CheckPoint Checkpoint Certifications 156-915.77 Questions & Answers

• Question 221:

  Suppose the Security Gateway hard drive fails and you are forced to rebuild it. You have a snapshot file stored to a TFTP server and backups of your Security Management Server. What is the correct procedure for rebuilding the Gateway quickly?

  A. Reinstall the base operating system (i.e., GAiA). Configure the Gateway interface so that the Gateway can communicate with the TFTP server. Revert to the stored snapshot image, and install the Security Policy.

  B. Run the command revert to restore the snapshot, establish SIC, and install the Policy.

  C. Run the command revert to restore the snapshot. Reinstall any necessary Check Point products. Establish SIC and install the Policy.

  D. Reinstall the base operating system (i.e., GAia). Configure the Gateway interface so that the Gateway

  can communicate with the TFTP server. Reinstall any necessary Check Point products and previously applied hotfixes. Revert to the stored snapshot image, and install the Policy.

  Correct Answer: A

• Question 222:

  You are running a R77 Security Gateway on GAiA. In case of a hardware failure, you have a server with the exact same hardware and firewall version installed. What back up method could be used to quickly put the secondary firewall into production?

  A. manual backup

  B. upgrade_export

  C. backup

  D. snapshot

  Correct Answer: D

• Question 223:

  Your primary Security Gateway runs on GAiA. What is the easiest way to back up your Security Gateway R77 configuration, including routing and network configuration files?

  A. Copying the directories $FWDIR/conf and $FWDIR/lib to another location.

  B. Using the native GAiA backup utility from command line or in the Web based user interface.

  C. Using the command upgrade_export.

  D. Run the pre_upgrade_verifier and save the .tgz file to the directory /temp.

  Correct Answer: B

• Question 224:

  Which of the following statements accurately describes the command upgrade_export?

  A. upgrade_export stores network-configuration data, objects, global properties, and the database revisions prior to upgrading the Security Management Server.

  B. Used primarily when upgrading the Security Management Server, upgrade_export stores all object databases and the /conf directories for importing to a newer Security Gateway version.

  C. upgrade_export is used when upgrading the Security Gateway, and allows certain files to be included or excluded before exporting.

  D. This command is no longer supported in GAiA.

  Correct Answer: B

• Question 225:

  A snapshot delivers a complete GAiA backup. The resulting file can be stored on servers or as a local file in /var/CPsnapshot/snapshots. How do you restore a local snapshot named MySnapshot.tgz?

  A. Reboot the system and call the start menu. Select the option Snapshot Management, provide the Expert password and select [L] for a restore from a local file. Then, provide the correct file name.

  B. As expert user, type the command snapshot -r MySnapshot.tgz.

  C. As expert user, type the command revert --file MySnapshot.tgz.

  D. As expert user, type the command snapshot - R to restore from a local file. Then, provide the correct file name.

  Correct Answer: C

• Question 226:

  What is the syntax for uninstalling a package using newpkg?

  A. -u

  B. -i

  C. -S

  D. newpkg CANNOT be used to uninstall a package

  Correct Answer: D

• Question 227:

  You need to back up the routing, interface, and DNS configuration information from your R77 GAiA Security Gateway. Which backup-and-restore solution do you use?

  A. Manual copies of the directory $FWDIR/conf

  B. GAiA back up utilities

  C. upgrade_export and upgrade_import commands

  D. Database Revision Control

  Correct Answer: B

• Question 228:

  Which command line interface utility allows the administrator to verify the Security Policy name and timestamp currently installed on a firewall module?

  A. cpstat fwd

  B. fw ver

  C. fw stat

  D. fw ctl pstat

  Correct Answer: C

• Question 229:

  Which operating systems are supported by a Check Point Security Gateway on an open server? Select MOST complete list.

  A. Sun Solaris, Red Hat Enterprise Linux, Check Point SecurePlatform, IPSO, Microsoft Windows

  B. Check Point GAiA and SecurePlatform, and Microsoft Windows

  C. Check Point GAiA, Microsoft Windows, Red Hat Enterprise Linux, Sun Solaris, IPSO

  D. Check Point GAiA and SecurePlatform, IPSO, Sun Solaris, Microsoft Windows

  Correct Answer: B

• Question 230:

  Before upgrading SecurePlatform to GAiA, you should create a backup. To save time, many administrators use the command backup. This creates a backup of the Check Point configuration as well as the system configuration.

  An administrator has installed the latest HFA on the system for fixing traffic problem after creating a backup file. There is a mistake in the very complex static routing configuration. The Check Point configuration has not been changed. Can the administrator use a restore to fix the errors in static routing?

  A. The restore is not possible because the backup file does not have the same build number (version).

  B. The restore is done by selecting Snapshot Management from the boot menu of GAiA.

  C. The restore can be done easily by the command restore and copying netconf.C from the production environment.

  D. A backup cannot be restored, because the binary files are missing.

  Correct Answer: C