156-315.77 Check Point Certified Security Expert Exam Set 4

Which of the following is NOT a feature of ClusterXL?


Options are :

  • None
  • Improved performance in all areas ClusterXL (2 gateway cluster compared to 1 gateway)
  • Transparent case of failover device failures
  • transparent upgrades
  • The air mission-critical environments, the status of the synchronization process (Correct)

Answer : The air mission-critical environments, the status of the synchronization process

The organization's disaster recovery plan needs to update, back up and restore the partition to take advantage of R76 installation of a new decentralized. The plan must meet the following mandatory and desired goals: evaluate, plan:


Options are :

  • Meets the required target and only one desired target
  • None
  • Does not meet the required objective
  • Meets the required target, but does not meet either of the objective pursued
  • Meets the required target and both desired goals (Correct)

Answer : Meets the required target and both desired goals

What is the purpose of pre-defined exceptions included Smart Event R76?


Options are :

  • To avoid erroneous creation of the event is the default definition IPS event; a scenario that may occur in installations where security gateways prior to version R71. (Correct)
  • None
  • to obtain samples of how to write your own exclusion
  • Please enable Earth Smart Event R76 to function properly with all other devices R71.
  • The basis of origin and exceptions of the building.

Answer : To avoid erroneous creation of the event is the default definition IPS event; a scenario that may occur in installations where security gateways prior to version R71.

156-315.77 Check Point Certified Security Expert Exam Set 5

You have a high level of service ClusterXL assembly. Machines are not synchronized. What happens to connections to failover?


Options are :

  • None
  • Old connections are lost, but automatically back always failed machine recovers.
  • the establishment of contacts can not be before the cluster members are fully synchronized.
  • Old connections are lost, but can be formed again. (Correct)
  • It is not possible to determine High Availability, which will not be synchronized.

Answer : Old connections are lost, but can be formed again.

How can you remove SecureXL the command line (it does not have to survive a reboot)?


Options are :

  • securexl off
  • None
  • fwaccel off (Correct)
  • FW ctl Accel off
  • cphaprob off

Answer : fwaccel off

What utility or command is useful for debugging by capturing data packets, also check the LDAP?


Options are :

  • um_core allow
  • FW debug FWM
  • ping
  • None
  • FW monitor (Correct)

Answer : FW monitor

156-315.77 Check Point Certified Security Expert Exam Set 6

Primary Security Gateway acts as Secure Platform. What is the easiest way to backup your Security Gateway R77 configuration, including routing and network configuration files?


Options are :

  • None
  • By copying directories FWDIR $ / conf and $ FWDIR / lib to a different location.
  • Run pre_upgrade_verifier and save .tgz file in the directory / temp
  • The command upgrade_export
  • Secure Platform using the native backup utility from the command line or Web-based user interface. (Correct)

Answer : Secure Platform using the native backup utility from the command line or Web-based user interface.

What type of routing is based VPN Tunnel Interface (VTI) for routing traffic?


Options are :

  • Route-based VPN (Correct)
  • None
  • Host-based VPN
  • Domain-based VPN
  • VPN subnet

Answer : Route-based VPN

How many pre-defined exceptions are included by default as part of the Smart Event R71 installation of the product?


Options are :

  • 5
  • None
  • 10
  • 0
  • 3 (Correct)

Answer : 3

156-315.77 Check Point Certified Security Expert Exam Set 7

Which of the following is managed by Standard Reports, and allows the system administrator to determine the automatic download of reports in the central FTP server?


Options are :

  • Smart Dashboard Log Consolidator
  • Smart Reporter Database
  • Smart Reporter (Correct)
  • Security Management Server
  • None

Answer : Smart Reporter

In the R76 Management High Availability (HA) configuration, you can configure synchronization to occur automatically when: 1. Security is installed. 2. Security will be saved. 3. The Security Administrator logs into the secondary SmartCenter Server and change the status to active. 4. The planned event. 5. The user database is installed. Choose the best answer for synchronization trigger.


Options are :

  • None
  • 1,3,4
  • 1,2,3,4
  • 1,2,4 (Correct)
  • 1,2,5

Answer : 1,2,4

What is the condition R76 to set up a Management High Availability?


Options are :

  • None
  • All Security Management Servers must be located within the same local network.
  • Status of the synchronization process must be enabled in the secondary Server Security Management.
  • All Security Management Servers must have the same operating system. (Correct)
  • All Security Management Servers must have the same number of network cards.

Answer : All Security Management Servers must have the same operating system.

156-315.77 Check Point Certified Security Expert Exam Set 8

There are onSecure R76 Security Gateway Platform. In the case of a hardware failure, you have the exact same hardware server and firewall version installed.What backup method could be used to quickly put the production of a secondary firewall?


Options are :

  • upgrade export
  • None
  • picture (Correct)
  • back up
  • Manual Backup

Answer : picture

Can you take the full deployment of IPv6 without IPv4 addresses?


Options are :

  • Yeah. Only one TCP stack (IPv6 or IPv4) can be used at the same time.
  • None
  • Not IPv4 addresses are required to manage.
  • Not Smart Center can not be used all over the Internet.
  • Yes, is not required for the management of IPv4 addresses (Correct)

Answer : Yes, is not required for the management of IPv4 addresses

What process is managed by dynamic routing protocols (OSPF, RIP) to appear in the Secure Platform Pro?


Options are :

  • There is not a separate process, but Linux default router can take care of it.
  • Arouted
  • None
  • gated (Correct)
  • Routerd

Answer : gated

156-315.77 Check Point Certified Security Expert Exam Set 9

What is the purpose of pre-defined exceptions included Smart Event R71?


