156-315.77 Exam Questions

Match the Best Management High Availability synchronization-status descriptions for your Security Management Server (SMS):

Review the R76 configuration. Is it correct for Management High Availability?

Check Point New Mode HA is a(n) _________ solution.

What is the behavior of ClusterXL in a High Availability environment?

Review the cphaprob state command output from one New Mode High Availability ClusterXL cluster member. Which member will be active after member 192.168.1.2 fails over and is reboot...

Review the cphaprob state command output from a New Mode High Availability cluster member. Which machine has the highest priority?

By default Check Point High Availability components send updates about their state every:

You have just upgraded your Load Sharing gateway cluster (both members) from NGX R65 to R76. cphaprob stat shows: Which of the following is not a possible cause of this?

In Management High Availability, what is an Active SMS?

For Management High Availability, if an Active SMS goes down, does the Standby SMS automatically take over?

For Management High Availability synchronization, what does the Advance status mean?

Which of the following would be a result of having more than one active Security Management Server in a Management High Availability (HA) configuration?

You want to verify that your Check Point cluster is working correctly. Which command line tool can you use?

How can you view the virtual cluster interfaces of a Cluster XL environment?

How can you view the critical devices on a cluster member in a Cluster XL environment?

When Load Sharing Multicast mode is defined in a ClusterXL cluster object, how are packets being handled by cluster members?

Which of the following does NOT happen when using Pivot Mode in ClusterXL?

When distributing IPSec packets to gateways in a Load Sharing Multicast mode cluster, which valid Load Sharing method will consider VPN information?

By default, the Cluster Control Protocol (CCP) uses this to send delta sync messages to other cluster members.

To configure the Cluster Control Protocol (CCP) to use Broadcast, the following command is run:

What cluster mode is represented in this case?

What cluster mode is represented in this case?

Which of the listed load-balancing methods is NOT valid?

Which method of load balancing describes "Round Robin"?

In New Mode HA, the internal cluster IP VIP address is 10.4.8.3. The internal interfaces on two members are 10.4.8.1 and 10.4.8.2. Internal host 10.4.8.108 Pings 10.4.8.3, and rece...

In New Mode HA, the internal cluster IP VIP address is 10.4.8.3. An internal host 10.4.8.108 successfully pings its Cluster and receives replies. Review the ARP table from the inte...

State Synchronization is enabled on both members in a cluster, and the Security Policy is successfully installed. No protocols or services have been unselected for selective sync....

You have two IP Appliances: one IP565 and one IP395. Both appliances have IPSO 6.2 and R76 installed in a distributed deployment. Can they be members of a Gateway Cluster?

You want to upgrade a cluster with two members to VPN-1 NGX. The Smart CenterServer and both members are version VPN-1/Firewall-1 NG FP3, with the latest Hotfix. What is the correc...

Included in the client's network are some switches, which rely on IGMP snooping. You must find a solution to work with these switches. Which of the following answers does NOT lead...

The customer wishes to install a cluster. In his network, there is a switch which is incapable of forwarding multicast. Is it possible to install a cluster in this situation?

What could be a reason why synchronization between primary and secondary Security Management Servers does not occur?

What is the proper command for importing users into the R76 User Database?

In a R76 Management High Availability (HA) configuration, you can configure synchronization to occur automatically, when: 1. The Security Policy is installed. 2. The Security Polic...

What is a requirement for setting up R76 Management High Availability?

You are preparing computers for a new ClusterXL deployment. For your cluster, you plan to use three machines with the following configurations: Are these machines correctly configu...

You are preparing computers for a new ClusterXL deployment. For your cluster, you plan to use four machines with the following configurations: Cluster Member 1: OS:Secure Platform,...

What is the reason for the following error?

You are establishing a ClusterXL environment, with the following topology: External interfaces 192.168.10.1 and 192.168.10.2 connect to a VLAN switch. The upstream router connects...

You find that Gateway fw2 can NOT be added to the cluster object. What are possible reasons for that?

In which ClusterXL Load Sharing mode, does the pivot machine get chosen automatically by ClusterXL?

What configuration change must you make to change an existing ClusterXL cluster object from Multicast to Unicast mode?

In a R76 ClusterXL Load Sharing configuration, which type of ARP related problem can force the use of Unicast Mode (Pivot) configuration due to incompatibility on some adjacent rou...

In Load Sharing Unicast mode, the internal cluster IP address is 10.4.8.3. The internal interfaces on two members are 10.4.8.1 and 10.4.8.2. Internal host 10.4.8.108 Pings 10.4.8.3...

Which of the following commands will stop acceleration on a Security Gateway running onSecure Platform?

How do new connections get established through a Security Gateway with SecureXL enabled?

Which of the following commands can be used to bind a NIC to a single processor when using a Performance Pack onSecure Platform?

Review the Rule Base displayed. For which rules will the connection templates be generated in SecureXL?

Your customer asks you about the Performance Pack. You explain to him that a Performance Pack is a software acceleration product which improves the performance of the Security Gate...

Your customer complains of the weak performance of his systems. He has heard that Connection Templates accelerate traffic. How do you explain to the customer about template restric...