Want to know Ucertify 156-215.77 Exam practice test features? Want to lear more about Check-Point Check Point Certified Security Administrator – GAiA certification experience? Study Practical Check-Point 156-215.77 answers to Abreast of the times 156-215.77 questions at Ucertify. Gat a success with an absolute guarantee to pass Check-Point 156-215.77 (Check Point Certified Security Administrator – GAiA) test on your first attempt.
Check-Point 156-215.77 Free Dumps Questions Online, Read and Test Now.
NEW QUESTION 1
Which of the following methods will provide the most complete backup of an R77 configuration?
- A. Policy Package Management
- B. Copying the directories $FWDIR\conf and $CPDIR\conf to another server
- C. Execute command upgrade_export
- D. Database Revision Control
Answer: C
NEW QUESTION 2
Although SIC was already established and running, Joe reset SIC between the Security Management Server and a remote Gateway. He set a new activation key on the Gateway’s side with the command cpconfig and put in the same activation key in the Gateway’s object on the Security Management Server. Unfortunately, SIC can not be established. What is a possible reason for the problem?
- A. The installed policy blocks the communication.
- B. The old Gateway object should have been deleted and recreated.
- C. Joe forgot to exit from cpconfig.
- D. Joe forgot to reboot the Gateway.
Answer: C
NEW QUESTION 3
Which NAT option is available for Manual NAT as well as Automatic NAT?
- A. Allow bi-directional NAT
- B. Automatic ARP configuration
- C. Translate destination on client-side
- D. Enable IP Pool NAT
Answer: C
NEW QUESTION 4
Jack has been asked do enable Identify Awareness.
What are the three methods for Acquiring Identify available in the Identify Awareness Configuration Wizard?
- A. LDAP Query, Terminal Servers, Light-weight Identity Agent
- B. AD Query, Browser-Based Authentication, Light-Weight Identity Agent
- C. AD Query, Browser-Based Authentication, Terminal Servers
- D. LDAP Query, Browser-Based Authentication, Terminal Servers
Answer: C
NEW QUESTION 5
Which R77 SmartConsole tool would you use to verify the installed Security Policy name on a Security Gateway?
- A. SmartView Tracker
- B. None, SmartConsole applications only communicate with the Security Management Server.
- C. SmartView Server
- D. SmartUpdate
Answer: A
NEW QUESTION 6
How many packets does the IKE exchange use for Phase 1 Main Mode?
- A. 12
- B. 1
- C. 3
- D. 6
Answer: D
NEW QUESTION 7
Captive Portal is a that allows the gateway to request login information from the user.
- A. Pre-configured and customizable web-based tool
- B. Transparent network inspection tool
- C. LDAP server add-on
- D. Separately licensed feature
Answer: A
NEW QUESTION 8
Your Security Gateways are running near performance capacity and will get upgraded
hardware next week. Which of the following would be MOST effective for quickly dropping all connections from a specific attacker’s IP at a peak time of day?
- A. Intrusion Detection System (IDS) Policy install
- B. Change the Rule Base and install the Policy to all Security Gateways
- C. SAM - Block Intruder feature of SmartView Tracker
- D. SAM - Suspicious Activity Rules feature of SmartView Monitor
Answer: D
NEW QUESTION 9
Choose the correct statement regarding Implied Rules:
- A. To edit Implied rules you go to: Launch Button > Policy > Global Properties > Firewall.
- B. Implied rules are fixed rules that you cannot change.
- C. You can directly edit the Implied rules by double-clicking on a specific Implicit rule.
- D. You can edit the Implied rules but only if requested by Check Point support personnel.
Answer: A
NEW QUESTION 10
What happens if the identity of a user is known?
- A. If the user credentials do not match an Access Role, the traffic is automatically dropped.
- B. If the user credentials do not match an Access Role, the system displays a sandbox.
- C. If the user credentials do not match an Access Role, the gateway moves onto the next rule.
- D. If the user credentials do not match an Access Role, the system displays the Captive Portal.
Answer: C
NEW QUESTION 11
By default, when you click File > Switch Active File in SmartView Tracker, the Security Management Server:
- A. Saves the current log file, names the log file by date and time, and starts a new log file.
- B. Purges the current log file, and starts a new log file.
- C. Prompts you to enter a filename, and then saves the log file.
- D. Purges the current log file, and prompts you for the new log’s mode.
Answer: A
NEW QUESTION 12
The fw monitor utility is used to troubleshoot which of the following problems?
- A. Phase two key negotiation
- B. Address translation
- C. Log Consolidation Engine
- D. User data base corruption
Answer: B
NEW QUESTION 13
A third-shift Security Administrator configured and installed a new Security Policy early this morning. When you arrive, he tells you that he has been receiving complaints that Internet access is very slow. You suspect the Security Gateway virtual memory might be the problem. Which SmartConsole component would you use to verify this?
- A. Eventia Analyzer
- B. SmartView Tracker
- C. SmartView Monitor
- D. This information can only be viewed with the command fw ctl pstat from the CLI.
Answer: C
NEW QUESTION 14
If you were NOT using IKE aggressive mode for your IPsec tunnel, how many packets would you see for normal Phase 1 exchange?
- A. 9
- B. 2
- C. 3
- D. 6
Answer: D
NEW QUESTION 15
Identify the correct step performed by SmartUpdate to upgrade a remote Security Gateway. After selecting Packages > Distribute Only and choosing the target Gateway, the:
- A. selected package is copied from the CD-ROM of the SmartUpdate PC directly to the Security Gateway and the installation IS performed.
- B. selected package is copied from the Package Repository on the Security Management Server to the Security Gateway and the installation IS performed.
- C. SmartUpdate wizard walks the Administrator through a distributed installation.
- D. selected package is copied from the Package Repository on the Security Management Server to the Security Gateway but the installation IS NOT performed.
Answer: D
NEW QUESTION 16
......
P.S. Easily pass 156-215.77 Exam with 388 Q&As Dumpscollection.com Dumps & pdf Version, Welcome to Download the Newest Dumpscollection.com 156-215.77 Dumps: https://www.dumpscollection.net/dumps/156-215.77/ (388 New Questions)