156-315.77 Check Point Certified Security Specialist Exam Set 1

R76 return upgrade_import command which of the following aspects have Nonet recovered?


Options are :

  • . Global
  • None
  • SIC certificate
  • Their route (Correct)
  • license

Answer : Their route

156-315.77 Check Point Certified Security Specialist Exam Set 2

Which of the following commands can be configured to provide as complete a recovery of the R76?


Options are :

  • FWM dbimport -p
  • cpconfig
  • cpinfo -recover
  • None
  • upgrade_import (Correct)

Answer : upgrade_import

It uses the same key to decrypt or less, because it is Nonet encrypted?


Options are :

  • Asymmetric encryption
  • Symmetric encryption (Correct)
  • Dynamic encryption
  • Certificate encryption
  • Static encryption

Answer : Symmetric encryption

To determine the correct steps to update intelligent update remote security gateway.


Options are :

  • Once you have chosen "package: Add ... CD" selected package file copy SmartCenter server package store locations. (Correct)
  • Once you have selected "Package: More ... CD" copy the entire contents, CD package directory to the selected remote security gateway.
  • None
  • Once you have selected "Package: More ... CD" select package package directory is copied to the selected remote security gateway.
  • Once you have selected "Package: More ... CD", copy the entire contents of the CD-ROM package SmartCenter server storage sites.

Answer : Once you have chosen "package: Add ... CD" selected package file copy SmartCenter server package store locations.

156-315.77 Check Point Certified Security Specialist Exam Set 3

After cpstop CRL cache with respect to what will happen; spstart already started?


Options are :

  • Gateway to continue to use the old CRL, as long as it is valid. (Correct)
  • Gateway began to abandon the old CRL is valid, obtain a new CRL.
  • None
  • Gateway will be issued crl_zap start, which will clear the cache, and enforce certificate search.
  • Gateway to continue to use the old CRL, even if it is Nonet effective until a new CRL cache

Answer : Gateway to continue to use the old CRL, as long as it is valid.

Usually when you upgrade from the Security Server, you need to install a new computer configuration on the new R76 installation, and then transferred from the original machine.Which the following statement to the database is correct?


Options are :

  • All product databases are included in the migration.
  • None
  • Connections both computers must have the same has been installed, and used prior to transmission, may try.
  • On the new computer security management server must be equal to or higher than the original version of the time machine. (Correct)
  • The new machine should Nonet be installed on more than the original Check Point Security Management server.

Answer : On the new computer security management server must be equal to or higher than the original version of the time machine.

The main security management server with GAIA. What is a backup of your R76 security gateway configuration, including routing and network configuration files, the easiest way?


Options are :

  • Directory to a different location by copying the directory FWDIR $ / conf directory and $ FWDIR / lib.
  • None
  • Command pre_upgrade verify and save files * .tgz directory c: / TEMP
  • Via the command line or Web-based interface. Gaia uses native backup utility. (Correct)
  • Command upgrade_export

Answer : Via the command line or Web-based interface. Gaia uses native backup utility.

156-315.77 Check Point Certified Security Specialist Exam Set 4

In the configuration of LDAP group object, select it, if you want to refer to the purpose of the LDAP server port defined group of authentication should be selected?


Options are :

  • Only the sub-tree
  • All users Recipient
  • The only Group subsidiaries (Correct)
  • OU verify and select the group name
  • None

Answer : The only Group subsidiaries

Which of the following command to display complete synchronization status?


Options are :

  • None
  • cphaprob -i List (Correct)
  • #NAME?
  • FW CTL iflist
  • FW halberd

Answer : cphaprob -i List

When you upgrade a distributed environment protection point products, in what order should upgrade to these parts? 1 2 GUI Client Security Management Server 3 Security Gateway


Options are :

  • 3,2,1
  • 2,3,1 (Correct)
  • None
  • 3,1,2
  • 1,2,3

Answer : 2,3,1

156-315.77 Check Point Certified Security Specialist Exam Set 5

Perform authentication of remote access methods:


Options are :

  • CPD
  • cvpnd
  • None
  • FWM
  • vpnd (Correct)

Answer : vpnd

You have two IP devices: one of a IP565 and IP395. Both devices are IPSO 6.2 and R76 is installed in a distributed deployment. They can be members of a gateway cluster?


Options are :

  • None, because you must install a separate install security gateway.
  • None
  • None, because these devices must be of the same type (both should be IP565 and IP395)
  • . None, because IP is Nonet cluster option.
  • Yes, as long as they have the same version of IPSO and Check Point. (Correct)

Answer : Yes, as long as they have the same version of IPSO and Check Point.

How do you verify Intelligence catalog using?


