156-915.77 CheckPoint Exam Questions and Free Practice Test

Question 49

- (Topic 1)
You are running a R77 Security Gateway on GAiA. In case of a hardware failure, you have a server with the exact same hardware and firewall version installed. What back up method could be used to quickly put the secondary firewall into production?

A. manual backup

B. upgrade_export

C. backup

D. snapshot

Correct Answer:D

Question 50

- (Topic 2)
The third-shift Administrator was updating Security Management Server access settings in Global Properties and testing. He managed to lock himself out of his account. How can you unlock this account?

A. Type fwm unlock_admin from the Security Management Server command line.

B. Type fwm unlock_admin -u from the Security Gateway command line.

C. Type fwm lock_admin -u from the Security Management Server command line.

D. Delete the file admin.lock in the Security Management Server directory $FWDIR/tmp/.

Correct Answer:C

Question 51

- (Topic 6)
You find that Users are not prompted for authentication when they access their Web servers, even though you have created an HTTP rule via User Authentication. Choose the BEST reason why.

A. You checked the cache password on desktop option in Global Properties.

B. Another rule that accepts HTTP without authentication exists in the Rule Base.

C. You have forgotten to place the User Authentication Rule before the Stealth Rule.

D. Users must use the SecuRemote Client, to use the User Authentication Rule.

Correct Answer:B

Question 52

10.10.x is configured for Hide NAT behind the Security Gateway’s external interface.
156-915.77 dumps exhibit
What is the best configuration for 10.10.10.x users to access the DMZ servers, using the DMZ servers’ public IP addresses?

A. When connecting to internal network 10.10.10.x, configure Hide NAT for the DMZ network behind the Security Gateway DMZ interface.

B. When the source is the internal network 10.10.10.x, configure manual static NAT rules to translate the DMZ servers.

C. When connecting to the Internet, configure manual Static NAT rules to translate the DMZ servers.

D. When trying to access DMZ servers, configure Hide NAT for 10.10.10.x behind the DMZ’s interface.

Correct Answer:B

Question 53

CORRECT TEXT - (Topic 12)
In a zero downtime scenario, which command do you run manually after all cluster members are upgraded?
Solution:
cphaconf set_ccp multicast

Does this meet the goal?

A. Yes

B. No

Correct Answer:A

Question 54

- (Topic 3)
How can you check whether IP forwarding is enabled on an IP Security Appliance?

A. clish -c show routing active enable

B. cat /proc/sys/net/ipv4/ip_forward

C. echo 1 > /proc/sys/net/ipv4/ip_forward

D. ipsofwd list

Correct Answer:D

START 156-915.77 EXAM