156-215.77 Exam Questions

You enable Automatic Static NAT on an internal host node object with a private IP address of 10.10.10.5, which is NATed into 216.216.216.5. (You use the default settings in Global...

You have configured Automatic Static NAT on an internal host-node object. You clear the box Translate destination on client site from Global Properties > NAT. Assuming all other NA...

Where is the IPSO Boot Manager physically located on an IP Appliance?

How is wear on the flash storage device mitigated on diskless appliance platforms?

Your R77 primary Security Management Server is installed on GAiA. You plan to schedule the Security Management Server to run fw logswitch automatically every 48 hours. How do you c...

Which of the following methods will provide the most complete backup of an R75 configuration?

Which of the following commands can provide the most complete restoration of a R77 configuration?

When restoring R77 using the command upgrade_import, which of the following items are NOT restored?

Your organization's disaster recovery plan needs an update to the backup and restore section to reap the new distributed R77 installation benefits. Your plan must meet the followin...

Your company is running Security Management Server R77 on GAiA, which has been migrated through each version starting from Check Point 4.1. How do you add a new administrator accou...

Peter is your new Security Administrator. On his first working day, he is very nervous and enters the wrong password three times. His account is locked. What can be done to unlock...

Where can you find the Check Point's SNMP MIB file?

You want to generate a cpinfo file via CLI on a system running GAiA. This will take about 40 minutes since the log files are also needed. What action do you need to take regarding...

Many companies have defined more than one administrator. To increase security, only one administrator should be able to install a Rule Base on a specific Firewall. How do you confi...

What is the officially accepted diagnostic tool for IP Appliance Support?

ALL of the following options are provided by the SecurePlatform sysconfig utility, EXCEPT:

Which command enables IP forwarding on IPSO?

When you change an implicit rule's order from Last to First in Global Properties, how do you make the change take effect?

How does the button Get Address, found on the Host Node Object > General Properties page retrieve the address?

Anti-Spoofing is typically set up on which object type?

Spoofing is a method of:

How can you activate the SNMP daemon on a Check Point Security Management Server?

Which of the following describes the default behavior of an R77 Security Gateway?

When you use the Global Properties' default settings on R77, which type of traffic will be dropped if NO explicit rule allows the traffic?

You have installed a R77 Security Gateway on GAiA. To manage the Gateway from the enterprise Security Management Server, you create a new Gateway object and Security Policy. When y...

How do you recover communications between your Security Management Server and Security Gateway if you lock yourself out through a rule or policy mis-configuration?

How can you check whether IP forwarding is enabled on an IP Security Appliance?

Which command allows you to view the contents of an R77 table?

Which of the following tools is used to generate a Security Gateway R77 configuration report?

Which of the following is a CLI command for Security Gateway R77?

You are the Security Administrator for MegaCorp. A Check Point firewall is installed and in use on a platform using GAiA. You have trouble configuring the speed and duplex settings...

Certificates for Security Gateways are created during a simple initialization from _____________.

Which of the below is the MOST correct process to reset SIC from SmartDashboard?

You installed Security Management Server on a computer using GAiA in the MegaCorp home office. You use IP address 10.1.1.1. You also installed the Security Gateway on a second Secu...

Although SIC was already established and running, Joe reset SIC between the Security Management Server and a remote Gateway. He set a new activation key on the Gateway's side with...

John is the Security Administrator in his company. He installs a new R77 Security Management Server and a new R77 Gateway. He now wants to establish SIC between them. After enterin...

You want to reset SIC between smberlin and sgosaka. In SmartDashboard, you choose sgosaka, Communication, Reset. On sgosaka, you start cpconfig, choose Secure Internal Communicatio...

Where is the fingerprint generated, based on the output display?

When using vpn tu, which option must you choose if you want to rebuild your VPN for a specific IP (gateway)?

You review this Security Policy because Rule 4 is inhibited. Which Rule is responsible?

What happens if you select Web Server in the dialog box?

When configuring the Check Point Gateway network interfaces, you can define the direction as Internal or External. What does the option Interface leads to DMZ mean?

What happens when you open the Gateway object window Trusted Communication and press and confirm Reset?

As you review this Security Policy, what changes could you make to accommodate Rule 4?

Reviewing the Rule Base, you see that ________ is responsible for the installation failure.

Select the TRUE statements about the Rule Base shown? 1) HTTP traffic from webrome to websingapore will be encrypted. 2) HTTP traffic from websingapore to webrome will be encrypted...

To qualify as an Identity Awareness enabled rule, which columns may include an Access Role?

For information to pass securely between a Security Management Server and another Check Point component, what would NOT be required?

What is the bit size of a DES key?

What is the size of a hash produced by SHA-1?