156-215.77 Check Point Certified Security Administrator Exam Set 6

Task objects to assign users, machines, and network locations such as:


Options are :

  • one object
  • as separate objects
  • credentialed objects
  • None
  • related objects

Answer : one object

Which of the following items should be configured Security Management Server to authenticate using LDAP?


Options are :

  • Checkpoint Password
  • None
  • Windows logon password
  • One administrator user ID
  • WMI object

Answer : Checkpoint Password

Which of the following items should be configured Security Management Server to authenticate LDAP?


Options are :

  • Active Directory Server Object
  • WMI object
  • None
  • Windows logon password
  • Checkpoint Password

Answer : Active Directory Server Object

156-215.77 Check Point Certified Security Administrator Test Set 1

What physical machine must have access to the Center's public IP address when checking for new packages Smart Update?


Options are :

  • Smart Update GUI PC
  • None
  • Smart Update Repository Library SQL Server Database
  • A security gateway download a new update package
  • Smart Update is installed Security Management Server PC

Answer : Smart Update GUI PC

Where can you verify, UserDirectory is the use?


Options are :

  • Make sure that the Global Properties> UserDirectory (LDAP)> Use UserDirectory (LDAP) is checked for Security Gateways
  • None
  • Make sure that the Security Gateway> General Properties> UserDirectory (LDAP)> Use UserDirectory (LDAP) is checked for Security Gateways
  • Make sure that the Security Gateway> General Properties> Authentication> Use UserDirectory (LDAP) is checked for Security Gateways
  • Make sure that the Global Properties> Authentication> Use UserDirectory (LDAP) is checked for Security Gateways

Answer : Make sure that the Global Properties> UserDirectory (LDAP)> Use UserDirectory (LDAP) is checked for Security Gateways

You are going to upgrade to Check Point Gateway between R71 and R77. Before the update that you want to back up the Gateway should not be any problems with the update. Which of the following enables the configuration of the Gateway fully backed up to a manageable size of the least amount of time?


Options are :

  • Checking the database
  • upgrade_export
  • picture
  • back up
  • None

Answer : back up

There are R77 Security Gateway Gaia. In the case of a hardware failure, you are the server with the exact same hardware and version of the firewall. What backup method could be used to quickly put on the production of a secondary firewall?


Options are :

  • picture
  • back up
  • Manual Backup
  • upgrade_export
  • None

Answer : picture

The sample GAIA offer a ready-made backup. The result may be stored in a file server or a local file in / var / CPsnapshot / photos. How to restore a local snapshot named MySnapshot.tgz?


Options are :

  • .Reboot system and calls from the Home menu. Select the option Snapshot Management, provides expert password and click [L] to return the local file. Then give the correct file name.
  • The expert user, type the command to return to --file MySnapshot.tgz.
  • The expert user, type the command snapshot -r MySnapshot.tgz.
  • None
  • The expert user, type the command snapshot - R to restore a local file. Then give the correct file name.

Answer : The expert user, type the command to return to --file MySnapshot.tgz.

The system administrator without access to SmartDashboard installed a new IPSO-based Security Gateway R77 over the weekend. He e-mailed to you SIC activation key. You want to strengthen communication between the Security Gateway and Management Server by installing the Policy. What could be prevented by installing Policy?


Options are :

  • Intermediate local security gateway policy does not allow to install it via a remote security gateway device. Solve by running the command fw unloadlocal the local security gateway.
  • None
  • First you have to execute the command fw unloadlocal R 77 is a security gateway device to limit the removal of the default policy.
  • You must first create a new Gateway object SmartDashboard, to strengthen the SIC through a link button and specify your gateway s topology.
  • You Secure between internal communication (SIC) and the Security Gateway Management Server not been established. You need to initialize SIC Security Management Server.

Answer : You must first create a new Gateway object SmartDashboard, to strengthen the SIC through a link button and specify your gateway s topology.

156-215.77 Check Point Certified Security Administrator Test Set 2

If the Smart Update fails to update or distribution of Gaia, how the system will recover?


Options are :

  • GAIA will restart automatically return to a snapshot of the last version before the upgrade.
  • Administrator can only return to a previously created picture (if any) of the command cprinstall snapshot.
  • The administrator must install the latest version via the command cprinstall Restore.
  • None
  • The administrator must remove RPM packages by hand, and try to update again.

