There are several Ucertify Check Point recognition 156-115.77 test problems along with check research materials, and the choice of add in a persons awareness easy. Ucertify 156-115.77 check engine data, problems, the actual check the answers along with materials to offer expose and sensible studies 156-115.77 Check Point test goals, providing a genuine check ecosystem, these products provide this experience for a true 156-115.77 check properties of the goods( 156-115.77 ) examiner.
2021 Nov 156-115.77 exam answers
Q91. - (Topic 2)
By default, the size of the fwx_alloc table is:
A. 65535
B. 65536
C. 25000
D. 1024
Answer: C
Q92. - (Topic 11)
What utility would you use to configure route-based VPNs?
A. vpn sw_topology
B. vpn shell
C. vpn set_slim_server
D. vpn tu
Answer: B
Q93. - (Topic 2)
Where in a fw monitor output would you see destination address translation occur in cases of inbound automatic static NAT?
A. Static NAT does not adjust the destination IP
B. Between the “i” and “I”
C. Between the “I” and “o”
D. Between the “o” and “O”
Answer: B
Q94. - (Topic 4)
After disabling SecureXL you ran command fw monitor to help troubleshoot a VPN issue. In your review you note that you only see pre-inbound traffic (“i”) and no other traffic after this. Which of the following reasons could explain this output?
A. You don’t have an “encrypt” rule
B. Traffic is not destined to the correct MAC address because you failed to set up proxy ARP
C. You have overlapping encryption domains with the remote site
D. Routes are set up incorrectly
Answer: C
Q95. - (Topic 3)
You run the commands:
fw ctl debug 0
fw ctl debug -buf 32000
Which of the following commands would be best to troubleshoot a clustering issue?
A. fw ctl zdebug -m cluster + all
B. fw ctl debug -m CLUSTER + conf stat
C. fw ctl debug -m cluster + pnote stat if
D. fw ctl kdebug -m CLUSTER all
Answer: C
Regenerate 156-115.77 free question:
Q96. - (Topic 10)
You enabled IPv6 in your environment and would like to erase all IPv6 connection tables. How can you do it?
A. fw tab –t connections –x
B. fw tab –t connections6 –x
C. clear connections table ipv6
D. fw6 tab –t connections –x
Answer: D
Q97. - (Topic 6)
what command other than fw ctl pstat, will display your peak concurrent connections?
A. fw ctl get int fw_peak_connections
B. netstat -ni
C. fw tab -t connections -s
D. top
Answer: C
Q98. - (Topic 11)
In the gateway object, under topology you select the “Get All Members Interfaces with Topology” option and your newly configured unnumbered VTIs are not populated. Why is this information missing?
A. VTI information on unnumbered interfaces should appear, so there is an issue with your configuration.
B. VTI information on unnumbered interfaces is not required information for the VPN to work.
C. VTI information on unnumbered interfaces needs to be entered manually.
D. In order to fetch VTI information on unnumbered interfaces you must add an explicit rule to the policy.
Answer: C
Q99. - (Topic 11)
What operating systems support unnumbered VTIs?
A. GAIA and Secure Platform
B. Solaris and IPSO
C. GAIA and IPSO
D. Secure Platform and IPSO
Answer: C
Q100. - (Topic 11)
When you have your directional VPN enforcement rule set to “Internal_Clear” , what does this represent?
A. All interfaces are designated “External”
B. VOIP traffic
C. Do not perform directional VPN enforcements on this traffic
D. All interfaces are designated as “Internal”
Answer: D