Pass4Test에서는 CheckPoint Certification 156-915.77시험대비덤프를 발췌하여 제공해드립니다. CheckPoint Certification 156-915.77시험대비덤프에는 시험문제의 모든 예상문제와 시험유형이 포함되어있어 시험준비자료로서 가장 좋은 선택입니다. Pass4Test에서 제공해드리는 전면적인 CheckPoint Certification 156-915.77시험대비덤프로 CheckPoint Certification 156-915.77시험준비공부를 해보세요. 통과율이 100%입니다.
NO.1 Which of the following commands shows full synchronization status?
A. cphaprob -a if
B. fw ctl iflist
C. fw hastat
D. fw ctl pstat
Answer: D
NO.2 What is a "sticky" connection?
A. A Sticky Connection is one in which a reply packet returns through the same gateway as the
original packet.
B. A Sticky Connection is a VPN connection that remains up until you manually bring it down.
C. A Sticky Connection is a connection that remains the same.
D. A Sticky Connection is a connection that always chooses the same gateway to set up the initial
connection.
Answer: A
NO.3 Reinstall the Security Policy on all three Security Gateways.
A. 1, 2, 5
B. 1, 3, 4, 5
C. 1, 2, 3, 5
D. 1, 2, 4, 5
E. 1, 2, 3, 4
Answer: A
NO.4 Which is the BEST configuration option to protect internal users from malicious Java code,
without stripping Java scripts?
A. Use the URI resource to block Java code
B. Use CVP in the URI resource to block Java code
C. Use the URI resource to strip applet tags
D. Use the URI resource to strip ActiveX tags
Answer: A
NO.5 Which operating system is NOT supported by VPN-1 Secure Client?
A. IPSO 3.9
B. Windows XP SP2
C. Windows 2000 Professional
D. RedHat Linux 8.0
E. MacOSX
Answer: A
NO.6 Which network port does PPTP use for communication?
A. 1723/tcp
B. 1723/udp
C. 25/udp
D. 25/tco
Answer: A
NO.7 John Adams is an HR partner in the ACME organization. ACME IT wants to limit access to HR
servers to designated IP addresses to minimize malware infection and unauthorized access risks.
Thus, the gateway policy permits access only from John's desktop which is assigned a static IP address
10.0.0.19.
John received a laptop and wants to access the HR Web Server from anywhere in the organization.
The IT department gave the laptop a static IP address, but that limits him to operating it only from his
desk. The current Rule Base contains a rule that lets John Adams access the HR Web Server from his
laptop with a static IP (10.0.0.19). He wants to move around the organization and continue to have
access to the HR Web Server.
To make this scenario work, the IT administrator:
1) Enables Identity Awareness on a gateway, selects AD Query as one of the Identity Sources installs
the policy.
2) Adds an access role object to the Firewall Rule Base that lets John Adams PC access the HR Web
Server from any machine and from any location.
John plugged in his laptop to the network on a different network segment and he is not able to
connect. How does he solve this problem?
A. John should lock and unlock the computer
B. Investigate this as a network connectivity issue
C. John should install the Identity Awareness Agent
D. The firewall admin should install the Security Policy
Answer: D
NO.8 In Management High Availability, what is an Active SMS?
A. Active Security Master Server
B. Active Smart Management Server
C. Active Security Management Server
D. Active Smart Master Server
Answer: C