Answer : GAIA will restart automatically return to a snapshot of the last version before the upgrade.

How can you recover Security administrator password that was created during the original Security Management Server installation of Gaia?


Options are :

  • Write cpm -a, and provides the current administrator account name. Reset the security administrator's password.
  • Export user database ASCII file to a four-wave mixing dbexport. Open this file in an editor, and remove the password portion of the file. Then sign in to the account without a password. You are asked to enter a new password.
  • As an expert in the type of user FWM -a, and provides the current administrator account name. Reset the security administrator's password.
  • None
  • Launch SmartDashboard User Management screen, and edit cpconfig administrator.

Answer : As an expert in the type of user FWM -a, and provides the current administrator account name. Reset the security administrator's password.

Suppose Security Gateway hard drive fails and you are forced to repair them. You Snapshot file stored in the TFTP server, backups, and Security Management Server. What is the correct procedure for rebuilding Gateway quickly?


Options are :

  • Restore command to restore a snapshot. Install all necessary Check Point products. Create the SIC and install Policy.
  • Restore command to restore a snapshot, create and install the SIC Policy.
  • None
  • Installed on a base operating system (i.e., Gaia). Specifies the gateway interface so that the gateway can communicate with the TFTP server. Install all necessary Check Point's products and previously applied patches. Restore the saved snapshot of the image, and then install Policy.
  • Installed on a base operating system (i.e., Gaia). Specifies the gateway interface so that the gateway can communicate with the TFTP server. Restore the saved snapshot of the image, and then install security policy.

Answer : Installed on a base operating system (i.e., Gaia). Specifies the gateway interface so that the gateway can communicate with the TFTP server. Restore the saved snapshot of the image, and then install security policy.

Central license management allows Security Administrators to perform which of the following activities? 1. Check the expiring licenses. 2.Sort licenses and view license features. R77 3.Attach both central and local government licesnes remote module. R 77 4.Delete both local license and central licensing remote module. 5.Add or delete a license or authorization from the archive. 6.Attach and / or R 77 removes only the central limit the granting remote module (not local licenses).


Options are :

  • 1, 2, 5, and 6
  • 1, 2, 3, 4, and 5
  • 2, 3, 4, and 5
  • 2, 5, and 6
  • None

Answer : 1, 2, 3, 4, and 5

Prior to updating the Secure Platform Gaia, create a backup. To save time, many administrators backup command. This creates a backup copy of Checkpoint, as well as the configuration of the system configuration. An administrator has installed the latest HFA fixing the system after creating a backup for the traffic problem. It is a mistake very complex static routing. Check Point's configuration has not changed. The system administrator uses to restore correct errors in the static routing?


Options are :

  • The restore process can be done easily with the command to restore and copy netconf.C production environment.
  • None
  • The return process is not possible, because the backup does not have the same build number (version).
  • Recovery Point Snapshot Management is done by selecting from the start menu of Gaia.
  • The backup can not be restored because the binary files are missing.

Answer : The restore process can be done easily with the command to restore and copy netconf.C production environment.

Where Smart Event licenses installed?


Options are :

  • Server log
  • None
  • Security Management Server
  • Smart Event Server
  • Security Gateway

Answer : Smart Event Server

156-215.77 Check Point Certified Security Administrator Test Set 3

Which of the following options are available in Gaia cpconfig Management Server utility?


Options are :

  • export options
  • None
  • Time and Date
  • GUI Clients
  • The DHCP server configuration

Answer : GUI Clients

What is the greatest benefit of the command upgrade_export over either a backup or snapshot?


Options are :

  • upgrade_export have the opportunity to back up your system and SmartView Tracker logs after the backup and snapshot does not.
  • upgrade_export back up the routing tables hosted files, and manual ARP configurations with backup and snapshot does not.
  • Commands backup and snapshot can take a long time to run again upgrade_export takes a much shorter time.
  • upgrade_export is operating system independent and can be used as a backup or snapshot is not available.
  • None

Answer : upgrade_export is operating system independent and can be used as a backup or snapshot is not available.

Every menu gives an overview of installed licenses?


