CheckPoint Checkpoint Certifications 156-915.77 Questions & Answers

• Question 211:

  When restoring R77 using the command upgrade_import, which of the following items are NOT restored?

  A. SIC Certificates

  B. Licenses

  C. Route tables

  D. Global properties

  Correct Answer: C

• Question 212:

  Many companies have defined more than one administrator. To increase security, only one administrator should be able to install a Rule Base on a specific Firewall. How do you configure this?

  A. Define a permission profile in SmartDashboard with read/write privileges, but restrict it to all other firewalls by placing them in the Policy Targets field. Then, an administrator with this permission profile cannot install a policy on any Firewall not listed here.

  B. Put the one administrator in an Administrator group and configure this group in the specific Firewall object in Advanced > Permission to Install.

  C. In the object General Properties representing the specific Firewall, go to the Software Blades product list and select Firewall. Right-click in the menu, select Administrator to Install to define only this administrator.

  D. Right-click on the object representing the specific administrator, and select that Firewall in Policy Targets.

  Correct Answer: B

• Question 213:

  Where can you find the Check Point's SNMP MIB file?

  A. $CPDIR/lib/snmp/chkpt.mib

  B. $FWDIR/conf/snmp.mib

  C. It is obtained only by request from the TAC.

  D. There is no specific MIB file for Check Point products.

  Correct Answer: A

• Question 214:

  The third-shift Administrator was updating Security Management Server access settings in Global Properties. He managed to lock all administrators out of their accounts. How should you unlock these accounts?

  A. Delete the file admin.lock in the Security Management Server directory $FWDIR/tmp/.

  B. Reinstall the Security Management Server and restore using upgrade_import.

  C. Type fwm lock_admin -ua from the Security Management Server command line.

  D. Login to SmartDashboard as the special cpconfig_admin user account; right-click on each administrator object and select unlock.

  Correct Answer: C

• Question 215:

  You are the Security Administrator for ABC-Corp. A Check Point Firewall is installed and in use on GAiA. You are concerned that the system might not be retaining your entries for the interfaces and routing configuration. You would like to verify your entries in the corresponding file(s) on GAiA. Where can you view them? Give the BEST answer.

  A. /etc/sysconfig/netconf.C

  B. /etc/conf/route.C

  C. /etc/sysconfig/network-scripts/ifcfg-ethx

  D. /etc/sysconfig/network

  Correct Answer: A

• Question 216:

  When using GAiA, it might be necessary to temporarily change the MAC address of the interface eth 0 to 00:0C:29:12:34:56. After restarting the network the old MAC address should be active. How do you configure this change?

  

  A. Option A

  B. Option B

  C. Option C

  D. Option D

  Correct Answer: A

• Question 217:

  Peter is your new Security Administrator. On his first working day, he is very nervous and enters the wrong password three times. His account is locked. What can be done to unlock Peter's account? Give the BEST answer.

  A. You can unlock Peter's account by using the command fwm lock_admin -u Peter on the Security Management Server.

  B. You can unlock Peter's account by using the command fwm unlock_admin -u Peter on the Security Management Server

  C. It is not possible to unlock Peter's account. You have to install the firewall once again or abstain from Peter's help.

  D. You can unlock Peter's account by using the command fwm unlock_admin -u Peter on the Security Gateway.

  Correct Answer: A

• Question 218:

  Which of the following commands can provide the most complete restoration of a R77 configuration?

  A. upgrade_import

  B. cpinfo -recover

  C. cpconfig

  D. fwm dbimport -p

  Correct Answer: A

• Question 219:

  Your company is running Security Management Server R77 on GAiA, which has been migrated through each version starting from Check Point 4.1. How do you add a new administrator account?

  A. Using SmartDashboard, under Users, select Add New Administrator

  B. Using SmartDashboard or cpconfig

  C. Using the Web console on GAiA under Product configuration, select Administrators

  D. Using cpconfig on the Security Management Server, choose Administrators

  Correct Answer: A

• Question 220:

  You intend to upgrade a Check Point Gateway from R71 to R77. Prior to upgrading, you want to back up the Gateway should there be any problems with the upgrade. Which of the following allows for the Gateway configuration to be completely backed up into a manageable size in the least amount of time?

  A. database revision

  B. snapshot

  C. upgrade_export

  D. backup

  Correct Answer: D