156-915.77 Exam Questions

- (Topic 1) Your primary Security Gateway runs on GAiA. What is the easiest way to back up your Security Gateway R77 configuration, including routing and network configuration file...

- (Topic 1) Which of the following statements accurately describes the command upgrade_export?

- (Topic 1) A snapshot delivers a complete GAiA backup. The resulting file can be stored on servers or as a local file in /var/CPsnapshot/snapshots. How do you restore a local snap...

- (Topic 1) What is the syntax for uninstalling a package using newpkg?

- (Topic 1) You need to back up the routing, interface, and DNS configuration information from your R77 GAiA Security Gateway. Which backup-and-restore solution do you use?

- (Topic 1) Which command line interface utility allows the administrator to verify the Security Policy name and timestamp currently installed on a firewall module?

- (Topic 1) Which operating systems are supported by a Check Point Security Gateway on an open server? Select MOST complete list.

- (Topic 1) Before upgrading SecurePlatform to GAiA, you should create a backup. To save time, many administrators use the command backup. This creates a backup of the Check Point...

- (Topic 1) Which command displays the installed Security Gateway version?

- (Topic 1) What is the primary benefit of using the command upgrade_export over either backup or snapshot?

- (Topic 1) Match the following commands to their correct function. Each command has one function only listed.

- (Topic 1) You are running a R77 Security Gateway on GAiA. In case of a hardware failure, you have a server with the exact same hardware and firewall version installed. What back...

- (Topic 1) Suppose the Security Gateway hard drive fails and you are forced to rebuild it. You have a snapshot file stored to a TFTP server and backups of your Security Management...

- (Topic 1) What are you required to do before running the command upgrade_export?

- (Topic 2) You want to generate a cpinfo file via CLI on a system running GAiA. This will take about 40 minutes since the log files are also needed. What action do you need to tak...

- (Topic 2) When restoring R77 using the command upgrade_import, which of the following items are NOT restored?

- (Topic 2) Many companies have defined more than one administrator. To increase security, only one administrator should be able to install a Rule Base on a specific Firewall. How...

- (Topic 2) Where can you find the Check Point's SNMP MIB file?

- (Topic 2) The third-shift Administrator was updating Security Management Server access settings in Global Properties. He managed to lock all administrators out of their accounts....

- (Topic 2) You are the Security Administrator for ABC-Corp. A Check Point Firewall is installed and in use on GAiA. You are concerned that the system might not be retaining your e...

- (Topic 2) When using GAiA, it might be necessary to temporarily change the MAC address of the interface eth 0 to 00:0C:29:12:34:56. After restarting the network the old MAC addre...

- (Topic 2) Peter is your new Security Administrator. On his first working day, he is very nervous and enters the wrong password three times. His account is locked. What can be don...

- (Topic 2) Which of the following commands can provide the most complete restoration of a R77 configuration?

- (Topic 2) Your company is running Security Management Server R77 on GAiA, which has been migrated through each version starting from Check Point 4.1. How do you add a new adminis...

- (Topic 2) You have a diskless appliance platform. How do you keep swap file wear to a minimum?

- (Topic 2) Your R77 primary Security Management Server is installed on GAiA. You plan to schedule the Security Management Server to run fw logswitch automatically every 48 hours....

- (Topic 2) What is the officially accepted diagnostic tool for IP Appliance Support?

- (Topic 2) The third-shift Administrator was updating Security Management Server access settings in Global Properties and testing. He managed to lock himself out of his account. H...

- (Topic 2) Several Security Policies can be used for different installation targets. The Firewall protecting Human Resources' servers should have its own Policy Package. These rul...

- (Topic 2) Your organization's disaster recovery plan needs an update to the backup and restore section to reap the new distributed R77 installation benefits. Your plan must meet...

- (Topic 3) Select the correct statement about Secure Internal Communications (SIC) Certificates. SIC Certificates:

- (Topic 3) Which of the following options is available with the GAiA cpconfig utility on a Management Server?

- (Topic 3) Which command would provide the most comprehensive diagnostic information to Check Point Technical Support?

- (Topic 3) Which of the following is a CLI command for Security Gateway R77?

- (Topic 3) ALL of the following options are provided by the GAiA sysconfig utility, EXCEPT:

- (Topic 3) Which of the following statements accurately describes the command snapshot?

- (Topic 3) How do you recover communications between your Security Management Server and Security Gateway if you lock yourself out through a rule or policy mis-configuration?

- (Topic 3) Which of the following tools is used to generate a Security Gateway R77 configuration report?

- (Topic 3) You are the Security Administrator for MegaCorp. A Check Point firewall is installed and in use on a platform using GAiA. You have trouble configuring the speed and dup...

- (Topic 3) How can you check whether IP forwarding is enabled on an IP Security Appliance?

- (Topic 3) Which command allows you to view the contents of an R77 table?

- (Topic 4) You enable Automatic Static NAT on an internal host node object with a private IP address of 10.10.10.5, which is NATed into 216.216.216.5. (You use the default setting...

- (Topic 4) You are MegaCorp's Security Administrator. There are various network objects which must be NATed. Some of them use the Automatic Hide NAT method, while others use the A...

- (Topic 4) Which Check Point address translation method allows an administrator to use fewer ISP- assigned IP addresses than the number of internal hosts requiring Internet connec...

- (Topic 4) You have three servers located in a DMZ, using private IP addresses. You want internal users from 10.10.10.x to access the DMZ servers by public IP addresses. Internal_...

- (Topic 4) You want to implement Static Destination NAT in order to provide external, Internet users access to an internal Web Server that has a reserved (RFC 1918) IP address. Yo...

- (Topic 4) Which Check Point address translation method is necessary if you want to connect from a host on the Internet via HTTP to a server with a reserved (RFC 1918) IP address...

- (Topic 4) You are a Security Administrator who has installed Security Gateway R77 on your network. You need to allow a specific IP address range for a partner site to access your...

- (Topic 4) A Web server behind the Security Gateway is set to Automatic Static NAT. Client side NAT is not checked in the Global Properties. A client on the Internet initiates a s...

- (Topic 4) After implementing Static Address Translation to allow Internet traffic to an internal Web Server on your DMZ, you notice that any NATed connections to that machine are...