156-915.77 Exam
Up To The Minute Check Point Certified Security Expert Update Blade 156-915.77 Test Preparation
Proper study guides for Rebirth CheckPoint Check Point Certified Security Expert Update Blade certified begins with CheckPoint 156-915.77 preparation products which designed to deliver the Best Quality 156-915.77 questions by making you pass the 156-915.77 test at your first time. Try the free 156-915.77 demo right now.
Also have 156-915.77 free dumps questions for you:
NEW QUESTION 1
When restoring R77 using the command upgrade_import, which of the following items are NOT restored?
- A. SIC Certificates
- B. Licenses
- C. Route tables
- D. Global properties
Answer: C
NEW QUESTION 2
If Jack was concerned about the number of log entries he would receive in the SmartReporter system, which policy would he need to modify?
- A. Log Sequence Policy
- B. Report Policy
- C. Log Consolidator Policy
- D. Consolidation Policy
Answer: D
NEW QUESTION 3
After implementing Static Address Translation to allow Internet traffic to an internal Web Server on your DMZ, you notice that any NATed connections to that machine are being dropped by anti-spoofing protections. Which of the following is the MOST LIKELY cause?
- A. The Global Properties setting Translate destination on client side is unchecke
- B. But the topology on the DMZ interface is set to Internal - Network defined by IP and Mas
- C. Check the Global Properties setting Translate destination on client side.
- D. The Global Properties setting Translate destination on client side is unchecke
- E. But the topology on the external interface is set to Others +. Change topology to External.
- F. The Global Properties setting Translate destination on client side is checke
- G. But the topology on the external interface is set to Externa
- H. Change topology to Others +.
- I. The Global Properties setting Translate destination on client side is checke
- J. But the topology on the DMZ interface is set to Internal - Network defined by IP and Mas
- K. Uncheck the Global Properties setting Translate destination on client side.
Answer: A
NEW QUESTION 4
How granular may an administrator filter an Access Role with identity awareness? Per:
- A. Specific ICA Certificate
- B. AD User
- C. Radius Group
- D. Windows Domain
Answer: B
NEW QUESTION 5
You have a diskless appliance platform. How do you keep swap file wear to a minimum?
- A. Issue FW-1 bases its package structure on the Security Management Server, dynamically loading when the firewall is booted.
- B. The external PCMCIA-based flash extension has the swap file mapped to it, allowing easy replacement.
- C. Use PRAM flash devices, eliminating the longevity.
- D. A RAM drive reduces the swap file thrashing which causes fast wear on the device.
Answer: D
NEW QUESTION 6
What is the purpose of the pre-defined exclusions included with SmartEvent R77?
- A. To allow SmartEvent R77 to function properly with all other R71 devices.
- B. To avoid incorrect event generation by the default IPS event definition; a scenario that may occur in deployments that include Security Gateways of versions prior to R71.
- C. As a base for starting and building exclusions.
- D. To give samples of how to write your own exclusion.
Answer: B
NEW QUESTION 7
Your company has the requirement that SmartEvent reports should show a detailed and accurate view of network activity but also performance should be guaranteed. Which actions should be taken to achieve that?
1) Use same hard drive for database directory, log files, and temporary directory.
2) Use Consolidation Rules.
3) Limit logging to blocked traffic only.
4) Use Multiple Database Tables.
- A. 2, 4
- B. 1, 3, 4
- C. 1, 2, 4
- D. 1, 2
Answer: A
NEW QUESTION 8
What is the officially accepted diagnostic tool for IP Appliance Support?
- A. ipsoinfo
- B. CST
- C. uag-diag
- D. cpinfo
Answer: B
NEW QUESTION 9
Which of the following statements accurately describes the command upgrade_export?
- A. upgrade_export stores network-configuration data, objects, global properties, and the database revisions prior to upgrading the Security Management Server.
- B. Used primarily when upgrading the Security Management Server, upgrade_export stores all object databases and the /conf directories for importing to a newer Security Gateway version.
- C. upgrade_export is used when upgrading the Security Gateway, and allows certain files to be included or excluded before exporting.
- D. This command is no longer supported in GAiA.
Answer: B
NEW QUESTION 10
Install the Security Policy.
Solution:
Does this meet the goal?
- A. Yes
- B. Not Mastered
Answer: A
NEW QUESTION 11
Perform the same steps on the other Gateway.
Solution:
Does this meet the goal?
- A. Yes
- B. Not Mastered
Answer: A
NEW QUESTION 12
Suppose the Security Gateway hard drive fails and you are forced to rebuild it. You have a snapshot file stored to a TFTP server and backups of your Security Management Server. What is the correct procedure for rebuilding the Gateway quickly?
- A. Reinstall the base operating system (i.e., GAiA). Configure the Gateway interface so that the Gateway can communicate with the TFTP serve
- B. Revert to the stored snapshot image, and install the Security Policy.
- C. Run the command revert to restore the snapshot, establish SIC, and install the Policy.
- D. Run the command revert to restore the snapsho
- E. Reinstall any necessary Check Point product
- F. Establish SIC and install the Policy.
- G. Reinstall the base operating system (i.e., GAia). Configure the Gateway interface so that the Gateway can communicate with the TFTP serve
- H. Reinstall any necessary Check Point products and previously applied hotfixe
- I. Revert to the stored snapshot image, and install the Policy.
Answer: A
NEW QUESTION 13
CORRECT TEXT
Fill in the blank. To enter the router shell, use command .
Solution:
cligated
Does this meet the goal?
- A. Yes
- B. Not Mastered
Answer: A
NEW QUESTION 14
You want to implement Static Destination NAT in order to provide external, Internet users access to an internal Web Server that has a reserved (RFC 1918) IP address. You have an unused valid IP address on the network between your Security Gateway and ISP router. You control the router that sits between the firewall external interface and the Internet.
What is an alternative configuration if proxy ARP cannot be used on your Security Gateway?
- A. Publish a proxy ARP entry on the ISP router instead of the firewall for the valid IP address.
- B. Place a static ARP entry on the ISP router for the valid IP address to the firewall's external address.
- C. Publish a proxy ARP entry on the internal Web server instead of the firewall for the valid IP address.
- D. Place a static host route on the firewall for the valid IP address to the internal Web server.
Answer: B
NEW QUESTION 15
Access Role objects define users, machines, and network locations as:
- A. Credentialed objects
- B. Linked objects
- C. One object
- D. Separate objects
Answer: C
NEW QUESTION 16
Update the new topology in the cluster object from SmartDashboard.
Solution:
Does this meet the goal?
- A. Yes
- B. Not Mastered
Answer: A
NEW QUESTION 17
CORRECT TEXT
Complete this statement. To save interface information before upgrading a Windows Gateway, use command
Solution:
ipconfig -a > [filename].txt
Does this meet the goal?
- A. Yes
- B. Not Mastered
Answer: A
NEW QUESTION 18
Define virtual IP in the Dashboard
Solution:
Does this meet the goal?
- A. Yes
- B. Not Mastered
Answer: A
NEW QUESTION 19
......
P.S. Certshared now are offering 100% pass ensure 156-915.77 dumps! All 156-915.77 exam questions have been updated with correct answers: https://www.certshared.com/exam/156-915.77/ (203 New Questions)