156-915.77 Free Practice Test

- (Topic 3)
Select the correct statement about Secure Internal Communications (SIC) Certificates. SIC Certificates:

1. A. Are used for securing internal network communications between the SmartDashboard and the Security Management Server.
2. B. For R75 Security Gateways are created during the Security Management Server installation.
3. C. Decrease network security by securing administrative communication among the Security Management Servers and the Security Gateway.
4. D. Uniquely identify Check Point enabled machines; they have the same function as VPN Certificates.

Correct Answer: D

- (Topic 5)
Your customer, Mr. Smith needs access to other networks and should be able to use all services. Session authentication is not suitable. You select Client Authentication with HTTP. The standard authentication port for client HTTP authentication (Port 900) is already in use. You want to use Port 9001 but are having connectivity problems. Why are you having problems?

1. A. The configuration file $FWDIR/conf/fwauthd.conf is incorrect.
2. B. The Security Policy is not correct.
3. C. You can't use any port other than the standard port 900 for Client Authentication via HTTP.
4. D. The service FW_clntauth_http configuration is incorrect.

Correct Answer: A

- (Topic 15)
When configuring numbered VPN Tunnel Interfaces (VTIs) in a clustered environment, what issues need to be considered?
1) Each member must have a unique source IP address.
2) Every interface on each member requires a unique IP address.
3) All VTI's going to the same remote peer must have the same name.
4) Cluster IP addresses are required.

1. A. 1, 2, and 4
2. B. 2 and 3
3. C. 1, 2, 3 and 4
4. D. 1, 3, and 4

Correct Answer: C

- (Topic 14)
Which three of the following are ClusterXL member requirements?
1) same operating systems
2) same Check Point version
3) same appliance model
4) same policy

1. A. 1, 3, and 4
2. B. 1, 2, and 4
3. C. 2, 3, and 4
4. D. 1, 2, and 3

Correct Answer: B

- (Topic 1)
Which of the following statements accurately describes the command upgrade_export?

1. A. upgrade_export stores network-configuration data, objects, global properties, and the database revisions prior to upgrading the Security Management Server.
2. B. Used primarily when upgrading the Security Management Server, upgrade_export stores all object databases and the /conf directories for importing to a newer Security Gateway version.
3. C. upgrade_export is used when upgrading the Security Gateway, and allows certain files to be included or excluded before exporting.
4. D. This command is no longer supported in GAiA.

Correct Answer: B