156-915.77

156-915.77 practice questions, page 13 of 34, with answer review and explanations.

Question 61

How does Check Point recommend that you secure the sync interface between gateways?

  1. Configure the sync network to operate within the DMZ.
  2. Secure each sync interface in a cluster with Endpoint.
  3. Use a dedicated sync network.
  4. Encrypt all sync traffic between cluster members.

Question 62

How would you set the debug buffer size to 1024?

  1. Run fw ctl set buf 1024
  2. Run fw ctl kdebug 1024
  3. Run fw ctl debug -buf 1024
  4. Run fw ctl set int print_cons 1024

Question 63

Steve is troubleshooting a connection problem with an internal application. If he knows the source IP address is 192.168.4.125, how could he filter this traffic?

  1. Run fw monitor -e "accept dsrc=192.168.4.125;"
  2. Run fw monitor -e "accept dst=192.168.4.125;"
  3. Run fw monitor -e "accept ip=192.168.4.125;"
  4. Run fw monitor -e "accept src=192.168.4.125;"

Question 64

Check Point support has asked Tony for a firewall capture of accepted packets. What would be the correct syntax to create a capture file to a filename called monitor. out?

  1. Run fw monitor -e "accept;" -f monitor.out
  2. Run fw monitor -e "accept;" -c monitor.out
  3. Run fw monitor -e "accept;" -o monitor.out
  4. Run fw monitor -e "accept;" -m monitor.out

Question 65

What is NOT a valid LDAP use in Check Point Smart Directory?

  1. Retrieve gateway CRL's
  2. External users management
  3. Enforce user access to internal resources
  4. Provide user authentication information for the Security Management Server