CheckPoint Checkpoint Certifications 156-315.77 Questions & Answers

• Question 91:

  How do you block some seldom-used FTP commands, such as CWD, and FIND from passing through the Gateway?

  A. Add the restricted commands to the aftpd.conf file in the Security Management Server.

  B. Modify the desired profile in the FTP commands under Protection Details in the IPS tab.

  C. Configure the restricted FTP commands in the Security Servers screen of the Global Properties.

  D. Enable FTP Bounce checking / Application Intelligence / Protocol Protections from the IPS tab.

  Correct Answer: B

• Question 92:

  What is the SmartEvent Analyzer's function?

  A. Analyze log entries, looking for Event Policy patterns.

  B. Generate a threat analysis report from the Analyzer database.

  C. Display received threats and tune the Events Policy.

  D. Assign severity levels to events.

  Correct Answer: D

• Question 93:

  Paul has just joined the MegaCorp security administration team. Natalie, the administrator, creates a new administrator account for Paul in SmartDashboard and installs the policy. When Paul tries to login it fails. How can Natalie verify whether Paul's IP address is predefined on the security management server?

  A. Login to Smart Dashboard, access Properties of the SMS, and verify whether Paul's IP address is listed.

  B. Type cpconfig on the Management Server and select the option "GUI client List" to see if Paul's IP address is listed.

  C. Login in to Smart Dashboard, access Global Properties, and select Security Management, to verify whether Paul's IP address is listed.

  D. Access the WEBUI on the Security Gateway, and verify whether Paul's IP address is listed as a GUI client.

  Correct Answer: B

• Question 94:

  Which statements about Management HA are correct?

  1) Primary SmartCenter describes first installed SmartCenter

  2) Active SmartCenter is always used to administrate with SmartConsole

  3) Active SmartCenter describes first installed SmartCenter

  4) Primary SmartCenter is always used to administrate with SmartConsole

  A. 1 and 4

  B. 2 and 3

  C. 1 and 2

  D. 3 and 4

  Correct Answer: C

• Question 95:

  Which protocol can be used to provide logs to third-party reporting?

  A. CPMI (Check Point Management Interface)

  B. LEA (Log Export API)

  C. AMON (Application Monitoring)

  D. ELA (Event Logging API)

  Correct Answer: B

• Question 96:

  Fill in the blank. The command that typically generates the firewall application, operating system, and hardware specific drivers is _________ .

  A. snapshot

  B.

  C.

  D.

  Correct Answer: A

• Question 97:

  The process _______ provides service to access the GAIA configuration database.

  A. configdbd

  B. confd

  C. fwm

  D. ipsrd

  Correct Answer: B

• Question 98:

  When using a template to define a user in SmartDirectory, the user's password should be defined in the______________ object.

  A. Template

  B. VPN Community

  C. User

  D. LDAP

  Correct Answer: C

• Question 99:

  Which of the following components contains the Events Data Base?

  A. SmartEvent DataServer

  B. SmartEvent Server

  C. SmartEvent Correlation Unit

  D. SmartEvent Client

  Correct Answer: B

• Question 100:

  How do you run "CPSIZEME" on SPLAT?

  A. [expert@HostName]#>./cpsizeme -h

  B. [expert@HostName]# ./cpsizeme -R

  C. This is not possible on SPLAT

  D. [expert@HostName]# ./cpsizeme

  Correct Answer: D