How Many Questions Of 156-915.77 Testing Software

NEW QUESTION 1

Which Check Point address translation method is necessary if you want to connect from a host on the Internet via HTTP to a server with a reserved (RFC 1918) IP address on your DMZ?

• A. Dynamic Source Address Translation
• B. Hide Address Translation
• C. Port Address Translation
• D. Static Destination Address Translation

Answer: D

NEW QUESTION 2

Can you implement a complete IPv6 deployment without IPv4 addresses?

• A. N
• B. SmartCenter cannot be accessed from everywhere on the Internet.
• C. Ye
• D. Only one TCP stack (IPv6 or IPv4) can be used at the same time.
• E. Yes, There is no requirement for managing IPv4 addresses.
• F. N
• G. IPv4 addresses are required for management.

Answer: C

NEW QUESTION 3

What is the primary benefit of using the command upgrade_export over either backup or snapshot?

• A. upgrade_export is operating system independent and can be used when backup or snapshot is not available.
• B. upgrade_export will back up routing tables, hosts files, and manual ARP configurations, where backup and snapshot will not.
• C. The commands backup and snapshot can take a long time to run whereas upgrade_export will take a much shorter amount of time.
• D. upgrade_export has an option to back up the system and SmartView Tracker logs while backup and snapshot will not.

Answer: A

NEW QUESTION 4

MultiCorp is running Smartcenter R71 on an IPSO platform and wants to upgrade to a new Appliance with R77. Which migration tool is recommended?

• A. Download Migration Tool R77 for IPSO and Splat/Linux from Check Point website.
• B. Use already installed Migration Tool.
• C. Use Migration Tool from CD/ISO
• D. Fetch Migration Tool R71 for IPSO and Migration Tool R77 for Splat/Linux from CheckPoint website

Answer: A

NEW QUESTION 5
CORRECT TEXT
Type the command and syntax to view critical devices on a cluster member in a ClusterXL environment.

• A. Yes
• B. Not Mastered

Answer: A

NEW QUESTION 6

You cannot use SmartDashboard’s User Directory features to connect to the LDAP server. What should you investigate?
1) Verify you have read-only permissions as administrator for the operating system.
2) Verify there are no restrictions blocking SmartDashboard's User Manager from connecting to the LDAP server.
3) Check that the login Distinguished Name configured has root permission (or at least write permission Administrative access) in the LDAP Server's access control configuration.

• A. 1, 2, and 3
• B. 2 and 3
• C. 1 and 2
• D. 1 and 3

Answer: B

NEW QUESTION 7

Captive Portal is a that allows the gateway to request login information from
the user.

• A. Pre-configured and customizable web-based tool
• B. Transparent network inspection tool
• C. LDAP server add-on
• D. Separately licensed feature

Answer: A

NEW QUESTION 8

John Adams is an HR partner in the ACME organization. ACME IT wants to limit access to HR servers to a set of designated IP addresses to minimize malware infection and unauthorized access risks. Thus, the gateway policy permits access only from John's desktop which is assigned a static IP address 10.0.0.19.
He has received a new laptop and wants to access the HR Web Server from anywhere in the organization. The IT department gave the laptop a static IP address, but that limits him to operating it only from his desk. The current Rule Base contains a rule that lets John Adams access the HR Web Server from his laptop with a static IP (10.0.0.19).
He wants to move around the organization and continue to have access to the HR Web Server. To make this scenario work, the IT administrator:
1) Enables Identity Awareness on a gateway, selects AD Query as one of the Identity Sources, and installs the policy.
2) Adds an access role object to the Firewall Rule Base that lets John Adams access the HR Web Server from any machine and from any location and installs policy.
John plugged in his laptop to the network on a different network segment and was not able
to connect to the HR Web server. What is the next BEST troubleshooting step?

• A. Investigate this as a network connectivity issue
• B. Install the Identity Awareness Agent
• C. Set static IP to DHCP
• D. After enabling Identity Awareness, reboot the gateway

Answer: C

NEW QUESTION 9

Peter is your new Security Administrator. On his first working day, he is very nervous and enters the wrong password three times. His account is locked. What can be done to unlock Peter’s account? Give the BEST answer.

• A. You can unlock Peter’s account by using the command fwm lock_admin -u Peter on the Security Management Server.
• B. You can unlock Peter’s account by using the command fwm unlock_admin -u Peter on the Security Management Server
• C. It is not possible to unlock Peter’s accoun
• D. You have to install the firewall once again or abstain from Peter’s help.
• E. You can unlock Peter’s account by using the command fwm unlock_admin -u Peter on the Security Gateway.

Answer: A

NEW QUESTION 10
CORRECT TEXT
Complete this statement. To save interface information before upgrading a Windows Gateway, use command

• A. Yes
• B. Not Mastered

Answer: A

NEW QUESTION 11

Select the correct statement about Secure Internal Communications (SIC) Certificates. SIC Certificates:

• A. Are used for securing internal network communications between the SmartDashboard and the Security Management Server.
• B. For R75 Security Gateways are created during the Security Management Server installation.
• C. Decrease network security by securing administrative communication among the Security Management Servers and the Security Gateway.
• D. Uniquely identify Check Point enabled machines; they have the same function as VPN Certificates.

Answer: D

NEW QUESTION 12
Install the Security Policy.

• A. Yes
• B. Not Mastered

Answer: A

NEW QUESTION 13

Which of the following are authentication methods that Security Gateway R77 uses to validate connection attempts? Select the response below that includes the MOST complete list of valid authentication methods.

• A. Proxied, User, Dynamic, Session
• B. Connection, User, Client
• C. User, Client, Session
• D. User, Proxied, Session

Answer: C

NEW QUESTION 14

Complete this statement from the options provided. Using Captive Portal, unidentified users may be either; blocked, allowed to enter required credentials, or required to download the___.

• A. Identity Awareness Agent
• B. Full Endpoint Client
• C. ICA Certificate
• D. SecureClient

Answer: A

NEW QUESTION 15

As a Security Administrator, you must refresh the Client Authentication authorization time- out every time a new user connection is authorized. How do you do this? Enable the Refreshable Timeout setting:

• A. in the user object's Authentication screen.
• B. in the Gateway object's Authentication screen.
• C. in the Limit tab of the Client Authentication Action Properties screen.
• D. in the Global Properties Authentication screen.

Answer: C

NEW QUESTION 16
......