Policy > Policy Installation Targets and select the correct firewall via Specific Targets.
  4. D
    A Rule Base can always be installed on any Check Point Firewall object. It is necessary to select the appropriate target directly after selecting Policy > Install

Correct Answer:
C

Question #32
You have a diskless appliance platform. How do you keep swap file wear to a minimum?
  1. A
    Issue FW-1 bases its package structure on the Security Management Server, dynamically loading when the firewall is booted.
  2. B
    The external PCMCIA-based flash extension has the swap file mapped to it, allowing easy replacement.
  3. C
    Use PRAM flash devices, eliminating the longevity.
  4. D
    A RAM drive reduces the swap file thrashing which causes fast wear on the device.

Correct Answer:
D

Question #33
Your R77 primary Security Management Server is installed on GAiA. You plan to schedule the Security Management Server to run fw logswitch automatically every 48 hours. How do you create this schedule?
  1. A
    On a GAiA Security Management Server, this can only be accomplished by configuring the command fw logswitch via the cron utility.
  2. B
    Create a time object, and add 48 hours as the interval. Open the primary Security Management Server object's Logs and Masters window, enable Schedule log switch, and select the Time object.
  3. C
    Create a time object, and add 48 hours as the interval. Open the Security Gateway object's Logs and Masters window, enable Schedule log switch, and select the Time object.
  4. D
    Create a time object, and add 48 hours as the interval. Select that time object's Global Properties > Logs and Masters window, to schedule a logswitch.

Correct Answer:
B

Question #34
Which of the following methods will provide the most complete backup of an R77 configuration?
  1. A
    Policy Package Management
  2. B
    Copying the directories $FWDIR\conf and $CPDIR\conf to another server
  3. C
    Execute command upgrade_export
  4. D
    Database Revision Control

Correct Answer:
C

Question #35
Which of the following commands can provide the most complete restoration of a R77 configuration?
  1. A
    upgrade_import
  2. B
    cpinfo -recover
  3. C
    cpconfig
  4. D
    fwm dbimport -p <export file>

Correct Answer:
A

Question #36
When restoring R77 using the command upgrade_import, which of the following items are NOT restored?
  1. A
    SIC Certificates
  2. B
    Licenses
  3. C
    Route tables
  4. D
    Global properties

Correct Answer:
C

Question #37
Your organization's disaster recovery plan needs an update to the backup and restore section to reap the new distributed R77 installation benefits. Your plan must meet the following required and desired objectives:
Required ObjectivE. The Security Policy repository must be backed up no less frequently than every 24 hours.
Desired ObjectivE. The R77 components that enforce the Security Policies should be backed up at least once a week.
Desired ObjectivE. Back up R77 logs at least once a week.
Your disaster recovery plan is as follows:
- Use the cron utility to run the command upgrade_export each night on the Security Management Servers.
- Configure the organization's routine back up software to back up the files created by the command upgrade_export.
- Configure the GAiA back up utility to back up the Security Gateways every Saturday night.
- Use the cron utility to run the command upgrade_export each Saturday night on the log servers.
- Configure an automatic, nightly logswitch.
- Configure the organization's routine back up software to back up the switched logs every night.
Upon evaluation, your plan:
  1. A
    Meets the required objective and only one desired objective.
  2. B
    Meets the required objective but does not meet either desired objective.
  3. C
    Does not meet the required objective.
  4. D
    Meets the required objective and both desired objectives.

Correct Answer:
D

Question #38
Your company is running Security Management Server R77 on GAiA, which has been migrated through each version starting from Check Point 4.1. How do you add a new administrator account?
  1. A
    Using SmartDashboard, under Users, select Add New Administrator
  2. B
    Using SmartDashboard or cpconfig
  3. C
    Using the Web console on GAiA under Product configuration, select Administrators
  4. D
    Using cpconfig on the Security Management Server, choose Administrators

Correct Answer:
A

Question #39
Peter is your new Security Administrator. On his first working day, he is very nervous and enters the wrong password three times. His account is locked. What can be done to unlock Peter's account? Give the BEST answer.
  1. A
    You can unlock Peter's account by using the command fwm lock_admin -u Peter on the Security Management Server.
  2. B
    You can unlock Peter's account by using the command fwm unlock_admin -u Peter on the Security Management Server
  3. C
    It is not possible to unlock Peter's account. You have to install the firewall once again or abstain from Peter's help.
  4. D
    You can unlock Peter's account by using the command fwm unlock_admin -u Peter on the Security Gateway.

Correct Answer:
A

Question #40
Where can you find the Check Point's SNMP MIB file?
  1. A
    $CPDIR/lib/snmp/chkpt.mib
  2. B
    $FWDIR/conf/snmp.mib
  3. C
    It is obtained only by request from the TAC.
  4. D
    There is no specific MIB file for Check Point products.

Correct Answer:
A

Previous Questions Next Questions

All Pages