156-915.77 CheckPoint Exam Questions and Free Practice Test

Question 55

- (Topic 4)
A Web server behind the Security Gateway is set to Automatic Static NAT. Client side NAT is not checked in the Global Properties. A client on the Internet initiates a session to the Web Server. Assuming there is a rule allowing this traffic, what other configuration must be done to allow the traffic to reach the Web server?

A. Automatic ARP must be unchecked in the Global Properties.

B. Nothing else must be configured.

C. A static route must be added on the Security Gateway to the internal host.

D. A static route for the NAT IP must be added to the Gateway’s upstream router.

Correct Answer:C

Question 56

- (Topic 4)
Your perimeter Security Gateway’s external IP is 200.200.200.3. Your network diagram shows:
156-915.77 dumps exhibit
Required: Allow only network 192.168.10.0 and 192.168.20.0 to go out to the Internet, using 200.200.200.5.
The local network 192.168.1.0/24 needs to use 200.200.200.3 to go out to the Internet. Assuming you enable all the settings in the NAT page of Global Properties, how could you achieve these requirements?

A. Create network objects for 192.168.10.0/24 and 192.168.20.0/24. Enable Hide NAT on both network objects, using 200.200.200.5 as hiding IP addres

B. Add an ARP entry for 200.200.200.3 for the MAC address of 200.200.200.5.

C. Create an Address Range object, starting from 192.168.10.1 to 192.168.20.254. Enable Hide NAT on the NAT page of the address range objec

D. Enter Hiding IP address 200.200.200.5. Add an ARP entry for 200.200.200.5 for the MAC address of 200.200.200.3.

E. Create a network object 192.168.0.0/16. Enable Hide NAT on the NAT pag

F. Enter 200.200.200.5 as the hiding IP addres

G. Add an ARP entry for 200.200.200.5 for the MAC address of 200.200.200.3.

H. Create two network objects: 192.168.10.0/24 and 192.168.20.0/24. Add the two network objects to a group objec

I. Create a manual NAT rule like the following: Original source - group object; Destination - any; Service - any; Translated source - 200.200.200.5; Destination - original; Service - original.

Correct Answer:B

Question 57

CORRECT TEXT - (Topic 15)
Fill in the blanks. To view the number of concurrent connections going through your
firewall, you would use the command and syntax_______
Solution:
fw tab –t connections –s

Does this meet the goal?

A. Yes

B. No

Correct Answer:A

START 156-915.77 EXAM