Pass4Test에서는 소프트웨어버전과 PDF버전 두가지버전으로 CheckPoint Certification 156-915.77 덤프를 제공해드립니다.PDF버전은 구매사이트에서 무료샘플을 다움받아 체험가능합니다. 소프트웨어버전은 실력테스트용으로 PDF버전공부후 보조용으로 사용가능합니다. CheckPoint Certification 156-915.77덤프 무료샘플을 다운받아 체험해보세요.

NO.1 John Adams is an HR partner in the ACME organization. ACME IT wants to limit access to HR
servers to designated IP addresses to minimize malware infection and unauthorized access risks.
Thus, the gateway policy permits access only from John's desktop which is assigned a static IP address
10.0.0.19.
John received a laptop and wants to access the HR Web Server from anywhere in the organization.
The IT department gave the laptop a static IP address, but that limits him to operating it only from his
desk. The current Rule Base contains a rule that lets John Adams access the HR Web Server from his
laptop with a static IP (10.0.0.19). He wants to move around the organization and continue to have
access to the HR Web Server.
To make this scenario work, the IT administrator:
1) Enables Identity Awareness on a gateway, selects AD Query as one of the Identity Sources installs
the policy.
2) Adds an access role object to the Firewall Rule Base that lets John Adams PC access the HR Web
Server from any machine and from any location.
John plugged in his laptop to the network on a different network segment and he is not able to
connect. How does he solve this problem?
A. John should lock and unlock the computer
B. Investigate this as a network connectivity issue
C. John should install the Identity Awareness Agent
D. The firewall admin should install the Security Policy
Answer: D

NO.2 What is a "sticky" connection?
A. A Sticky Connection is one in which a reply packet returns through the same gateway as the
original packet.
B. A Sticky Connection is a VPN connection that remains up until you manually bring it down.
C. A Sticky Connection is a connection that remains the same.
D. A Sticky Connection is a connection that always chooses the same gateway to set up the initial
connection.
Answer: A

NO.3 Barak is a Security Administrator for an organization that has two sites using per shared secrets
in its VPN. The two sites are Oslo and London. Barak has just been informed that a new office is
opening in Madrid, and he must enable all three sites to connect via the VPN to each other. Three
Security Gateways are managed by the same Smart Center Server, behind the Oslo Security Gateway.
Barak decides to switch from per shared secrets to Certificates issued by the Internal Certificate
Authority (ICA). After creating the Madrid gateway object with the proper VPN Domain, what are
Barak's remaining steps?
1.Disable "PrE. Shared Secret" on the London and Oslo gateway objects
2.Add the Madrid gateway object into the Oslo and London's mesh VPN Community
3.Manually generate ICA Certificates for all three Security Gateways.
4.Configure "Traditional mode VPN configuration" in the Madrid gateway object's VPN screen

NO.4 Which network port does PPTP use for communication?
A. 1723/tcp
B. 1723/udp
C. 25/udp
D. 25/tco
Answer: A

NO.5 CORRECT TEXT
Fill in the blanks. To view the number of concurrent connections going through core 0 on the firewall,
you would use the command and syntax __ __ _ ___ __ ___________ __ .
Answer: fw -i 0 tab -t connections -s

NO.6 The Management Portal allows all of the following EXCEPT:
A. Manage firewall logs
B. Schedule policy installation
C. View administrator activity
D. View the status of Check Point products
Answer: B

NO.7 Which is the BEST configuration option to protect internal users from malicious Java code,
without stripping Java scripts?
A. Use the URI resource to block Java code
B. Use CVP in the URI resource to block Java code
C. Use the URI resource to strip applet tags
D. Use the URI resource to strip ActiveX tags
Answer: A

NO.8 In Management High Availability, what is an Active SMS?
A. Active Security Master Server
B. Active Smart Management Server
C. Active Security Management Server
D. Active Smart Master Server
Answer: C