Online 156-915.77 Practice TestMore CheckPoint Products >

Free CheckPoint 156-915.77 Exam Dumps Questions

CheckPoint 156-915.77: Check Point Certified Security Expert Update Blade

- Get instant access to 156-915.77 practice exam questions

- Get ready to pass the Check Point Certified Security Expert Update Blade exam right now using our CheckPoint 156-915.77 exam package, which includes CheckPoint 156-915.77 practice test plus an CheckPoint 156-915.77 Exam Simulator.

- The best online 156-915.77 exam study material and preparation tool is here.

4.5

(1830 ratings)

Question 1

- (Topic 5)
The technical-support department has a requirement to access an intranet server. When configuring a User Authentication rule to achieve this, which of the following should you remember?

A. You can only use the rule for Telnet, FTP, SMTP, and rlogin services.

B. The Security Gateway first checks if there is any rule that does not require authentication for this type of connection before invoking the Authentication Security Server.

C. Once a user is first authenticated, the user will not be prompted for authentication again until logging out.

D. You can limit the authentication attempts in the User Properties’ Authentication tab.

Correct Answer:B

Question 2

- (Topic 7)
John Adams is an HR partner in the ACME organization. ACME IT wants to limit access to HR servers to designated IP addresses to minimize malware infection and unauthorized access risks. Thus, the gateway policy permits access only from John's desktop which is assigned a static IP address 10.0.0.19.
John received a laptop and wants to access the HR Web Server from anywhere in the organization. The IT department gave the laptop a static IP address, but that limits him to operating it only from his desk. The current Rule Base contains a rule that lets John Adams access the HR Web Server from his laptop with a static IP (10.0.0.19). He wants to move around the organization and continue to have access to the HR Web Server.
To make this scenario work, the IT administrator:
1) Enables Identity Awareness on a gateway, selects AD Query as one of the Identity Sources installs the policy.
2) Adds an access role object to the Firewall Rule Base that lets John Adams PC access the HR Web Server from any machine and from any location.
What should John do when he cannot access the web server from a different personal computer?

A. John should lock and unlock his computer

B. Investigate this as a network connectivity issue

C. The access should be changed to authenticate the user instead of the PC

D. John should install the Identity Awareness Agent

Correct Answer:C

Question 3

- (Topic 3)
Which command would provide the most comprehensive diagnostic information to Check Point Technical Support?

A. fw cpinfo

B. cpinfo -o date.cpinfo.txt

C. diag

D. cpstat - date.cpstat.txt

Correct Answer:B

Question 4

- (Topic 4)
A host on the Internet initiates traffic to the Static NAT IP of your Web server behind the Security Gateway. With the default settings in place for NAT, the initiating packet will translate the .

A. destination on server side

B. source on server side

C. source on client side

D. destination on client side

Correct Answer:D

Question 5

- (Topic 6)
How are cached usernames and passwords cleared from the memory of a R77 Security Gateway?

A. By using the Clear User Cache button in SmartDashboard.

B. Usernames and passwords only clear from memory after they time out.

C. By retrieving LDAP user information using the command fw fetchldap.

D. By installing a Security Policy.

Correct Answer:D

Question 6

CORRECT TEXT - (Topic 12)
In a zero downtime firewall cluster environment, what command syntax do you run to avoid switching problems around the cluster for command cphaconf?
Solution:
set_ccp broadcast

Does this meet the goal?

A. Yes

B. No

Correct Answer:A

START 156-915.77 EXAM