Check Point Certified Security Expert Update Blade (156-915.77) Free Practice Test

Question 1

Snapshot is available on which Security Management Server and Security Gateway platforms?

A. Windows 2003 Server

B. Windows XP Server

C. Secure Platform

D. Solaris

Correct Answer: C

Question 2

When using migrate to upgrade a Secure Management Server, which of the following is included in the migration?

A. classes. C file

B. Smart Reporter database

C. Smart Event database

D. System interface configuration

Correct Answer: A

Question 3

Which of the following log files contains verbose information regarding the negotiation process and other encryption failures?

A. ike.elg

B. vpnd.elg

C. iked.elg

D. vpn.elg

Correct Answer: B

Question 4

The following configuration is for VPN-1 NGX:1s this configuration correct for Management High Availability (HA)?

A. No, a VPN-1 NGX Smart Center Server cannot run on Red Hat Linux 7.3.

B. No, A VPN-1 NGX Smart Center Server can only be in a Management HA configuration, if the operating system is Solaris.

C. No, the Smart Center Servers do not have the same number of NICs.

D. No, the Smart Center Servers must reside on the same network.

E. No, the Smart Center Servers must be installed on the same operating system.

Correct Answer: E

Question 5

Which statement is TRUE for route-based VPN's?

A. IP Pool NAT must be configured on each Gateway.

B. Route-based VPN's are a form of partial overlap VPN Domain.

C. Route-based VPN's replace domain-based VPN's.

D. Dynamic-routing protocols are not required.

Correct Answer: D

Question 6

When you add a resource service to a rule, which ONE of the following actions occur?

A. All packets matching that rule are either encrypted or decrypted by the defined resource.

B. VPN-1 Secure Client users attempting to connect to the object defined in the Destination column of the rule will receive a new Desktop Policy from the resource.

C. All packets matching the resource service rule are analyzed or authenticated, based on the resource properties.

D. Users attempting to connect to the destination of the rule will be required to authenticate.

E. All packets that match the resource in the rule will be dropped.

Correct Answer: C

Question 7

Identify the correct step performed by Smart Update to upgrade a remote Security Gateway.

A. After selecting "Packages: Add... from CD", the selected package is copied to the packages directory on the selected remote Security Gateway.

B. After selecting "Packages: Add... from CD", the selected package is copied to the Package Repository on the Smart Center Server.

C. After selecting "Packages: Add... from CD", the entire contents of the CD are copied to the Package Repository on the Smart Center Server.

D. After selecting "Packages: Add... from CD", the entire contents of the CD are copied to the packages directory on the selected remote Security Gateway.

Correct Answer: B

Question 8

MicroCorp experienced a security appliance failure. (LEDs of all NICs are off.) The age of the unit required that the RMA-unit be a different model. Will a revert to an existing snapshot bring the new unit up and running?

A. No. At installation the necessary hardware support is selected. The snapshot saves this state.

B. No. The revert will most probably not match to hard disk.

C. There is no dynamic update at reboot.

D. Yes. Everything is dynamically updated at reboot.

Correct Answer: A

Question 9

What is NOT true about Management Portal?

A. Management Portal could be reconfigured for using HTTP instead of HTTPS

B. Management Portal requires a license

C. Default Port for Management Portal access is 4433

D. Choosing Accept control connections in Implied Rules includes Management Portal access

Correct Answer: D

Question 10

What happens if the identity of a user is known?

A. If the user credentials do not match an Access Role, the system displays the Captive Portal.

B. If the user credentials do not match an Access Role, the system displays a sandbox.

C. If the user credentials do not match an Access Role, the gateway moves onto the next rule.

D. If the user credentials do not match an Access Role, the traffic is automatically dropped.

Correct Answer: C

Question 11

You must set up SIP with a proxy for your network. IP phones are in the 172.16.100.0 network. The Registrar and proxy are installed on host 172.16.100.100. To allow handover enforcement for outbound calls from SIP-net to network Net_B on the Internet, you have defined the following objects:
Network object: SIP-net: 172.16.100.0/24
SIP-gateway: 172.16.100.100
VoIP Domain object: VolP_domain_A
1. End point domain: SIP-net
2.VoIP gateway installed at: SIP-gateway host object
How would you configure the rule?

A. VolP_domain_A/Net_B/sip/accept

B. SIP- G ateway/N et_B/s i p_a ny/a c c e pt

C. VolP_domain_A/Net_B/sip_any, and sip/accept

D. SIP-Gateway/Net_B/sip/accept

E. VolP_Gateway_MJet_B/sip_any/accept

Correct Answer: A

Question 12

Which process is responsible for kernel table information sharing across all cluster members?

A. fw kernel using an encrypted TCP connection

B. fwd daemon using an encrypted TCP connection

C. cpd using an encrypted TCP connection

D. CPHA using an encrypted TCP connection

Correct Answer: B

Question 13

Can end users be forced to authenticate by using client certificates and username/password credentials?

A. SSL VPN only supports server certificates.

B. Yes, but by manually changing the parameter :IsPasswordWarning to true in the $FWDIR/conf/objects_5_0.C file, to allow for LDAP password remediation; and through the use of multiple-challenge login pages.

C. Yes, by editing the protection-level settings.

D. No, R71 only supports authentication by client certificates.

Correct Answer: C

Question 14

In SmartDashboard, Translate destination on client side is checked in Global Properties. When Network Address Translation is used:

A. The Security Gateway's ARP file must be modified.

B. It is not necessary to add a static route to the Gateway's routing table.

C. VLAN tagging cannot be defined for any hosts protected by the Gateway.

D. It is necessary to add a static route to the Gateway's routing table.

Correct Answer: B

Question 15

Which of the following are valid reasons for beginning with a fresh installation VPN-1 NGX R65, instead of upgrading a previous version to VPN-1 NGX R65? Select all that apply.

A. You see a more logical way to organize your rules and objects

B. You want to keep your Check Point configuration.

C. Objects and rules' naming conventions have changed over time.

D. Your Security Policy includes rules and objects whose purpose you do not know.

Correct Answer: A,C,D

Welcome to TestSimulate

CheckPoint Check Point Certified Security Expert Update Blade (156-915.77) Free Practice Test