Options are :

  • Please enable Earth Smart Event R71 to function properly all the other R71-release devices.
  • to obtain samples of how to write your own exclusion.
  • To avoid erroneous creation of the event is the default definition IPS event; a scenario that may occur in installations where security gateways prior to version R71. (Correct)
  • None
  • The basis of origin and exceptions of the building.

Answer : To avoid erroneous creation of the event is the default definition IPS event; a scenario that may occur in installations where security gateways prior to version R71.

Which of the listed methods of load balancing is not valid?


Options are :

  • domain
  • Round trip
  • random
  • None
  • They are all valid (Correct)

Answer : They are all valid

What is the function Smart Event korrelointiyksikön?


Options are :

  • None
  • To set the severity level of the event
  • Displays the received events
  • More events events database.
  • Find designs by installed within the framework of the event. (Correct)

Answer : Find designs by installed within the framework of the event.

156-315.77 Check Point Certified Security Specialist Exam Set 1

Which of the following is true for countless VPN tunnel interfaces (VTIs)?


Options are :

  • VTIs can be physical, and loopback.
  • They are only supported IPSO operating system (Correct)
  • Local IP addresses are not specified; remote IP addresses have been determined
  • VTIs can not be determined proxy connection.
  • None

Answer : They are only supported IPSO operating system

How Smart Workflow enabled?


Options are :

  • None
  • .In SmartView Monitor, click Intelligent Workflow / Workflow Enable Smart. Enabling Smart Workflow Wizard launches and prompts Smart Workflow activity. When the mode is selected, the wizard ends.
  • .In SmartViewTracker, click on Intelligent Workflow / Workflow Enable Smart. Enabling Smart Workflow wizard launches and asks for Smart Work Flow Operation Mode When the mode is selected, the wizard ends.
  • In SmartDashboard, click on Intelligent Workflow / Workflow Enable Smart. Enabling Smart Workflow Wizard launches and prompts Smart Workflow activity. When the mode is selected, the wizard ends. (Correct)
  • .In Smart Event, click on Intelligent Workflow / Workflow Enable Smart. Enabling Smart Workflow Wizard launches and prompts Smart Workflow activity. When the mode is selected, the wizard ends.

Answer : In SmartDashboard, click on Intelligent Workflow / Workflow Enable Smart. Enabling Smart Workflow Wizard launches and prompts Smart Workflow activity. When the mode is selected, the wizard ends.

156-315.77 Check Point Certified Security Specialist Exam Set 2

Due to some recent performance problems, you will be prompted to add the processors firewall. If you are already in use CoreXL, how are you able to increase the kernel of cases?


Options are :

  • When CoreXL is installed you can not take additional core cases without re-installing the R76.
  • Smart Update, right-click Firewall, and select Add Object Kernel instances.
  • The core cases automatically added once the process has been installed, and no additional configuration is required.
  • Use cpconfig re-set the CoreXL. (Correct)
  • None

Answer : Use cpconfig re-set the CoreXL.

Which of the following commands can you run to remove the site-to-site IPSec and IKE keys?


Options are :

  • VPN tu (Correct)
  • None
  • vpn Accel off
  • vpn export_p12
  • ikeoff

Answer : VPN tu

Check Point recommends the use of SSL VPN:


Options are :

  • None
  • parallel firewall
  • In front of the firewall LAN connection (Correct)
  • a member of the Primary Cluster
  • DMZ

Answer : In front of the firewall LAN connection

156-315.77 Check Point Certified Security Specialist Exam Set 3

Which of the following deployment scenarios can not be managed with Check Point QoS?


Options are :

  • Two lines connected directly to the gateway via the hub
  • None
  • One LAN line and one connected to the DMZ separates the gateway interfaces
  • Two lines connected to different routers, and each router is connected to a separate gateway interfaces
  • Two lines coupled to the router and the router is directly connected to gateway (Correct)

Answer : Two lines coupled to the router and the router is directly connected to gateway

Must be published in Gaia routes to the OSPF routing protocol. What is the proper command structure, when typing the route command, execute OSPF successfully?


Options are :

  • None
  • Allows Specify the terminal Router OSPF [id] Network [online], [wildmask] FIELD [id] (Correct)
  • Use DBEdit utility file either objects_5_0.c
  • ip route OSPF OSPF OSPF Network1 network2
  • Run cpconfig utility to OSPF routing

Answer : Allows Specify the terminal Router OSPF [id] Network [online], [wildmask] FIELD [id]

What is true about troubleshooting option IPS profile features?


Options are :

  • Temporary set all screens to follow the (log) in SmartView Tracker (Correct)
  • Temporary set all the active protections to detect
  • Temporary disable IPS core engine
  • None
  • Temporary changes in the active protection profile Default_Protection

Answer : Temporary set all screens to follow the (log) in SmartView Tracker

156-315.77 Check Point Certified Security Specialist Exam Set 4

What is not available in Express reports compared to the normal reports?


Options are :

  • None
  • time
  • content
  • Filter (Correct)
  • Schedule

Answer : Filter

How can you verify that SecureXL is running?


Options are :

  • fwaccel stat (Correct)
  • FW ver
  • securexl stat
  • cpstat os
  • None

Answer : fwaccel stat

Provisioning profiles can not be applied to:


Options are :

  • IP appliances (Correct)
  • None
  • UTM-1 Appliances
  • Power-1 Appliances
  • UTM-1 EDGE Home Appliances

Answer : IP appliances

156-315.77 Check Point Certified Security Specialist Exam Set 5

What Smart Console application lets you change the Log stabilization policy?


Options are :

  • Smart Reporter (Correct)
  • None
  • Smart Update
  • Smart Dashboard
  • Smart Event Server

Answer : Smart Reporter

Comment / Suggestion Section
Point our Mistakes and Post Your Suggestions

Subscribe to See Videos

Subscribe to my Youtube channel for new videos : Subscribe Now