156-915.77 CheckPoint Exam Questions and Free Practice Test

Question 7

- (Topic 11)
If your firewall is performing a lot of IPS inspection and the CPUs assigned to fw_worker_thread are at or near 100%, which of the following could you do to improve performance?

A. Add more RAM to the system.

B. Add more Disk Drives.

C. Assign more CPU cores to CoreXL

D. Assign more CPU cores to SecureXL.

Correct Answer:C

Question 8

- (Topic 13)
Which of the following is the preferred method for adding static routes in GAiA?

A. In the CLI with the command “route add”

B. In Web Portal, under Network Management > IPv4 Static Routes

C. In the CLI via sysconfig

D. In SmartDashboard under Gateway Properties > Topology

Correct Answer:B

Question 9

Update the topology in the cluster object.
Solution:

Does this meet the goal?

A. Yes

B. No

Correct Answer:A

Question 10

- (Topic 3)
Select the correct statement about Secure Internal Communications (SIC) Certificates. SIC Certificates:

A. Are used for securing internal network communications between the SmartDashboard and the Security Management Server.

B. For R75 Security Gateways are created during the Security Management Server installation.

C. Decrease network security by securing administrative communication among the Security Management Servers and the Security Gateway.

D. Uniquely identify Check Point enabled machines; they have the same function as VPN Certificates.

Correct Answer:D

Question 11

Install the Security Policy.
Solution:

Does this meet the goal?

A. Yes

B. No

Correct Answer:A

Question 12

- (Topic 16)
SmartReporter reports can be used to analyze data from a penetration-testing regimen in all of the following examples, EXCEPT:

A. Analyzing traffic patterns against public resources.

B. Possible worm/malware activity.

C. Analyzing access attempts via social-engineering.

D. Tracking attempted port scans.

Correct Answer:C

START 156-915.77 EXAM