CheckPoint Checkpoint Certifications 156-915.77 Questions & Answers

• Question 201:

  Which of the following is a CLI command for Security Gateway R77?

  A. fw tab -u

  B. fw shutdown

  C. fw merge

  D. fwm policy_print

  Correct Answer: A

• Question 202:

  ALL of the following options are provided by the GAiA sysconfig utility, EXCEPT:

  A. Export setup

  B. DHCP Server configuration

  C. Time and Date

  D. GUI Clients

  Correct Answer: D

• Question 203:

  Which of the following statements accurately describes the command snapshot?

  A. snapshot creates a full OS-level backup, including network-interface data, Check Point product information, and configuration settings during an upgrade of a GAiA Security Gateway.

  B. snapshot creates a Security Management Server full system-level backup on any OS.

  C. snapshot stores only the system-configuration settings on the Gateway.

  D. A Gateway snapshot includes configuration settings and Check Point product information from the remote Security Management Server.

  Correct Answer: A

• Question 204:

  Several Security Policies can be used for different installation targets. The Firewall protecting Human Resources' servers should have its own Policy Package. These rules must be installed on this machine and not on the Internet Firewall. How can this be accomplished?

  A. A Rule Base is always installed on all possible targets. The rules to be installed on a Firewall are defined by the selection in the Rule Base row Install On.

  B. When selecting the correct Firewall in each line of the Rule Base row Install On, only this Firewall is shown in the list of possible installation targets after selecting Policy > Install on Target.

  C. In the menu of SmartDashboard, go to Policy > Policy Installation Targets and select the correct firewall via Specific Targets.

  D. A Rule Base can always be installed on any Check Point Firewall object. It is necessary to select the appropriate target directly after selecting Policy > Install on Target.

  Correct Answer: C

• Question 205:

  You have a diskless appliance platform. How do you keep swap file wear to a minimum?

  A. Issue FW-1 bases its package structure on the Security Management Server, dynamically loading when the firewall is booted.

  B. The external PCMCIA-based flash extension has the swap file mapped to it, allowing easy replacement.

  C. Use PRAM flash devices, eliminating the longevity.

  D. A RAM drive reduces the swap file thrashing which causes fast wear on the device.

  Correct Answer: D

• Question 206:

  Your R77 primary Security Management Server is installed on GAiA. You plan to schedule the Security Management Server to run fw logswitch automatically every 48 hours. How do you create this schedule?

  A. On a GAiA Security Management Server, this can only be accomplished by configuring the command fw logswitch via the cron utility.

  B. Create a time object, and add 48 hours as the interval. Open the primary Security Management Server object's Logs and Masters window, enable Schedule log switch, and select the Time object.

  C. Create a time object, and add 48 hours as the interval. Open the Security Gateway object's Logs and Masters window, enable Schedule log switch, and select the Time object.

  D. Create a time object, and add 48 hours as the interval. Select that time object's Global Properties > Logs and Masters window, to schedule a logswitch.

  Correct Answer: B

• Question 207:

  What is the officially accepted diagnostic tool for IP Appliance Support?

  A. ipsoinfo

  B. CST

  C. uag-diag

  D. cpinfo

  Correct Answer: B

• Question 208:

  The third-shift Administrator was updating Security Management Server access settings in Global Properties and testing. He managed to lock himself out of his account. How can you unlock this account?

  A. Type fwm unlock_admin from the Security Management Server command line.

  B. Type fwm unlock_admin -u from the Security Gateway command line.

  C. Type fwm lock_admin -u from the Security Management Server command line.

  D. Delete the file admin.lock in the Security Management Server directory $FWDIR/tmp/.

  Correct Answer: C

• Question 209:

  What are you required to do before running the command upgrade_export?

  A. Run a cpstop on the Security Gateway.

  B. Run a cpstop on the Security Management Server.

  C. Close all GUI clients.

  D. Run cpconfig and set yourself up as a GUI client.

  Correct Answer: C

• Question 210:

  You want to generate a cpinfo file via CLI on a system running GAiA. This will take about 40 minutes since the log files are also needed. What action do you need to take regarding timeout?

  A. No action is needed because cpshell has a timeout of one hour by default.

  B. Log in as the default user expert and start cpinfo.

  C. Log in as admin, switch to expert mode, set the timeout to one hour with the command, idle 60, then start cpinfo.

  D. Log in as Administrator, set the timeout to one hour with the command idle 60 and start cpinfo.

  Correct Answer: D