Top Tips Of Up To The Minute 156-215.77 Test Engine

NEW QUESTION 1
You are working with multiple Security Gateways that enforce an extensive number of rules. To simplify security administration, which one of the following would you choose to do?

• A. Eliminate all possible contradictory rules such as the Stealth or Cleanup rules.
• B. Run separate SmartConsole instances to login and configure each Security Gateway directly.
• C. Create network objects that restrict all applicable rules to only certain networks.
• D. Create a separate Security Policy package for each remote Security Gateway.

Answer: D

NEW QUESTION 2
Which of these components does NOT require a Security Gateway R77 license?

• A. Security Management Server
• B. Check Point Gateway
• C. SmartConsole
• D. SmartUpdate upgrading/patching

Answer: C

NEW QUESTION 3
In which Rule Base can you implement an Access Role?

• A. DLP
• B. Mobile Access
• C. IPS
• D. Firewall

Answer: D

NEW QUESTION 4
Where can an administrator specify the notification action to be taken by the firewall in the event that available disk space drops below 15%?

• A. SmartView Monitor > Gateway Status > Threshold Settings
• B. SmartView Tracker > Audit Tab > Gateway Counters
• C. SmartView Monitor > Gateway Status > System Information > Thresholds
• D. This can only be monitored by a user-defined script.

Answer: C

NEW QUESTION 5
Where is the easiest and BEST place to find information about connections between two machines?

• A. All options are valid.
• B. On a Security Gateway using the command fw log.
• C. On a Security Management Server, using SmartView Tracker.
• D. On a Security Gateway Console interface; it gives you detailed access to log files and state table information.

Answer: C

NEW QUESTION 6
Which of the following is true of the Cleanup rule?

• A. The Cleanup rule must be the last rule in a policy
• B. The Cleanup rule is an example of an Implied rule
• C. The Cleanup rule is important for blocking unwanted connections
• D. The Cleanup rule should not be logged

Answer: C

NEW QUESTION 7
What information is found in the SmartView Tracker Management log?

• A. SIC revoke certificate event
• B. Destination IP address
• C. Most accessed Rule Base rule
• D. Number of concurrent IKE negotiations

Answer: A

NEW QUESTION 8
You need to back up the routing, interface, and DNS configuration information from your R77 GAiA Security Gateway. Which backup-and-restore solution do you use?

• A. Manual copies of the directory $FWDIR/conf
• B. GAiA back up utilities
• C. upgrade_export and upgrade_import commands
• D. Database Revision Control

Answer: B

NEW QUESTION 9
A snapshot delivers a complete GAiA backup. The resulting file can be stored on servers or as a local file in /var/CPsnapshot/snapshots. How do you restore a local snapshot named MySnapshot.tgz?

• A. Reboot the system and call the start men
• B. Select the option Snapshot Management, provide the Expert password and select [L] for a restore from a local fil
• C. Then, provide the correct file name.
• D. As expert user, type the command snapshot -r MySnapshot.tgz.
• E. As expert user, type the command revert --file MySnapshot.tgz.
• F. As expert user, type the command snapshot - R to restore from a local fil
• G. Then, provide the correct file name.

Answer: C

NEW QUESTION 10
A Security Policy installed by another Security Administrator has blocked all SmartDashboard connections to the stand-alone installation of R77. After running the command fw unloadlocal, you are able to reconnect with SmartDashboard and view all changes. Which of the following change is the most likely cause of the block?

• A. The Allow Control Connections setting in Policy > Global Properties has been unchecked.
• B. A Stealth Rule has been configured for the R77 Gateway.
• C. The Security Policy installed to the Gateway had no rules in it.
• D. The Gateway Object representing your Gateway was configured as an Externally Managed VPN Gateway.

Answer: A

NEW QUESTION 11
A digital signature:

• A. Guarantees the authenticity and integrity of a message.
• B. Automatically exchanges shared keys.
• C. Decrypts data to its original form.
• D. Provides a secure key exchange mechanism over the Internet.

Answer: A

NEW QUESTION 12
You are working with three other Security Administrators.
Which SmartConsole component can be used to monitor changes to rules or object properties made by the other administrators?

• A. Eventia Tracker
• B. SmartView Monitor
• C. Eventia Monitor
• D. SmartView Tracker

Answer: D

NEW QUESTION 13
If you are experiencing LDAP issues, which of the following should you check?

• A. Connectivity between the R77 Gateway and LDAP server
• B. Secure Internal Communications (SIC)
• C. Overlapping VPN Domains
• D. Domain name resolution

Answer: A

NEW QUESTION 14
Which SmartConsole tool would you use to see the last policy pushed in the audit log?

• A. SmartView Tracker
• B. None, SmartConsole applications only communicate with the Security Management Server.
• C. SmartView Status
• D. SmartView Server

Answer: A

NEW QUESTION 15
What information is found in the SmartView Tracker Management log?

• A. Historical reports log
• B. Policy rule modification date/time stamp
• C. Destination IP address
• D. Most accessed Rule Base rule

Answer: B

NEW QUESTION 16
......