CheckPoint CCSA R77 156-215.77 Questions & Answers

• Question 1:

  Which R77 GUI would you use to see the number of packets accepted since the last policy install?

  A. SmartView Monitor

  B. SmartView Tracker

  C. SmartDashboard

  D. SmartView Status

  Correct Answer: A

• Question 2:

  You find a suspicious connection from a problematic host. You decide that you want to block everything from that whole network, not just the problematic host. You want to block this for an hour while you investigate further, but you do not want to add any rules to the Rule Base. How do you achieve this?

  A. Use dbedit to script the addition of a rule directly into the Rule Bases_5_0.fws configuration file.

  B. Select Block intruder from the Tools menu in SmartView Tracker.

  C. Create a Suspicious Activity Rule in SmartView Monitor.

  D. Add a temporary rule using SmartDashboard and select hide rule.

  Correct Answer: C

• Question 3:

  Your Security Gateways are running near performance capacity and will get upgraded hardware next week. Which of the following would be MOST effective for quickly dropping all connections from a specific attacker's IP at a peak time of day?

  A. Intrusion Detection System (IDS) Policy install

  B. Change the Rule Base and install the Policy to all Security Gateways

  C. SAM - Block Intruder feature of SmartView Tracker

  D. SAM - Suspicious Activity Rules feature of SmartView Monitor

  Correct Answer: D

• Question 4:

  Which R77 SmartConsole tool would you use to verify the installed Security Policy name on a Security Gateway?

  A. SmartView Monitor

  B. SmartUpdate

  C. SmartView Status

  D. None, SmartConsole applications only communicate with the Security Management Server.

  Correct Answer: A

• Question 5:

  In SmartDashboard, you configure 45 MB as the required free hard-disk space to accommodate logs. What can you do to keep old log files, when free space falls below 45 MB?

  A. Do nothing. Old logs are deleted, until free space is restored.

  B. Use the command fwm logexport to export the old log files to another location.

  C. Configure a script to run fw logswitch and SCP the output file to a separate file server.

  D. Do nothing. The Security Management Server automatically copies old logs to a backup server before purging.

  Correct Answer: C

• Question 6:

  When attempting to connect with SecureClient Mobile you get the following error message: The certificate provided is invalid. Please provide the username and password. What is the probable cause of the error?

  A. Your user configuration does not have an office mode IP address so the connection failed.

  B. Your certificate is invalid.

  C. There is no connection to the server, and the client disconnected.

  D. Your user credentials are invalid.

  Correct Answer: B

• Question 7:

  Which of the following are available SmartConsole clients which can be installed from the R77 Windows CD? Read all answers and select the most complete and valid list.

  A. SmartView Tracker, SmartDashboard, CPINFO, SmartUpdate, SmartView Status

  B. SmartView Tracker, SmartDashboard, SmartLSM, SmartView Monitor

  C. SmartView Tracker, CPINFO, SmartUpdate

  D. Security Policy Editor, Log Viewer, Real Time Monitor GUI

  Correct Answer: C

• Question 8:

  What action can be performed from SmartUpdate R77?

  A. upgrade_export

  B. fw stat -l

  C. cpinfo

  D. remote_uninstall_verifier

  Correct Answer: C

• Question 9:

  True or FalsE. SmartView Monitor can be used to create alerts on a specified Gateway.

  A. True, by right-clicking on the Gateway and selecting Configure Thresholds.

  B. True, by choosing the Gateway and selecting System Information.

  C. False, an alert cannot be created for a specified Gateway.

  D. False, alerts can only be set in SmartDashboard Global Properties.

  Correct Answer: A

• Question 10:

  You are the Security Administrator for MegaCorp. In order to see how efficient your firewall Rule Base is, you would like to see how often the particular rules match. Where can you see it? Give the BEST answer.

  A. In the SmartView Tracker, if you activate the column Matching Rate.

  B. In SmartReporter, in the section Firewall Blade - Activity > Network Activity with information concerning Top Matched Logged Rules.

  C. SmartReporter provides this information in the section Firewall Blade - Security > Rule Base Analysis with information concerning Top Matched Logged Rules.

  D. It is not possible to see it directly. You can open SmartDashboard and select UserDefined in the Track column. Afterwards, you need to create your own program with an external counter.

  Correct Answer: C