156-315.77 Exam Questions
717 real 156-315.77 exam questions with expert-verified answers and explanations. Page 3 of 15.
- Question #102
Match the Best Management High Availability synchronization-status descriptions for your Security Management Server (SMS):
- Question #103
Review the R76 configuration. Is it correct for Management High Availability?
- Question #104
Check Point New Mode HA is a(n) _________ solution.
- Question #105
What is the behavior of ClusterXL in a High Availability environment?
- Question #106
Review the cphaprob state command output from one New Mode High Availability ClusterXL cluster member. Which member will be active after member 192.168.1.2 fails over and is reboot...
- Question #107
Review the cphaprob state command output from a New Mode High Availability cluster member. Which machine has the highest priority?
- Question #108
By default Check Point High Availability components send updates about their state every:
- Question #109
You have just upgraded your Load Sharing gateway cluster (both members) from NGX R65 to R76. cphaprob stat shows: Which of the following is not a possible cause of this?
- Question #110
In Management High Availability, what is an Active SMS?
- Question #111
For Management High Availability, if an Active SMS goes down, does the Standby SMS automatically take over?
- Question #112
For Management High Availability synchronization, what does the Advance status mean?
- Question #113
Which of the following would be a result of having more than one active Security Management Server in a Management High Availability (HA) configuration?
- Question #114
You want to verify that your Check Point cluster is working correctly. Which command line tool can you use?
- Question #115
How can you view the virtual cluster interfaces of a Cluster XL environment?
- Question #116
How can you view the critical devices on a cluster member in a Cluster XL environment?
- Question #117
When Load Sharing Multicast mode is defined in a ClusterXL cluster object, how are packets being handled by cluster members?
- Question #118
Which of the following does NOT happen when using Pivot Mode in ClusterXL?
- Question #119
When distributing IPSec packets to gateways in a Load Sharing Multicast mode cluster, which valid Load Sharing method will consider VPN information?
- Question #120
By default, the Cluster Control Protocol (CCP) uses this to send delta sync messages to other cluster members.
- Question #121
To configure the Cluster Control Protocol (CCP) to use Broadcast, the following command is run:
- Question #122
What cluster mode is represented in this case?
- Question #123
What cluster mode is represented in this case?
- Question #124
Which of the listed load-balancing methods is NOT valid?
- Question #125
Which method of load balancing describes "Round Robin"?
- Question #126
In New Mode HA, the internal cluster IP VIP address is 10.4.8.3. The internal interfaces on two members are 10.4.8.1 and 10.4.8.2. Internal host 10.4.8.108 Pings 10.4.8.3, and rece...
- Question #127
In New Mode HA, the internal cluster IP VIP address is 10.4.8.3. An internal host 10.4.8.108 successfully pings its Cluster and receives replies. Review the ARP table from the inte...
- Question #128
State Synchronization is enabled on both members in a cluster, and the Security Policy is successfully installed. No protocols or services have been unselected for selective sync....
- Question #129
You have two IP Appliances: one IP565 and one IP395. Both appliances have IPSO 6.2 and R76 installed in a distributed deployment. Can they be members of a Gateway Cluster?
- Question #130
You want to upgrade a cluster with two members to VPN-1 NGX. The Smart CenterServer and both members are version VPN-1/Firewall-1 NG FP3, with the latest Hotfix. What is the correc...
- Question #131
Included in the client's network are some switches, which rely on IGMP snooping. You must find a solution to work with these switches. Which of the following answers does NOT lead...
- Question #132
The customer wishes to install a cluster. In his network, there is a switch which is incapable of forwarding multicast. Is it possible to install a cluster in this situation?
- Question #133
What could be a reason why synchronization between primary and secondary Security Management Servers does not occur?
- Question #134
What is the proper command for importing users into the R76 User Database?
- Question #135
In a R76 Management High Availability (HA) configuration, you can configure synchronization to occur automatically, when: 1. The Security Policy is installed. 2. The Security Polic...
- Question #136
What is a requirement for setting up R76 Management High Availability?
- Question #137
You are preparing computers for a new ClusterXL deployment. For your cluster, you plan to use three machines with the following configurations: Are these machines correctly configu...
- Question #138
You are preparing computers for a new ClusterXL deployment. For your cluster, you plan to use four machines with the following configurations: Cluster Member 1: OS:Secure Platform,...
- Question #139
What is the reason for the following error?
- Question #140
You are establishing a ClusterXL environment, with the following topology: External interfaces 192.168.10.1 and 192.168.10.2 connect to a VLAN switch. The upstream router connects...
- Question #141
You find that Gateway fw2 can NOT be added to the cluster object. What are possible reasons for that?
- Question #142
In which ClusterXL Load Sharing mode, does the pivot machine get chosen automatically by ClusterXL?
- Question #143
What configuration change must you make to change an existing ClusterXL cluster object from Multicast to Unicast mode?
- Question #144
In a R76 ClusterXL Load Sharing configuration, which type of ARP related problem can force the use of Unicast Mode (Pivot) configuration due to incompatibility on some adjacent rou...
- Question #145
In Load Sharing Unicast mode, the internal cluster IP address is 10.4.8.3. The internal interfaces on two members are 10.4.8.1 and 10.4.8.2. Internal host 10.4.8.108 Pings 10.4.8.3...
- Question #146
Which of the following commands will stop acceleration on a Security Gateway running onSecure Platform?
- Question #147
How do new connections get established through a Security Gateway with SecureXL enabled?
- Question #148
Which of the following commands can be used to bind a NIC to a single processor when using a Performance Pack onSecure Platform?
- Question #149
Review the Rule Base displayed. For which rules will the connection templates be generated in SecureXL?
- Question #150
Your customer asks you about the Performance Pack. You explain to him that a Performance Pack is a software acceleration product which improves the performance of the Security Gate...
- Question #151
Your customer complains of the weak performance of his systems. He has heard that Connection Templates accelerate traffic. How do you explain to the customer about template restric...