156-727.77 Exam Questions

Can the Anti-Bot software blade be enabled on a Secure Web Gateway as well?

Which of these is a Check Point Firewall attribute?

What is the name of Check Point collaborative network that delivers real-time dynamic security intelligence to Check Point threat prevention blades?

What is the main purpose of the ThreatCloud?

Which of the following is information uploaded to ThreatCloud?

Check Point's IPS blade provides two pre-defined profiles. Which of the following definitions are correct?

When adding IPS to a gateway, which profile will be set?

IPS is primarily a __________-based engine.

IPS can assist in the discovery of unknown buffer overflow attacks without any pre-defined signatures.

What advantage does the Recommended_Profile provide over the Default_Protection profile?

SmartEvent has several components that work together to help track down security threats. What is the function of the Correlation Unit as one of those components in the architectur...

In SmartViewTracker, you see a log record of type "control" and severity "critical" for the product "Threat Emulation" which says: "cloud emulation failed. Reason: failed to authen...

How can SmartEvent be launched out of SmartDashboard?

An end-user calls the helpdesk, complaining that he cannot access a web site. You check the log and see that an IPS signature is dropping his connections. What can you do? Change t...

You just enabled the IPS blade, and have downloaded the latest signature updates. You created a custom profile but you are concerned that if you push a policy it might start droppi...

Order the steps to bypass the IPS for specific protection:

Looking at these logs, what happened at 10:55?

_______________ enforces or monitors traffic, based on the source or destination IP address of the country.

This graphic shows traffic being blocked from certain countries. What is the deciding factor for this?

If a bot is detected on your network, which of the following statements is correct regarding anti- bot blade.

Damage from a bot attack can take place after the bot compromises a machine. Which of the following represents the order by which this process takes place? The bot:

The Threat Prevention software blade:

When is the default Threat Prevention profile enforced?

Which of the following statements regarding the threat prevention database is NOT correct?

When configuring Anti-Bot & Anti-Virus, you notice the following error in the Update Status of the Gateways page: What is the most likely cause of this error?

Put these HTTPS traffic inspections steps in the correct order.

Which blades can support HTTPS inspection?

When the feature ______________ is ON, the Gateway does not block DNS requests that were identified as malicious. Instead it sends a false response with a bogus IP address to the c...

What is the most common way a computer can become infected with a bot?

Bots and viruses appear as __________ in the reporting blade.

Joey is the MegaCorp Firewall administrator. Which options does he have for the configuration of the Threat Emulation Analysis Location on his gateway?

A customer does not own Check Point Gateways, but he wants to use Threat Emulation Service to detect SMTP Zero-Day vulnerabilities. What is his option?

A customer does not own Check Point Gateways, but he wants to use Threat Emulation Service to detect SMTP Zero-Day vulnerabilities. What is his option?

What is the minimum software version required for a Threat Emulation deployment?

SmartEvent > Events > Predefined: in which section can the "All Threat Emulation" setting be found?

SmartLog displays:

SmartLog can be used to identify which of the following:

Which of the following are valid Boolean search terms that can be used in custom SmartLog queries?

Which of these statements describes the Check Point ThreatCloud?

Which TCP ports allow LDAP users to communicate with the Account Unit?

Check Point Intrusion Prevention System (IPS) is available in two deployment methods, as a blade and also a dedicated appliance. What is the dedicated appliance called?

What is the minimum amount of RAM needed for a Threat Prevention Appliance?

Which software blades are characteristic to a Threat Prevention Appliance?

Which of the following is information shared via ThreatCloud?

Which of the following is information shared via ThreatCloud?

Sensitive corporate data is uploaded to ThreatCloud:

What is the name of the Check Point cloud-driven Knowledgebase?

What filters can be used in Check Point ThreatWiki (either via ThreatWiki.checkpoint.com or via ThreatPrevention tab in Dashboard)?

Which of the following is a searchable database of all known threats detected by sensors around the world?

When pushing the Threat Prevention policy, which of the following blades will NOT get updated?