156-915.77 | Improved 156-915.77 Exam Answers For Check Point Certified Security Expert Update Blade Certification
Cause all that matters here is passing the CheckPoint 156-915.77 exam. Cause all that you need is a high score of 156-915.77 Check Point Certified Security Expert Update Blade exam. The only one thing you need to do is downloading Certleader 156-915.77 exam study guides now. We will not let you down with our money-back guarantee.
CheckPoint 156-915.77 Free Dumps Questions Online, Read and Test Now.
NEW QUESTION 1
You have configured Automatic Static NAT on an internal host-node object. You clear the box Translate destination on client site from Global Properties > NAT. Assuming all other NAT settings in Global Properties are selected, what else must be configured so that a host on the Internet can initiate an inbound connection to this host?
- A. No extra configuration is needed.
- B. A proxy ARP entry, to ensure packets destined for the public IP address will reach the Security Gateway's external interface.
- C. The NAT IP address must be added to the external Gateway interface anti-spoofing group.
- D. A static route, to ensure packets destined for the public NAT IP address will reach the Gateway's internal interface.
Answer: D
NEW QUESTION 2
CORRECT TEXT
Fill in the blank. What is the correct command and syntax used to view a connection table summary on a Check Point Firewall?
Solution:
fw tab -t connections -s
Does this meet the goal?
- A. Yes
- B. Not Mastered
Answer: A
NEW QUESTION 3
Your users are defined in a Windows 2008 R2 Active Directory server. You must add LDAP users to a Client Authentication rule. Which kind of user group do you need in the Client Authentication rule in R77?
- A. External-user group
- B. LDAP group
- C. A group with a generic user
- D. All Users
Answer: B
NEW QUESTION 4
Install the Security Policy.
Solution:
Does this meet the goal?
- A. Yes
- B. Not Mastered
Answer: A
NEW QUESTION 5
To qualify as an Identity Awareness enabled rule, which column MAY include an Access Role?
- A. Source
- B. Track
- C. User
- D. Action
Answer: A
NEW QUESTION 6
How do you configure the Security Policy to provide user access to the Captive Portal through an external (Internet) interface?
- A. Change the gateway settings to allow Captive Portal access via an external interface.
- B. No action is necessar
- C. This access is available by default.
- D. Change the Identity Awareness settings under Global Properties to allow Captive Portal access on all interfaces.
- E. Change the Identity Awareness settings under Global Properties to allow Captive Portal access for an external interface.
Answer: A
NEW QUESTION 7
You are MegaCorp’s Security Administrator. There are various network objects which must be NATed. Some of them use the Automatic Hide NAT method, while others use the Automatic Static NAT method. What is the rule order if both methods are used together? Give the BEST answer.
- A. The Administrator decides the rule order by shifting the corresponding rules up and down.
- B. The Static NAT rules have priority over the Hide NAT rules and the NAT on a node has priority over the NAT on a network or an address range.
- C. The Hide NAT rules have priority over the Static NAT rules and the NAT on a node has priority over the NAT on a network or an address range.
- D. The rule position depends on the time of their creatio
- E. The rules created first are placed at the top; rules created later are placed successively below the others.
Answer: B
NEW QUESTION 8
Reboot both gateways.
Solution:
Does this meet the goal?
- A. Yes
- B. Not Mastered
Answer: A
NEW QUESTION 9
Peter is your new Security Administrator. On his first working day, he is very nervous and enters the wrong password three times. His account is locked. What can be done to unlock Peter’s account? Give the BEST answer.
- A. You can unlock Peter’s account by using the command fwm lock_admin -u Peter on the Security Management Server.
- B. You can unlock Peter’s account by using the command fwm unlock_admin -u Peter on the Security Management Server
- C. It is not possible to unlock Peter’s accoun
- D. You have to install the firewall once again or abstain from Peter’s help.
- E. You can unlock Peter’s account by using the command fwm unlock_admin -u Peter on the Security Gateway.
Answer: A
NEW QUESTION 10
Which of the following items should be configured for the Security Management Server to authenticate using LDAP?
- A. Login Distinguished Name and password
- B. Windows logon password
- C. Check Point Password
- D. WMI object
Answer: A
NEW QUESTION 11
What is Check Point's CoreXL?
- A. A way to synchronize connections across cluster members
- B. TCP-18190
- C. Multiple core interfaces on the device to accelerate traffic
- D. Multi Core support for Firewall Inspection
Answer: D
NEW QUESTION 12
When restoring R77 using the command upgrade_import, which of the following items are NOT restored?
- A. SIC Certificates
- B. Licenses
- C. Route tables
- D. Global properties
Answer: C
NEW QUESTION 13
Which command allows you to view the contents of an R77 table?
- A. fw tab -a <tablename>
- B. fw tab -t <tablename>
- C. fw tab -s <tablename>
- D. fw tab -x <tablename>
Answer: B
NEW QUESTION 14
Where is it necessary to configure historical records in SmartView Monitor to generate Express reports in SmartReporter?
- A. In SmartDashboard, the SmartView Monitor page in the R77 Security Gateway object
- B. In SmartReporter, under Express > Network Activity
- C. In SmartReporter, under Standard > Custom
- D. In SmartView Monitor, under Global Properties > Log and Masters
Answer: A
NEW QUESTION 15
A ClusterXL configuration is limited to members.
- A. There is no limit.
- B. 16
- C. 6
- D. 2
Answer: C
NEW QUESTION 16
Which command displays the installed Security Gateway version?
- A. fw printver
- B. fw ver
- C. fw stat
- D. cpstat -gw
Answer: B
NEW QUESTION 17
CORRECT TEXT
Fill in the blank. The user wants to replace a failed Windows-based firewall with a new server running GAiA. For the most complete restore of an GAiA configuration, he or she will use the command
Solution:
migrate_import
Does this meet the goal?
- A. Yes
- B. Not Mastered
Answer: A
NEW QUESTION 18
CORRECT TEXT
Fill in the blank. To verify SecureXL statistics, you would use the command .
Solution:
fwaccel stats
Does this meet the goal?
- A. Yes
- B. Not Mastered
Answer: A
NEW QUESTION 19
Which command will only show the number of entries in the connection table?
- A. fw tab -t connections -s
- B. fw tab -t connections -u
- C. fw tab -t connections
- D. fw tab
Answer: A
NEW QUESTION 20
When do modifications to the Event Policy take effect?
- A. As soon as the Policy Tab window is closed.
- B. When saved on the SmartEvent Server and installed to the Correlation Units.
- C. When saved on the Correlation Units, and pushed as a policy.
- D. When saved on the SmartEvent Client, and installed on the SmartEvent Server.
Answer: B
NEW QUESTION 21
......
Recommend!! Get the Full 156-915.77 dumps in VCE and PDF From Thedumpscentre.com, Welcome to Download: https://www.thedumpscentre.com/156-915.77-dumps/ (New 203 Q&As Version)