CheckPoint CheckPoint Certification 156-727.77 Questions & Answers

• Question 31:

  You just enabled the IPS blade, and have downloaded the latest signature updates. You created a custom profile but you are concerned that if you push a policy it might start dropping existing connections. What should you do?

  A. Use the recommend Protection profile instead

  B. Edit your custom profile and select Detect-only for Troubleshooting mode

  C. Edit your custom profile and enable Bypass under load

  D. Use the Default protection profile instead

  Correct Answer: B

• Question 32:

  IPS is primarily a __________-based engine.

  A. Signature

  B. Difference

  C. Action

  D. Anomaly

  Correct Answer: A

• Question 33:

  IPS can assist in the discovery of unknown buffer overflow attacks without any pre-defined signatures.

  A. False, only the Threat Emulator blade can discover unknown attacks.

  B. True, if Zero-Day vulnerability is enabled.

  C. False, IPS needs predefined signatures for all functions.

  D. True, if Malicious Code Protector is enabled in IPS.

  Correct Answer: D

• Question 34:

  Which of the following is information shared via ThreatCloud?

  A. Compromised Machine IP Addresses

  B. Anticipated Attack Methods

  C. Sensitive Corporate Data

  D. Address of command and control servers

  Correct Answer: D

• Question 35:

  Sensitive corporate data is uploaded to ThreatCloud:

  A. When the administrator manually sends suspected traffic to ThreatCloud for inspection.

  B. Never

  C. When the administrator configures the sensor to be a SensorNET participant.

  D. After the bot attack has been confirmed.

  Correct Answer: B

• Question 36:

  What is the name of the Check Point cloud-driven Knowledgebase?

  A. ThreatSpect

  B. ThreatCloud

  C. ThreatWiki

  D. ThreatEmulator

  Correct Answer: C

• Question 37:

  What filters can be used in Check Point ThreatWiki (either via ThreatWiki.checkpoint.com or via ThreatPrevention tab in Dashboard)?

  A. Malware Name, Malware Type

  B. Categories, Risk, Release Date

  C. Risk, Malware Type, Release Date

  D. Categories, Tags, Risk

  Correct Answer: D

• Question 38:

  Which of the following is a searchable database of all known threats detected by sensors around the world?

  A. ThreatCloud

  B. ThreatWiki

  C. ThreatSpect

  D. SmartLog

  Correct Answer: B

• Question 39:

  Check Point's IPS blade provides two pre-defined profiles. Which of the following definitions are correct?

  A. Default_Protection: Provides excellent performance with a sufficient level of protection. Recommended_Protection: Provides the best security with a sufficient level of performance

  B. Default_Protection: Provides tracking only for troubleshooting purposes and evaluation prior to full implementation. Recommended_Protection: Provides excellent performance with a sufficient level of protection.

  C. Default_Protection: Provides the best security with a sufficient level of performance. Recommended_Protection: Provides excellent performance with a sufficient level of protection.

  D. Default_Protection: Is an uneditable profile that prevents all IPS related traffic. Recommended_Protection: Provides excellent performance, flexibility to customize protections and actions, with a sufficient level of protection.

  Correct Answer: A

• Question 40:

  When adding IPS to a gateway, which profile will be set?

  A. Default_Protection, but with all actions set to "Detect only"

  B. Default_Protection, but with all actions set to "Prevent"

  C. Default_Protection

  D. Recommended_Protection

  Correct Answer: C