★ Pass on Your First TRY ★ 100% Money Back Guarantee ★ Realistic Practice Exam Questions
Free Instant Download NEW 156-915.77 Exam Dumps (PDF & VCE):
Available on:
https://www.certleader.com/156-915.77-dumps.html
Your success in CheckPoint 156-915.77 is our sole target and we develop all our 156-915.77 braindumps in a way that facilitates the attainment of this target. Not only is our 156-915.77 study material the best you can find, it is also the most detailed and the most updated. 156-915.77 Practice Exams for CheckPoint 156-915.77 are written to the highest standards of technical accuracy.
Online CheckPoint 156-915.77 free dumps demo Below:
NEW QUESTION 1
Which CLI tool helps on verifying proper ClusterXL sync?
- A. fw stat
- B. fw ctl sync
- C. fw ctl pstat
- D. cphaprob stat
Answer: C
NEW QUESTION 2
Match the VPN-related terms with their definitions. Each correct term is only used once.
Exhibit:
- A. A-3, B-4, C-1, D-5
- B. A-4, B-3, C-5, D-2
- C. A-2, B-5, C-4, D-1
- D. A-3, B-2, C-1, D-4
Answer: B
NEW QUESTION 3
If your firewall is performing a lot of IPS inspection and the CPUs assigned to fw_worker_thread are at or near 100%, which of the following could you do to improve performance?
- A. Add more RAM to the system.
- B. Add more Disk Drives.
- C. Assign more CPU cores to CoreXL
- D. Assign more CPU cores to SecureXL.
Answer: C
NEW QUESTION 4
CORRECT TEXT
To stop acceleration on a GAiA Security Gateway, enter command:
Solution:
fwaccel off
Does this meet the goal?
- A. Yes
- B. Not Mastered
Answer: A
NEW QUESTION 5
CORRECT TEXT
Fill in the blank with a numeric value. The default port number for standard TCP connections with the LDAP server is
Solution:
389
Does this meet the goal?
- A. Yes
- B. Not Mastered
Answer: A
NEW QUESTION 6
The third-shift Administrator was updating Security Management Server access settings in Global Properties and testing. He managed to lock himself out of his account. How can you unlock this account?
- A. Type fwm unlock_admin from the Security Management Server command line.
- B. Type fwm unlock_admin -u from the Security Gateway command line.
- C. Type fwm lock_admin -u <account name> from the Security Management Server command line.
- D. Delete the file admin.lock in the Security Management Server directory $FWDIR/tmp/.
Answer: C
NEW QUESTION 7
Which command displays the installed Security Gateway version?
- A. fw printver
- B. fw ver
- C. fw stat
- D. cpstat -gw
Answer: B
NEW QUESTION 8
Which of the following is the preferred method for adding static routes in GAiA?
- A. In the CLI with the command “route add”
- B. In Web Portal, under Network Management > IPv4 Static Routes
- C. In the CLI via sysconfig
- D. In SmartDashboard under Gateway Properties > Topology
Answer: B
NEW QUESTION 9
How could you compare the Fingerprint shown to the Fingerprint on the server? Exhibit:
- A. Run cpconfig, select the Certificate's Fingerprint option and view the fingerprint
- B. Run cpconfig, select the GUI Clients option and view the fingerprint
- C. Run cpconfig, select the Certificate Authority option and view the fingerprint
- D. Run sysconfig, select the Server Fingerprint option and view the fingerprint
Answer: A
NEW QUESTION 10
You cannot use SmartDashboard’s User Directory features to connect to the LDAP server. What should you investigate?
1) Verify you have read-only permissions as administrator for the operating system.
2) Verify there are no restrictions blocking SmartDashboard's User Manager from connecting to the LDAP server.
3) Check that the login Distinguished Name configured has root permission (or at least write permission Administrative access) in the LDAP Server's access control configuration.
- A. 1, 2, and 3
- B. 2 and 3
- C. 1 and 2
- D. 1 and 3
Answer: B
NEW QUESTION 11
Install the Security Policy.
Solution:
Does this meet the goal?
- A. Yes
- B. Not Mastered
Answer: A
NEW QUESTION 12
All R77 Security Servers can perform authentication with the exception of one. Which of the Security Servers can NOT perform authentication?
- A. FTP
- B. SMTP
- C. HTTP
- D. RLOGIN
Answer: B
NEW QUESTION 13
Use the table to match the BEST Management High Availability synchronication-status descriptions for your Security Management Server (SMS).
Exhibit:
- A. A-5, B-3, C-1, D-2
- B. A-3, B-1, C-4, D-2
- C. A-3, B-5, C-2, D-4
- D. A-3, B-1, C-5, D-4
Answer: D
NEW QUESTION 14
CORRECT TEXT
Fill in the blanks. To view the number of concurrent connections going through your
firewall, you would use the command and syntax_______
Solution:
fw tab –t connections –s
Does this meet the goal?
- A. Yes
- B. Not Mastered
Answer: A
NEW QUESTION 15
If you need strong protection for the encryption of user data, what option would be the BEST choice?
- A. Use Diffie-Hellman for key construction and pre-shared keys for Quick Mod
- B. Choose SHA in Quick Mode and encrypt with AE
- C. Use AH protoco
- D. Switch to Aggressive Mode.
- E. When you need strong encryption, IPsec is not the best choic
- F. SSL VPN’s are a better choice.
- G. Use certificates for Phase 1, SHA for all hashes, AES for all encryption and PFS, and use ESP protocol.
- H. Disable Diffie-Hellman by using stronger certificate based key-derivatio
- I. Use AES-256 bit on all encrypted channels and add PFS to QuickMod
- J. Use double encryption by implementing AH and ESP as protocols.
Answer: C
NEW QUESTION 16
......
100% Valid and Newest Version 156-915.77 Questions & Answers shared by Dumps-files.com, Get Full Dumps HERE: https://www.dumps-files.com/files/156-915.77/ (New 203 Q&As)