156-215.77 Free Practice Test

The R77 fw monitor utility is used to troubleshoot which of the following problems?

1. A. Traffic issues
2. B. Log Consolidation Engine
3. C. User data base corruption
4. D. Phase two key negotiation

Correct Answer: A

Lily has completed the initial setup of her Management Server with an IP address of 192.168.12.12. She must now run the First Time Configuration Wizard via the Gaia Portal to finish the setup. Lily knows she must use a browser to access the device, but it unsure of the correct URL to enter; which one below will she need to use?

1. A. http://192.168.12.12
2. B. https://192.168.12.12:4433
3. C. https://192.168.12.12
4. D. http://192.168.12.12:8080

Correct Answer: C

Suppose the Security Gateway hard drive fails and you are forced to rebuild it. You have a snapshot file stored to a TFTP server and backups of your Security Management Server.
What is the correct procedure for rebuilding the Gateway quickly?

1. A. Reinstall the base operating system (i.e., GAiA). Configure the Gateway interface so that the Gateway can communicate with the TFTP serve
2. B. Revert to the stored snapshot image, and install the Security Policy.
3. C. Run the command revert to restore the snapshot, establish SIC, and install the Policy.
4. D. Run the command revert to restore the snapsho
5. E. Reinstall any necessary Check Point product
6. F. Establish SIC and install the Policy.
7. G. Reinstall the base operating system (i.e., GAia). Configure the Gateway interface so that the Gateway can communicate with the TFTP serve
8. H. Reinstall any necessary Check Point products and previously applied hotfixe
9. I. Revert to the stored snapshot image, and install the Policy.

Correct Answer: A

John Adams is an HR partner in the ACME organization. ACME IT wants to limit access to HR servers to designated IP addresses to minimize malware infection and unauthorized access risks. Thus, the gateway policy permits access only from John's desktop which is assigned an IP address 10.0.0.19 via DHCP.
John received a laptop and wants to access the HR Web Server from anywhere in the organization. The IT department gave the laptop a static IP address, but that limits him to operating it only from his desk. The current Rule Base contains a rule that lets John Adams access the HR Web Server from his laptop. He wants to move around the organization and continue to have access to the HR Web Server.
To make this scenario work, the IT administrator:
1) Enables Identity Awareness on a gateway, selects AD Query as one of the Identity Sources installs the policy.
2) Adds an access role object to the Firewall Rule Base that lets John Adams PC access the HR Web Server from any machine and from any location.
John plugged in his laptop to the network on a different network segment and he is not able to connect. How does he solve this problem?

1. A. John should install the Identity Awareness Agent
2. B. The firewall admin should install the Security Policy
3. C. John should lock and unlock the computer
4. D. Investigate this as a network connectivity issue

Correct Answer: B

You would use the Hide Rule feature to:

1. A. View only a few rules without the distraction of others.
2. B. Hide rules from read-only administrators.
3. C. Hide rules from a SYN/ACK attack.
4. D. Make rules invisible to incoming packets.

Correct Answer: A