156-215.77

156-215.77 practice questions, page 5 of 15, with answer review and explanations.

Question 21

Several Security Policies can be used for different installation targets. The Firewall protecting Human Resources' servers should have its own Policy Package. These rules must be installed on this machine and not on the Internet Firewall. How can this be accomplished?

  1. A Rule Base is always installed on all possible targets. The rules to be installed on a Firewall are defined by the selection in the Rule Base row Install On.
  2. When selecting the correct Firewall in each line of the Rule Base row Install On, only this Firewall is shown in the list of possible installation targets after selecting Policy > Install on Target.
  3. In the menu of SmartDashboard, go to Policy > Policy Installation Targets and select the correct firewall via Specific Targets.
  4. A Rule Base can always be installed on any Check Point Firewall object. It is necessary to select the appropriate target directly after selecting Policy > Install

Question 22

You have a diskless appliance platform. How do you keep swap file wear to a minimum?

  1. Issue FW-1 bases its package structure on the Security Management Server, dynamically loading when the firewall is booted.
  2. The external PCMCIA-based flash extension has the swap file mapped to it, allowing easy replacement.
  3. Use PRAM flash devices, eliminating the longevity.
  4. A RAM drive reduces the swap file thrashing which causes fast wear on the device.

Question 23

Your R77 primary Security Management Server is installed on GAiA. You plan to schedule the Security Management Server to run fw logswitch automatically every 48 hours. How do you create this schedule?

  1. On a GAiA Security Management Server, this can only be accomplished by configuring the command fw logswitch via the cron utility.
  2. Create a time object, and add 48 hours as the interval. Open the primary Security Management Server object's Logs and Masters window, enable Schedule log switch, and select the Time object.
  3. Create a time object, and add 48 hours as the interval. Open the Security Gateway object's Logs and Masters window, enable Schedule log switch, and select the Time object.
  4. Create a time object, and add 48 hours as the interval. Select that time object's Global Properties > Logs and Masters window, to schedule a logswitch.

Question 24

Which of the following methods will provide the most complete backup of an R77 configuration?

  1. Policy Package Management
  2. Copying the directories $FWDIR\conf and $CPDIR\conf to another server
  3. Execute command upgrade_export
  4. Database Revision Control

Question 25

Which of the following commands can provide the most complete restoration of a R77 configuration?

  1. upgrade_import
  2. cpinfo -recover
  3. cpconfig
  4. fwm dbimport -p <export file>