we provide Verified Check-Point 156-215.77 exam answers which are the best for clearing 156-215.77 test, and to get certified by Check-Point Check Point Certified Security Administrator – GAiA. The 156-215.77 Questions & Answers covers all the knowledge points of the real 156-215.77 exam. Crack your Check-Point 156-215.77 Exam with latest dumps, guaranteed!
Free demo questions for Check-Point 156-215.77 Exam Dumps Below:
NEW QUESTION 1
What happens when you run the command. fw sam -J src [Source IP Address]?
- A. Connections from the specified source are blocked without the need to change the Security Policy.
- B. Connections to the specified target are blocked without the need to change the Security Policy.
- C. Connections to and from the specified target are blocked without the need to change the Security Policy.
- D. Connections to and from the specified target are blocked with the need to change the Security Policy.
Answer: A
NEW QUESTION 2
How does the button Get Address, found on the Host Node Object > General Properties page retrieve the address?
- A. Route Table
- B. SNMP Get
- C. Address resolution (ARP, RARP)
- D. Name resolution (hosts file, DNS, cache)
Answer: D
NEW QUESTION 3
Lily has completed the initial setup of her Management Server with an IP address of 192.168.12.12. She must now run the First Time Configuration Wizard via the Gaia Portal to finish the setup. Lily knows she must use a browser to access the device, but it unsure of the correct URL to enter; which one below will she need to use?
- A. http://192.168.12.12
- B. https://192.168.12.12:4433
- C. https://192.168.12.12
- D. http://192.168.12.12:8080
Answer: C
NEW QUESTION 4
Where are custom queries stored in R77 SmartView Tracker?
- A. On the SmartView Tracker PC local file system under the user's profile.
- B. On the Security Management Server tied to the GUI client IP.
- C. On the Security Management Server tied to the Administrator User Database login name.
- D. On the SmartView Tracker PC local file system shared by all users of that local PC.
Answer: C
NEW QUESTION 5
Your company has two headquarters, one in London, and one in New York. Each office includes several branch offices. The branch offices need to communicate with the headquarters in their country, not with each other, and only the headquarters need to communicate directly.
What is the BEST configuration for establishing VPN Communities for this company? VPN Communities comprised of:
- A. One star Community with the option to mesh the center of the star: New York and London Gateways added to the center of the star with the mesh center Gateways option checked; all London branch offices defined in one satellite window, but, all New York branch offices defined in another satellite window.
- B. Two mesh and one star Community: One mesh Community is set up for each of the headquarters and its branch office
- C. The star Community is configured with London as the center of the Community and New York is the satellite.
- D. Two star and one mesh Community: One star Community is set up for each site, with headquarters as the Community center, and its branches as satellite
- E. The mesh Community includes only New York and London Gateways.
- F. Three mesh Communities: One for London headquarters and its branches, one for New York headquarters and its branches, and one for London and New York headquarters.
Answer: C
NEW QUESTION 6
Which SmartView Tracker selection would most effectively show who installed a Security Policy blocking all traffic from the corporate network?
- A. Management tab
- B. Custom filter
- C. Network and Endpoint tab
- D. Active tab
Answer: A
NEW QUESTION 7
Which statement below describes the most correct strategy for implementing a Rule Base?
- A. Limit grouping to rules regarding specific access.
- B. Place the most frequently used rules at the top of the Policy and the ones that are not frequently used further down.
- C. Place a network-traffic rule above the administrator access rule.
- D. Add the Stealth Rule before the last rule.
Answer: B
NEW QUESTION 8
The Identity Agent is a lightweight endpoint agent that authenticates securely with Single Sign-On (SSO). What is not a recommended usage of this method?
- A. When accuracy in detecting identity is crucial
- B. Leveraging identity for Data Center protection
- C. Protecting highly sensitive servers
- D. Identity based enforcement for non-AD users (non-Windows and guest users)
Answer: D
NEW QUESTION 9
Many companies have defined more than one administrator. To increase security, only one administrator should be able to install a Rule Base on a specific Firewall.
How do you configure this?
- A. Define a permission profile in SmartDashboard with read/write privileges, but restrict it to all other firewalls by placing them in the Policy Targets fiel
- B. Then, an administrator with this permission profile cannot install a policy on any Firewall not listed here.
- C. Put the one administrator in an Administrator group and configure this group in the specific Firewall object in Advanced > Permission to Install.
- D. In the object General Properties representing the specific Firewall, go to the Software Blades product list and select Firewal
- E. Right-click in the menu, select Administrator to Install to define only this administrator.
- F. Right-click on the object representing the specific administrator, and select that Firewall in Policy Targets.
Answer: B
NEW QUESTION 10
The customer has a small Check Point installation which includes one Windows 2008 server as SmartConsole and Security Management Server with a second server running GAiA as Security Gateway. This is an example of a(n):
- A. Stand-Alone Installation.
- B. Distributed Installation.
- C. Unsupported configuration.
- D. Hybrid Installation.
Answer: B
NEW QUESTION 11
How can you activate the SNMP daemon on a Check Point Security Management Server?
- A. Using the command line, enter snmp_install.
- B. From cpconfig, select SNMP extension.
- C. Any of these options will work.
- D. In SmartDashboard, right-click a Check Point object and select Activate SNMP.
Answer: B
NEW QUESTION 12
Central license management allows a Security Administrator to perform which of the following functions?
1. Check for expired licenses.
2. Sort licenses and view license properties.
3. Attach both R77 Central and Local licesnes to a remote module.
4. Delete both R77 Local Licenses and Central licenses from a remote module.
5. Add or remove a license to or from the license repository.
6. Attach and/or delete only R77 Central licenses to a remote module (not Local licenses).
- A. 1, 2, 5, & 6
- B. 2, 3, 4, & 5
- C. 2, 5, & 6
- D. 1, 2, 3, 4, & 5
Answer: D
NEW QUESTION 13
Which of the following is NOT an option for internal network definition of Anti-spoofing?
- A. Specific – derived from a selected object
- B. Route-based – derived from gateway routing table
- C. Network defined by the interface IP and Net Mask
- D. Not-defined
Answer: B
NEW QUESTION 14
Where do we need to reset the SIC on a gateway object?
- A. SmartDashboard > Edit Gateway Object > General Properties > Communication
- B. SmartUpdate > Edit Security Management Server Object > SIC
- C. SmartUpdate > Edit Gateway Object > Communication
- D. SmartDashboard > Edit Security Management Server Object > SIC
Answer: D
NEW QUESTION 15
Where do you verify that UserDirectory is enabled?
- A. Verify that Security Gateway > General Properties > Authentication > Use UserDirectory (LDAP) for Security Gateways is checked
- B. Verify that Global Properties > Authentication > Use UserDirectory (LDAP) for Security Gateways is checked
- C. Verify that Security Gateway > General Properties > UserDirectory (LDAP) > UseUserDirectory (LDAP) for Security Gateways is checked
- D. Verify that Global Properties > UserDirectory (LDAP) > Use UserDirectory (LDAP) for Security Gateways is checked
Answer: D
NEW QUESTION 16
......
Thanks for reading the newest 156-215.77 exam dumps! We recommend you to try the PREMIUM Certshared 156-215.77 dumps in VCE and PDF here: https://www.certshared.com/exam/156-215.77/ (388 Q&As Dumps)