156-115.77 Exam Questions

You enabled IPv6 in your environment and would like to erase all IPv6 connection tables. How can you do it?

What is the length of an IPv6 address?

In a ClusterXL that uses IPV6 Address, how do you configure the sync interface?

What command allows you to monitor IPV6 packets in the kernel module?

True or False: It is possible to operate a Security Gateway entirely with IPv6 addressing.

What VSX components do not support IPv6 in R77 VSX mode?

A system administrator wants to convert an IPv6 gateway from a standard gateway into a gateway running VSX mode. What does he need to consider?

How do you enable IPv6 support on a R77 gateway running the GAiIA OS?

How do you disable IPv6 on an IPSO gateway?

Does R77 SmartDashboard support IPv6?

Which of the following statements about Full HA support with IPv6 is NOT true?

When troubleshooting a VPN site-to-site to a peer, it may be necessary to "down" the tunnel. What is the best method to remove ONLY the tunnel to this peer?

How can an administrator stay up-to-date on the status of their VPN Tunnels?

Where would an administrator set an email alert for a specific permanent VPN tunnel?

Which of the these dynamic route protocols CANNOT be used along with VTI (VPN Tunnel Interface).

When configuring a Numbered VPN-Tunnel, what parameters are necessary?

You have to establish a VPN communication between 2 spokes, routed through the Hub gateway. Where do you configure VPN routing?

Where do you enable Route-based VPN?

The current release of Check Point R77, what is a potential performance-related drawback to using Virtual Tunnel Interfaces (VTI) rather than Domain-based VPNs?

What type(s) of VTI interfaces do Edge gateways support?

What does the command vpn shell interface add numbered 192.168.0.1 192.168.0.2 Gateway_A to_B accomplish?

You are configuring a VTI in a clustered environment. Which of the following must be TRUE?

You are configuring VTIs in a clustered environment. On Peer A the VTI name is VT_Cluster_GWA and on Peer B the VTI name is VT_Cluster_GWB. You find that the route- based tunnel is...

What are the common Best Practices for configuring QoS over a route-based VPN?

Where do you configure VTIs on your R77 gateway in VSX mode?

Which Dynamic Routing Protocols are supported in GAiA in a Route-based VPN configuration?

Jane wants to create a VPN using OSPF. Which VPN configuration would you recommend she use?

You are configuring dynamic VPN routing using OSPF. You have defined the gateways, created a fully meshed VPN Community that includes all participating Gateways; created a rule to...

Which routing protocols are not supported with GAIA OS running VTIs?

You want to enable OSPF on Secure Platform, but you notice that the required gated daemon is not running. How can you enable this?

You are configuring OSPF on your Secure Platform firewall. You are in expert mode and run the commands: interface vt-Gateway_C IP ospf 1 area 0.0.0.0 exit When you run show running...

Where can you configure OSPF on a GAiA firewall?

Why would you choose to combine dynamic routing protocols and VPNs?

In Wire mode. if a packet reaches the gateway from a trusted source and is destined to a trusted destination, will the firewall do stateful inspection?

What considerations are required when configuring IPV6 with Wire mode?

Which operating systems support Wire mode?

You are having issues with dynamic routing after a failover. The traffic is now coming from the backup and is being dropped as out of state. What is the BEST configuration to avoid...

Where can you configure Wire mode?

Where can you configure Wire mode?

When you have your directional VPN enforcement rule set to "Internal_Clear" , what does this represent?

You are using an IPV6 environment and find that you need additional access control and want to set up some directional VPN rules. How can you restrict access based on destination?

If you are experiencing LDAP issues, which of the following should you check?

Which type of R77 Security Server does not provide User Authentication?

How are cached usernames and passwords cleared from the memory of a R77 Security Gateway?

Identity Awareness is implemented to manage access to protected resources based on a user's _____________.

Which of the following allows administrators to allow or deny traffic to or from a specific network based on the user's credentials?

What command would you use for a packet capture on an absolute position for TCP streaming (out) 1ffffe0

The command fw monitor -p all displays what type of information?

What does the IP Options Strip represent under the fw chain output?

The command that lists the firewall kernel modules on a Security Gateway is: