CheckPoint Checkpoint Certifications 156-315.77 Questions & Answers

• Question 51:

  To stop acceleration on a GAiA Security Gateway, enter command:

  A. fwaccel off

  B.

  C.

  D.

  Correct Answer: A

• Question 52:

  A customer called to report one cluster member's status as Down. What command should you use to identify the possible cause?

  A. tcpdump/snoop

  B. cphaprob list

  C. fw ctl pstat

  D. fw ctl debug -m cluster + forward

  Correct Answer: B

• Question 53:

  What is a Sticky Connection?

  A. A Sticky Connection is one in which a reply packet returns through the same gateway as the original packet.

  B. A Sticky Connection is a connection that remains the same.

  C. A Sticky Connection is a VPN connection that remains up until you manually bring it down.

  D. A Sticky Connection is a connection that always chooses the same gateway to set up the initial connection.

  Correct Answer: A

• Question 54:

  Which load-balancing method below is NOT valid?

  A. Domain

  B. They are all valid

  C. Round Trip

  D. Random

  Correct Answer: B

• Question 55:

  Match the ClusterXL modes with their configurations.

  Exhibit:

  

  A. A-2, B-3, C-4, D-1

  B. A-2, B-3, C-1, D-5

  C. A-3, B-5, C-1, D-4

  D. A-5, B-2, C-4, D-1

  Correct Answer: C

• Question 56:

  A snapshot delivers a complete backup of GAiA. How do you restore a local snapshot named MySnapshot.tgz?

  A. Reboot the system and call the start menu. Select option Snapshot Management, provide the Expert password and select [L] for a restore from a local file. Then, provide the correct file name.

  B. As Expert user, type command snapshot - R to restore from a local file. Then, provide the correct file name.

  C. As Expert user, type command revert --file MySnapshot.tgz.

  D. As Expert user, type command snapshot -r MySnapshot.tgz.

  Correct Answer: C

• Question 57:

  Which of the following is NOT TRUE regarding HTTPS traffic being passed through a DLP gateway?

  A. You must edit the $FWDIR/conf/fwauthd.conf file in order for HTTPS traffic to be passed to your Web Proxy through a DLP gateway.

  B. HTTPS traffic is not scanned by DLP

  C. Only one proxy can be configured for DLP

  D. You must configure the DLP gateway to allow HTTP/HTTPS traffic through the proxy if you have a web proxy between the DLP gateway and the internet.

  Correct Answer: A

• Question 58:

  Fill in the blank. In Load Sharing Unicast mode, the internal cluster IP address is 10.4.8.3. The internal interfaces on two members are 10.4.8.1 and 10.4.8.2. Internal host 10.4.8.108 Pings 10.4.8.3, and receives replies. The following is the ARP table from the internal Windows host 10.4.8.108.

  

  Review the exhibit and type the IP address of the member serving as the pivot machine in the space below.

  A. 10.4.8.2

  B.

  C.

  D.

  Correct Answer: A

• Question 59:

  Type the full cphaprob command and syntax that will show full synchronization status.

  A. cphaprob -i list

  B.

  C.

  D.

  Correct Answer: A

• Question 60:

  Fill in the blanks. To view the number of concurrent connections going through core 0 on the firewall, you would use the command and syntax __ __ _ ___ __ ___________ __ .

  A. fw -i 0 tab -t connections–s

  B.

  C.

  D.

  Correct Answer: A