CheckPoint CCSE R77 156-315.77 Questions & Answers

• Question 1:

  Your expanding network currently includes ClusterXL running Multicast mode on two members, as shown in this topology:

  

  A. You need to add interfaces: 10.10.10.1/24 on Member A, and 10.10.10.2/24 on Member

  B. The virtual IP address for these interfaces is 10.10.10.3/24. Both cluster gateways have a Quad card with an available eth3 interface. What is the correct procedure to add these interfaces?

  C. 1. Disable "Cluster membership" from one Gateway via cpconfig.

  2.

  Configure the new interface via sysconfig from the "non-member" Gateway.

  3.

  Re-enable "Cluster membership" on the Gateway.

  4.

  Perform the same steps on the other Gateway.

  5.

  Update the topology in the cluster object.

  6.

  Install the Security Policy.

  D. 1. Configure the new interface on both members using WebUI.

  2.

  Update the new topology in the cluster object from SmartDashboard.

  3.

  Define virtual IP in the Dashboard

  4.

  Install the Security Policy.

  E. 1. Use WebUI to configure the new interfaces on both member.

  2.

  Update the topology in the cluster object.

  3.

  Reboot both gateways.

  4.

  Install the Security Policy.

  F. 1. Use the command ifconfig to configure and enable the new interface on both members.

  2.

  Update the topology in the cluster object for the cluster and both members.

  3.

  Install the Security Policy.

  4.

  Reboot the gateway.

  Correct Answer: B

• Question 2:

  Which of the following methods will provide the most complete backup of an R77 configuration?

  A. Database Revision Control

  B. Policy Package Management

  C. The command migrate_export

  D. Copying the directories $FWDIR\conf and $CPDIR\conf to another server

  Correct Answer: C

• Question 3:

  Your users are defined in a Windows 2008 Active Directory server. You must add LDAP users to a Client Authentication rule. Which kind of user group do you need in the Client Authentication rule in R77?

  A. LDAP group

  B. All Users

  C. External-user group

  D. A group with a generic user

  Correct Answer: A

• Question 4:

  Fill in the blank with a numeric value. The default port number for Secure Sockets Layer (SSL) connections with the LDAP Server is

  A. 636

  B.

  C.

  D.

  Correct Answer: A

• Question 5:

  To provide full connectivity upgrade status, use command

  A. cphaprob fcustat

  B.

  C.

  D.

  Correct Answer: A

• Question 6:

  Match the VPN-related terms with their definitions. Each correct term is only used once.

  Exhibit: A. A-3, B-4, C-1, D-5

  

  B. A-4, B-3, C-5, D-2

  C. A-2, B-5, C-4, D-1

  D. A-3, B-2, C-1, D-4

  Correct Answer: B

• Question 7:

  What step should you take before running migrate_export?

  A. Install policy and exit SmartDashboard.

  B. Disconnect all GUI clients.

  C. Run a cpstop on the Security Management Server.

  D. Run a cpstop on the Security Gateway.

  Correct Answer: B

• Question 8:

  Which statement is TRUE for route-based VPN's?

  A. IP Pool NAT must be configured on each Gateway.

  B. Dynamic-routing protocols are not required.

  C. Route-based VPN's are a form of partial overlap VPN Domain.

  D. Route-based VPN's replace domain-based VPN's.

  Correct Answer: B

• Question 9:

  Complete this statement. To save interface information before upgrading a Windows Gateway, use command

  A. ipconfig -a > [filename].txt

  B.

  C.

  D.

  Correct Answer: A

• Question 10:

  MegaCorps' disaster recovery plan is past due for an update to the backup and restore section to enjoy the benefits of the new distributed R77 installation. You must propose a plan that meets the following required and desired objectives:

  Required. Security Policy repository must be backed up no less frequently than every 24 hours.

  Desired. Back up R77 components enforcing the Security Policies at least once a week.

  Desired. Back up R77 logs at least once a week.

  You develop a disaster recovery plan proposing the following:

  *

  Use the utility cron to run the command upgrade_export each night on the Security Management Servers.

  *

  Configure the organization's routine backup software to back up files created by the command upgrade_export.

  *

  Configure GAiA back up utility to back up Security Gateways every Saturday night.

  *

  Use the utility cron to run the command upgrade_export each Saturday night on the log servers.

  *

  Configure an automatic, nightly logswitch.

  *

  Configure the organization's routine back up software to back up the switched logs every night. The corporate IT change review committee decides your plan:

  A.

  meets the required objective and only one desired objective.

  B.

  meets the required objective and both desired objectives.

  C.

  meets therequiredobjective but does not meet eitherdesiredobjective.

  D.

  does not meet the required objective.

  Correct Answer: B