Options are :

  • Global Properties> Intelligent directory (LDAP)> Using Smart directory (LDAP), the security gateway checks (Correct)
  • None
  • Gateway Properties> Intelligent directory (LDAP)> Using Smart directory (LDAP), the security gateway checks
  • Gateway Properties> Authentication> Using intelligent directory (LDAP), the security gateway checks
  • Global Properties> Authentication> Using intelligent directory (LDAP), the security gateway checks

Answer : Global Properties> Intelligent directory (LDAP)> Using Smart directory (LDAP), the security gateway checks

156-315.77 Check Point Certified Security Specialist Exam Set 6

In the air-in firewall clustering environment, you run the command from the cluster around what changed in order to avoid problems.


Options are :

  • cphaconf set_ccp broadcast (Correct)
  • cphaconf set clear_subs
  • None
  • cphaconf set mc_relod
  • cphaconf set_ccp Multicast

Answer : cphaconf set_ccp broadcast

Which of the following command will stop accelerating operational security gateway security platform?


Options are :

  • perf_pack Close
  • FW accelerate Close
  • None
  • splat_accel Close
  • fwaccel Close (Correct)

Answer : fwaccel Close

In the case of zero downtime, I order you to manually run, and all members of the cluster are updated?


Options are :

  • cphaconf set_ccp broadcast
  • None
  • cphaconf set mc_relod
  • cphaconf set clear_subs
  • cphaconf set_ccp Multicast (Correct)

Answer : cphaconf set_ccp Multicast

156-315.77 Check Point Certified Security Specialist Exam Set 7

You need a backup route to the interface and DNS configuration information security platform R76 security gateway. Each backup and recovery solutions, How about you?


Options are :

  • Command upgrade_export and upgrade_import
  • Security Platform Backup utility (Correct)
  • None
  • Database version control system
  • Copy of the directory FWDIR $ / conf DATA SHEET

Answer : Security Platform Backup utility

You worry about your firewall processor NGX R71 secure platform possible overload. What documents will you set the speed (S)?


Options are :

  • None
  • Cat / etc inside / cpuinfo
  • Execute cat / proc / cpuinfo in (Correct)
  • Cat / var / select / CPsuite-R71 / FW 1 / conf the directory / cpuinfo
  • In the cat / etc / SYSCONFIG / cpuinfo

Answer : Execute cat / proc / cpuinfo in

To upgrade a cluster of two members of VPN-1 NGX. The SmartCenter server, and both are members of the versions of VPN-1 / Firewall-1 NG FP3 of the, Hotfix.What have the latest news correct upgrade process? 1. Change the generic version of the browser function gateway cluster object. 2. Update the SmartCenter server, and then restart after the update. 3. Run cpstop a member, leaving the other members of the operation. Upgrade time a member of, and restart after the update. 4. Install security.


Options are :

  • 2,4,3,1
  • 2,3,1,4- (Correct)
  • 1,3,2,4
  • 3,2,1,4-
  • 1,2,3,4

Answer : 2,3,1,4-

156-515.65 Check Point Certified Security Expert Plus Exam Set 1

__________ has its own check-point agreement. It is based ClusterXL Check Point between communication modules.


Options are :

  • CCP (Correct)
  • CKPP
  • HA opcode
  • RDP
  • None

Answer : CCP

You want to make sure that Check Point clustering behavior of correctly.Which command-line tool, you can use it?


Options are :

  • None
  • .cphaprob state (Correct)
  • cphastart "state
  • cphainfo -S
  • cphaconf state

Answer : .cphaprob state

Determining Cluster Control Protocol (CCP) using broadcast, the next command is executed:


Options are :

  • None
  • cphaconf set_ccp broadcast (Correct)
  • set_ccp cpcluster broadcast
  • clusterconfig set_ccp broadcast
  • CCP Broadcast

Answer : cphaconf set_ccp broadcast

156-515.65 Check Point Certified Security Expert Plus Exam Set 2

Which of the following most accurately reflect upgrade_export command?


Options are :

  • .Used security gateway upgrade, upgrade cludes export modified files, such as directories / lib and / conf directory.
  • Mainly in the security update management server uses to enhance conf import export database to store and secure gateway for all objects of a newer version of this catalog. (Correct)
  • Update outlet for upgrading security gateways, and allow certain files can include or exclude prior to export.
  • Security Server upgrade before upgrading outlet stores configuration data, objects, global capabilities, and database patch.
  • None

Answer : Mainly in the security update management server uses to enhance conf import export database to store and secure gateway for all objects of a newer version of this catalog.

In the ClusterXL _______ is defined as an important device.


Options are :

  • PROT_SRV.EXE
  • protect.exe
  • None
  • filter (Correct)
  • fw.d

Answer : filter

His poor customer complaints system. He had heard interface templates speed driving. How to explain to customers how to model restrictions and ensure that they are running?