Options are :

  • showlic
  • FW lic results
  • None
  • cplic results
  • cplicense

Answer : cplic results

ALL of the following options offer Gaia sysconfig utility, except for:


Options are :

  • export options
  • Time and Date
  • None
  • The DHCP server configuration
  • GUI Clients

Answer : GUI Clients

Every command displays the Security Gateway version installed?


Options are :

  • FW ver
  • FW stat
  • cpstat gw
  • FW printver
  • None

Answer : FW ver

What is the syntax for the removal of the package by means of newpkg?


Options are :

  • None
  • -u
  • -S
  • -i
  • newpkg can not be used to remove the package

Answer : newpkg can not be used to remove the package

156-215.77 Check Point Certified Security Administrator Test Set 4

You need to back up your routing, interface, and DNS configuration information of Gaia R77 Security Gateway. Every backup and recovery solution do you use?


Options are :

  • Database version control system
  • .upgrade_export and upgrade_import commands
  • GAIA backup utilities
  • None
  • Manual copies of the directory FWDIR $ / conf

Answer : GAIA backup utilities

Which operating systems are supported by Check Point Security Gateway server open? Select a complete list.


Options are :

  • Checkpoint Gaia Secure Platform and Microsoft Windows
  • Checkpoint Gaia Secure Platform, IPSO, Sun Solaris, Microsoft Windows
  • Sun Solaris, Red Hat Enterprise Linux, Check Point Secure Platform, IPSO, Microsoft Windows
  • Checkpoint GAIA, Microsoft Windows, Red Hat Enterprise Linux, Sun Solaris, IPSO
  • None

Answer : Checkpoint Gaia Secure Platform and Microsoft Windows

Which of the following statements accurately describes the command upgrade_export?


Options are :

  • upgrade_export stored in the network configuration data, objects, global capabilities, and database patches before upgrading Security Management Server.
  • This command is no longer supported Gaia.
  • upgrade_export used to update the security gateway, and allows for certain files may be included or excluded prior to export.
  • None
  • Used primarily in updating the Security Management Server, upgrade_export to save all databases and object-oriented / conf directories imports Security Gateway to a newer version.

Answer : Used primarily in updating the Security Management Server, upgrade_export to save all databases and object-oriented / conf directories imports Security Gateway to a newer version.

Every command line interface utility allows you to check the administrator's name and the time stamp security firewall module installed?


Options are :

  • FW ctl Pstat
  • None
  • cpstat fwd
  • .fw ver
  • FW stat

Answer : FW stat

There are license_upgrade Tool GAIA Gateway. Which of the following do you update tool?


Options are :

  • To simulate the license upgrade
  • View licenses in the SmartUpdate License archive
  • View the status of installed licenses
  • None
  • The actual license upgrade

Answer : View licenses in the SmartUpdate License archive

You have set SNX is a security gateway. The client generates a Security Gateway, and the user inputs identification information. What needs to happen authenticity, which allows the customer to connect to your gateway Security s VPN domain?


Options are :

  • None
  • SNX client application must be installed on the client
  • SNX edit the routing table to forward traffic to the VPN Security Gateway.
  • Office-space address is obtained from the client.
  • Active-X is allowed on the client.

Answer : SNX edit the routing table to forward traffic to the VPN Security Gateway.

156-215.77 Check Point Certified Security Administrator Test Set 5

What is required to make before running the command upgrade_export?


Options are :

  • Run cpconfig and set himself up as a GUI client.
  • Close all GUI clients.
  • Run cpstop Security Management Server.
  • None
  • Run cpstop is a security gateway.

Answer : Close all GUI clients.

Which command would give the most comprehensive diagnostic information Check Point technical support?


Options are :

  • diag
  • cpstat - date.cpstat.txt
  • .fw cpinfo
  • cpinfo -o date.cpinfo.txt
  • None

Answer : cpinfo -o date.cpinfo.txt

The advantage of the local rather than centralized licensing is:


Options are :

  • The license must be replaced when changing the IP address of the security gateway. Each module is a license has a unique IP address.
  • Only one IP address is used for all licenses
  • None
  • The permit can be taken from a single Security Management Server and given to another Security Management Server
  • Licenses are automatically attached to respective Security Gateway.

Answer : Only one IP address is used for all licenses

Comment / Suggestion Section
Point our Mistakes and Post Your Suggestions

Subscribe to See Videos

Subscribe to my Youtube channel for new videos : Subscribe Now