CheckPoint Checkpoint Certifications 156-315.77 Questions & Answers

• Question 711:

  You intend to upgrade a Check Point Gateway from R65 toR76. To avoid problems, you decide to back up the Gateway. Which approach allows the Gateway configuration to be completely backed up into a manageable size in the least amount of time?

  A. snapshot

  B. database revision

  C. backup

  D. upgrade export

  Correct Answer: D

• Question 712:

  Which of the following statements accurately describes theupgrade exportcommand?

  A. Used primarily when upgrading the Security Management Server,upgrade exportstores all object databases and the conf directories for importing to a newer version of the Security Gateway.

  B. Used when upgrading the Security Gateway,upgrade exportincludes modified files, such as in the directories /lib and /conf.

  C. upgrade exportis used when upgrading the Security Gateway, and allows certain files to be included or excluded before exporting.

  D. upgrade exportstores network-configuration data, objects, global properties, and the database revisions prior to upgrading the Security Management Server.

  Correct Answer: A

• Question 713:

  A Zero Downtime Upgrade of a cluster:

  A. Upgrades all cluster members except one at the same time.

  B. Is only supported in major releases (R70 to R71, R71 toR76).

  C. Treats each individual cluster member as an individual gateway.

  D. Is not a valid upgrade method inR76.

  Correct Answer: A

• Question 714:

  The process ________ is responsible for Policy compilation.

  A. FWM

  B. Fwcmp

  C. CPLMD

  D. CPD

  Correct Answer: A

• Question 715:

  From the following output of cphaprob state, which ClusterXL mode is this?

  

  A. New mode

  B. Multicast mode

  C. Legacy mode

  D. Unicast mode

  Correct Answer: D

• Question 716:

  A Full Connectivity Upgrade of a cluster:

  A. Treats each individual cluster member as an individual gateway.

  B. Upgrades all cluster members except one at the same time.

  C. Is only supported in minor version upgrades (R70 to R71, R71 toR76).

  D. Is not a valid upgrade method inR76.

  Correct Answer: C

• Question 717:

  Choose the BEST sequence for configuring user management inSmart Dashboard, using an LDAP server.

  A. Configure a workstation object for the LDAP server, configure a server object for the LDAP Account Unit, and enable LDAP in Global Properties.

  B. Configure a server object for the LDAP Account Unit, and create an LDAP resource object.

  C. Enable LDAP in Global Properties, configure a host-node object for the LDAP server, and configure a server object for the LDAP Account Unit.

  D. Configure a server object for the LDAP Account Unit, enable LDAP in Global Properties, and create an LDAP resource object.

  Correct Answer: C

• Question 718:

  If using AD Query for seamless identity data reception from Microsoft Active Directory (AD), which of the following methods is NOT Check Point recommended?

  A. Leveraging identity in Internet application control

  B. Identity-based auditing and logging

  C. Basic identity enforcement in the internal network

  D. Identity-based enforcement for non-AD users (non-Windows and guest users)

  Correct Answer: D

• Question 719:

  John is upgrading a cluster from NGX R65 toR76. John knows that you can verify the upgrade process using the pre-upgrade verifier tool. When John is running Pre-Upgrade Verification, he sees the warning message:

  Title: Incompatible pattern.

  What is happening?

  A. R76uses a new pattern matching engine. Incompatible patterns should be deleted before upgrade process to complete it successfully.

  B. Pre-Upgrade Verification process detected a problem with actual configuration and upgrade will be aborted.

  C. Pre-Upgrade Verification tool only shows that message but it is only informational.

  D. The actual configuration contains user defined patterns in IPS that are not supported inR76. If the patterns are not fixed after upgrade, they will not be used withR76Security Gateways.

  Correct Answer: D

• Question 720:

  Which command would you use to save the interface information before upgrading a Windows Gateway?

  A. cp /etc/sysconfig/network.C [location]

  B. ipconfig

  Correct Answer: B