Options are :

  • Establish a connection to improve acceleration, the purpose of the institution is a ¢ â, ¬Â¬A "groups together all correspond to a particular service and a discriminating factor is the only port of destination. You can test the connection modes you can use the command fwacel model.
  • Establish a connection to increase the acceleration, the purpose of the mechanism is a ¢ â, ¬Â¬A "groups together all corresponding to a particular service and a discriminating factor is the sole source connection port. You can connect a test pattern can be fwaccel statistics command. (Correct)
  • Establish a connection to improve acceleration, the purpose of the institution is a ¢ â, ¬Â¬A "groups together all correspond to a particular service and a discriminating factor is the only port of destination. You can test the connection modes you can use the command FW CTL model.
  • Establish a connection to increase the acceleration, the purpose of the mechanism is a ¢ â, ¬Â¬A "groups together all corresponding to a particular service and a discriminating factor is the sole source connection port. You can connect a test pattern can be command FW CTL model.
  • None

Answer : Establish a connection to increase the acceleration, the purpose of the mechanism is a ¢ â, ¬Â¬A "groups together all corresponding to a particular service and a discriminating factor is the sole source connection port. You can connect a test pattern can be fwaccel statistics command.

Check Point Certified Security Administrator Set 1

During the execution of certified smart dashboard are:


Options are :

  • CPD
  • vpnd
  • FWM (Correct)
  • cvpnd
  • None

Answer : FWM

In the definition of organizational unit that performs the following actions are invalid object class?


Options are :

  • domain name (Correct)
  • user
  • Resources
  • service
  • None

Answer : domain name

In the configuration of LDAP group object, which option should be selected, if you do Nonet want to define the gateway reference group for LDAP authentication server?


Options are :

  • Group agNonesticism
  • OU accept and choose the right domain name
  • The only Group subsidiaries
  • None
  • Only the sub-tree (Correct)

Answer : Only the sub-tree

Check Point Certified Security Administrator Set 2

Which command allows you to disable synchronization on the cluster members firewall?


Options are :

  • FW CTL setsync Close (Correct)
  • FW CTL setsync 0
  • FW CTL syncstat status
  • FW CTL syncstat Close
  • None

Answer : FW CTL setsync Close

Each menu provides a cluster upgrade status?


Options are :

  • cphaprob tablestat
  • cphaprob ldstat
  • cphaprob state
  • None
  • cphaprob fcustat (Correct)

Answer : cphaprob fcustat

The network includes two members of the multicast ClusterXL run in this topology: expansion of the network, you need to add new interfaces: A virtual IP address 10.10.10.1/24 members and 10.10.10.2/24 should be placed members Interface 10.10.10.0 / 24 10.10.10.3.What is the right step is to add these interfaces?


Options are :

  • 1. Run cpstop a member, and is configured by SYSCONFIG new user interface. 2. Run cpstart is a member. Repeat the same procedure to the second member. 3. Download the new topology cluster object and the cluster members. 4. Install security. (Correct)
  • None
  • 1. Use the ifconfig command to configure the new interface. 2. Run cpstop, and at the same time cpstart members. 3. Update the topology of cluster cluster objects and two members of. 4. Install security.
  • 1. Delete the "cluster members" through a gateway cpconfig. 2. Specify the new interface SYSCONFIG "Nonen-member" gateway. 3. RE. Enable "cluster member" gateway. 4. In the second step of the gateway by the same method. 5. Update the topology of cluster objects and cluster members. 6. Install the security policy.
  • 1. SYSCONFIG elements arranged two new interfaces. 2. Update the topology of cluster cluster objects and two members of. 3. Install security policy.

Answer : 1. Run cpstop a member, and is configured by SYSCONFIG new user interface. 2. Run cpstart is a member. Repeat the same procedure to the second member. 3. Download the new topology cluster object and the cluster members. 4. Install security.

Check Point Certified Security Administrator Set 3

Which of the following commands can be used to solve the synchronization problem of ClusterXL?


Options are :

  • FW label -s -t connection> filename (Correct)
  • FW label -u connection> filename
  • None
  • FW debugging CXL connection> filename
  • FW CTL -S -t connection> filename

Answer : FW label -s -t connection> filename

In the CoreXL, which is responsible for incoming traffic network interface to speed up the licensing packages safely and Nonen-accelerated packet allocation between core cases?


Options are :

  • None
  • SSD (security system distributors)
  • SNP (Network Processing System)
  • SND (security dealer network) (Correct)
  • NAD (network accelerator daemon)

Answer : SND (security dealer network)

Comment / Suggestion Section
Point our Mistakes and Post Your Suggestions