CheckPoint Checkpoint Certifications 156-915.77 Questions & Answers

• Question 81:

  Fill in the blank. To verify that a VPN Tunnel is properly established, use the command _________

  A. vpn tunnelutil

  Correct Answer: A

• Question 82:

  Fill in the blank.

  

  In New Mode HA, the internal cluster IP VIP address is 10.4.8.3. An internal host 10.4.8.108 successfully pings its Cluster and receives replies. Review the ARP table from the internal Windows host 10.4.8.108. Based on this information, what is the active cluster member's IP address?

  A. 10.4.8.2

  Correct Answer: A

• Question 83:

  Type the command and syntax you would use to verify that your Check Point cluster is functioning correctly.

  A. cphaprob state

  Correct Answer: A

• Question 84:

  Fill in the blank.

  

  In New Mode HA, the internal cluster IP VIP address is 10.4.8.3. The internal interfaces on two members are 10.4.8.1 and 10.4.8.2 Internal host 10.4.8.108 pings 10.4.8.3, and receives replies. Review the ARP table from the internal Windows host 10.4.8.108. According to the output, which member is the standby machine?

  A. 10.4.8.1

  Correct Answer: A

• Question 85:

  How could you compare the Fingerprint shown to the Fingerprint on the server? Run cpconfig and select: Exhibit:

  

  A. the Certificate Authority option and view the fingerprint.

  B. the GUI Clients option and view the fingerprint.

  C. the Certificate's Fingerprint option and view the fingerprint.

  D. the Server Fingerprint option and view the fingerprint.

  Correct Answer: C

• Question 86:

  MegaCorp is running Smartcenter R70, some Gateways at R65 and some other Gateways with R60. Management wants to upgrade to the most comprehensive IPv6 support. What should the administrator do first?

  A. Upgrade Smartcenter to R77 first.

  B. Upgrade R60-Gateways to R65.

  C. Upgrade every unit directly to R77.

  D. Check the ReleaseNotes to verify that every step is supported.

  Correct Answer: D

• Question 87:

  To provide full connectivity upgrade status, use command:

  A. cphaprob fcustat

  Correct Answer: A

• Question 88:

  Which process should you debug if SmartDashboard login fails?

  A. sdm

  B. cpd

  C. fwd

  D. fwm

  Correct Answer: D

• Question 89:

  MultiCorp has bought company OmniCorp and now has two active AD domains. How would you deploy Identity Awareness in this environment?

  A. You must run an ADquery for every domain.

  B. Identity Awareness can only manage one AD domain.

  C. Only one ADquery is necessary to ask for all domains.

  D. Only Captive Portal can be used.

  Correct Answer: A

• Question 90:

  Paul has just joined the MegaCorp security administration team. Natalie, the administrator, creates a new

  administrator account for Paul in SmartDashboard and installs the policy.

  When Paul tries to login it fails. How can Natalie verify whether Paul's IP address is predefined on the

  security management server?

  A. Login to Smart Dashboard, access Properties of the SMS, and verify whether Paul's IP address is listed.

  B. Type cpconfig on the Management Server and select the option "GUI client List" to see if Paul's IP address is listed.

  C. Login in to Smart Dashboard, access Global Properties, and select Security Management, to verify whether Paul's IP address is listed.

  D. Access the WEBUI on the Security Gateway, and verify whether Paul's IP address is listed as a GUI client.

  Correct Answer: B