CheckPoint Checkpoint Certifications 156-315.77 Questions & Answers

• Question 31:

  To backup all events stored in the SmartEvent Server, you should back up the contents of which folder(s)?

  A. $RTDIR/distrib_db and $FWDIR/events

  B. $RTDIR/events_db

  C. $RTDIR/distrib and $FWDIR/events_db

  D. $RTDIR/distrib

  Correct Answer: C

• Question 32:

  Which DLP action would describe the following action: The data transmission event is logged in SmartView Tracker. Administrators with permission can view the data that was sent. The traffic is passed.

  A. Detect

  B. Ask User

  C. Inform User

  D. Prevent

  Correct Answer: A

• Question 33:

  Type the command and syntax you would use to verify that your Check Point cluster is functioning correctly.

  A. cphaprob state

  B.

  C.

  D.

  Correct Answer: A

• Question 34:

  Using IPS, how do you notify the Security Administrator that malware is scanning specific ports? By enabling:

  A. Malware Scan protection

  B. Sweep Scan protection

  C. Host Port Scan

  D. Malicious Code Protector

  Correct Answer: B

• Question 35:

  Which three of the following components are required to get a SmartEvent up and running?

  1) SmartEvent SIC

  2) SmartEvent Correlation Unit

  3) SmartEvent Server

  4) SmartEvent Analyzer

  5) SmartEvent Client

  A. 2, 3, and 5

  B. 1, 2, and 4

  C. 1, 2, and 3

  D. 3, 4, and 5

  Correct Answer: A

• Question 36:

  What is the offline CPSIZEME upload procedure?

  A. Find the cpsizeme_of_.pdf, attach it to an e-mail and send it to [email protected]

  B. Use the webbrowser version of cpsizeme and fax it to Check Point.

  C. Find the cpsizeme_of_.xml, attach it to an e-mail and send it to [email protected]

  D. There is no offline upload method.

  Correct Answer: C

• Question 37:

  Does Check Point recommend generating an upgrade_export on standby SmartCenters?

  A. Yes. This is the only way to get the upgrade_export

  B. No. All Check Point processes are stopped.

  C. No. There is no way to verify the actual configuration.

  D. Yes. All information is available at both SmartCenters.

  Correct Answer: C

• Question 38:

  MicroCorp experienced a security appliance failure. (LEDs of all NICs are off.) The age of the unit required that the RMA-unit be a different model. Will a revert to an existing snapshot bring the new unit up and running?

  A. There is no dynamic update at reboot.

  B. No. The revert will most probably not match to hard disk.

  C. Yes. Everything is dynamically updated at reboot.

  D. No. At installation the necessary hardware support is selected. The snapshot saves this state.

  Correct Answer: D

• Question 39:

  Which CLI tool helps on verifying proper ClusterXL sync?

  A. fw stat

  B. fw ctl sync

  C. fw ctl pstat

  D. cphaprob stat

  Correct Answer: C

• Question 40:

  Which of the following generates a SmartEvent Report from its SQL database?

  A. Security Management Server

  B. SmartEvent Client

  C. SmartReporter

  D. SmartDashboard Log Consolidator

  Correct Answer: C