Pass4itsure > CheckPoint > CCSM > 156-115.77 > 156-115.77 Online Practice Questions and Answers

156-115.77 Online Practice Questions and Answers

Questions 4

What flag option(s) must be used to dump the complete table in friendly format, assuming there are more than one hundred connections in the table?

A. fw tab -t connections -f

B. fw tab -t connect -f -u

C. fw tab -t connections -s

D. fw tab -t connections -f u

Buy Now
Questions 5

What command would you use to view which debugs are set in your current working environment?

A. "env" and "fw ctl debug"

B. "cat /proc/etc"

C. "fw ctl debug all"

D. "export"

Buy Now
Questions 6

You are trying to troubleshoot a NAT issue on your network, and you use a kernel debug to verify a connection is correctly translated to its NAT address. What flags should you use for the kernel debug?

A. fw ctl debug -m fw + conn drop nat vm xlate xltrc

B. fw ctl debug -m fw + conn drop ld

C. fw ctl debug -m nat + conn drop nat xlate xltrc

D. fw ctl debug -m nat + conn drop fw xlate xltrc

Buy Now
Questions 7

Which file should be edited to modify ClusterXL VIP Hide NAT rules, and where?

A. $FWDIR/lib/base.def on the cluster members

B. $FWDIR/lib/table.def on the SMC

C. $FWDIR/lib/table.def on the cluster members

D. $FWDIR/lib/base.def on the SMC

Buy Now
Questions 8

What are the kernel parameters that control "Magic MACs"?

A. fwha_magic_mac and fw_forward_magic_mac

B. fwha_mac_magic and fw_mac_forward_magic

C. cpha_mac_magic and cp_mac_forward_magic

D. cpha_magic_mac and cpha_mac_forward_magic

Buy Now
Questions 9

You want to verify that the majority of your connections are being optimized by SecureXL. What command would you run to establish this information?

A. fw ctl pstat

B. fw tab -t connections -s

C. fwaccel conns -s

D. sim_dbg -s

Buy Now
Questions 10

How does the Check Point Security Administrator enable NAT Templates?

A. Run commands with syntax fw ctl set int cphwd_nat_templates_support 1 and fw ctl set int cphwd_nat_templates_enabled 1.

B. Edit file $FWDIR/boot/modules/fwkern.conf with the lines "cphwd_nat_templates_support=1" and "cphwd_nat_templates_enabled=1".

C. Set Firewall object > NAT > Advanced

D. Set Global properties > NAT-Network address translation

Buy Now
Questions 11

You have created a number of profiles and activated the relevant protections. Afterwards, you decide that the `Enterprise gateway' should allow instant messaging. The current profile enabled for Enterprise gateway blocks instant messaging. The profile for the Enterprise gateway is currently being used on the Voyager gateway and the Bird of Prey gateway. What is the best process for making this change on the Enterprise gateway only?

A. Create an exception for the Enterprise gateway

B. Create a rule allowing that traffic and install it on the Enterprise gateway

C. Create a new profile and apply to the Enterprise gateway

D. Edit the existing profile

Buy Now
Questions 12

You have to establish a VPN communication between 2 spokes, routed through the Hub gateway. Where do you configure VPN routing?

A. Security Gateway Object

B. WebUI

C. vpn_route.conf

D. VPN shell

Buy Now
Questions 13

What type(s) of VTI interfaces do Edge gateways support?

A. Both numbered and unnumbered

B. Unnumbered interfaces

C. Numbered interfaces

D. Neither numbered and unnumbered

Buy Now
Exam Code: 156-115.77
Exam Name: Check Point Certified Security Master
Last Update: Mar 25, 2024
Questions: 295
10%OFF Coupon Code: SAVE10

PDF (Q&A)

$45.99

VCE

$49.99

PDF + VCE

$59.99