CheckPoint Checkpoint Certifications 156-315.77 Questions & Answers

• Question 651:

  Your R7x-series Enterprise Security Management Server is running abnormally on Windows Server 2003 R2. You decide to try reinstalling the Security Management Server, but you want to try keeping the critical Security Management Server configuration settings intact (i.e., all Security Policies, databases, SIC, licensing etc.) What is the BEST method to reinstall the Server and keep its critical configuration?

  

  A. B. C. D.

  Correct Answer: B

• Question 652:

  Restoring a snapshot-created file on one machine that was created on another requires which of the following to be the same on both machines?

  A. Windows version, objects database, patch level, and interface configuration

  B. Windows version, interface configuration, and patch level

  C. State,Secure Platformversion, and patch level

  D. State,Secure Platformversion, and objects database

  Correct Answer: C

• Question 653:

  Check Point recommends that you back up systems running Check Point products. Run your back ups during maintenance windows to limit disruptions to services, improve CPU usage, and simplify time allotment. Which back up method does Check Point recommend every couple of months, depending on how frequently you make changes to the network or policy?

  A. backup

  B. migrate export

  C. upgrade export

  D. snapshot

  Correct Answer: A

• Question 654:

  Remote clients are using SSL VPN to authenticate via LDAP server to connect to the organization. Which gateway process is responsible for the authentication?

  A. vpnd

  B. cpvpnd

  C. fwm

  D. fwd

  Correct Answer: B

• Question 655:

  Which is NOT a valid option when upgrading Cluster Deployments?

  A. Full Connectivity Upgrade

  B. Fast path Upgrade

  C. Minimal Effort Upgrade

  D. Zero Downtime

  Correct Answer: B

• Question 656:

  YourR76enterprise Security Management Server is running abnormally on Windows 2008 Server. You decide to try reinstalling the Security Management Server, but you want to try keeping the critical Security Management Server configuration settings intact (i.e., all Security Policies, databases, SIC, licensing etc.) What is the BEST method to reinstall the Server and keep its critical configuration?

  A. 1. Create a database revision control backup using theSmart Dashboard

  2.

  Create a compressed archive of the *FWDlR*\ conf and »FWDiR8\lib directories and copy them to another networked machine.

  3.

  Uninstall all R70 packages via Add/Remove Programs and reboot.

  4.

  Install again as a primary Security Management Server using the R70 CD.

  5.

  Reboot and restore the two archived directories over the top of the new installation, choosing to overwrite existing files.

  B. 1. Download the latestupgrade exportutility and run it from a c; \temp directory to export the configuration into a .tgz file

  2.

  Skip any upgarde__verification warnings since you are not upgrading

  3.

  Transfer the .tgz file to another networked machine

  4.

  Download and run the cpclean utility and reboot

  5.

  Use the R70 CD-ROM to select the uuarade import ootion to import the confiauration

  C. 1. Download the latest upqrade_expoct utility and run it from a \temp directory to export the configuration into a .tgz file

  2.

  Perform any requested upgcade_veri£ic«tion suggested steps

  3.

  Uninstall all R70 packages via Add/Remove Programs and reboot

  4.

  UseSmart Updateto reinstall the Security Management Server and reboot

  5.

  Transfer the tgz file back to the local \temp

  6.

  Run upgrade__import to import the configuration

  D. 1. Insert the F70 CD-ROM, and select the option to export the configuration using the latest upgrade utilities

  2.

  Perform any requestedupgrade verificationsuggested steps and re-export the configuration if needed

  3.

  Save the export " tgz file to a local c: \temp directory

  4.

  Uninstall all R70 packages via Add/Remove Programs and reboot

  5.

  Install again using the R70 CD-ROM as a primary Security Management Server and reboot

  6.

  Runupgrade importto import the configuration

  Correct Answer: C

• Question 657:

  Security server configuration settings are stored in _______________ .

  A. $FWDIR/conf/AMT.conf

  B. $FWDIR/conf/fwrl.conf

  C. $FWDIR/conf/fwauthd.conf

  D. $FWDIR/conf/fwopsec.conf

  Correct Answer: C

• Question 658:

  During a Security Management Server migrate export, the system:

  A. Creates a backup file that includes theSmart Eventdatabase.

  B. Creates a backup file that includes theSmart Reporterdatabase.

  C. Creates a backup archive for all the Check Point configuration settings.

  D. Saves all system settings and Check Point product configuration settings to a file.

  Correct Answer: C

• Question 659:

  When restoringR76using the commandupgrade import, which of the following items are NOT restored?

  A. Global properties

  B. Route tables

  C. Licenses

  D. SIC Certificates

  Correct Answer: B

• Question 660:

  Your users are defined in a Windows 2008 Active Directory server. You must add LDAP users to a Client Authentication rule. Which kind of user group do you need in the Client Authentication rule inR76?

  A. LDAP group

  B. External-user group

  C. A group with a generic user

  D. All Users

  Correct Answer: A