Want to know Pass4sure 156-115.77 Exam practice test features? Want to lear more about Check Point Check Point Certified Security Master certification experience? Study Breathing Check Point 156-115.77 answers to Abreast of the times 156-115.77 questions at Pass4sure. Gat a success with an absolute guarantee to pass Check Point 156-115.77 (Check Point Certified Security Master) test on your first attempt.
2021 Nov 156-115.77 study guide
Q11. - (Topic 9)
What steps can be taken if IPS is causing a High Performance Impact?
A. Consider activating the "Bypass under Load" IPS setting on the gateway
B. Check your IPS configuration assigned to this gateway and deactivate protections with critical or high performance impact
C. Determine if different or custom IPS profiles are better suited for different gateways in your organization
D. All options listed
Answer: D
Topic 10, IPV6
Q12. - (Topic 7)
What is one way to check cluster status on two gateways running in HA mode?
A. show cluster
B. cphaprob stat
C. cp ha prob stat
D. show cluster ha status
Answer: B
Q13. - (Topic 7)
What is the best way to see how a firewall is performing while processing packets in the firewall path, including resource usage?
A. fw getperf
B. SecureXL stat
C. fwaccel stats
D. fw ctl pstat
Answer: D
Q14. - (Topic 9)
When using Geo Protections, you find there are logs for a country that you believe is incorrect. What file do you review to verify what country Geo Protections should identify the traffic as?
A. asm.C
B. objects.C
C. objects_5_0.C
D. IpToCountry.csv
Answer: D
Q15. - (Topic 8)
The CoreXL software architecture includes the Secure Network Dispatcher (SND). One of the responsibilities of SND is to:
A. Distribute non-accelerated packets among kernel instances
B. Dispatch the packet securely through the VPN link
C. Processing outgoing traffic from the network interfaces
D. Dispatch the packet securely through the physical link
Answer: A
Renew 156-115.77 test question:
Q16. - (Topic 9)
OF the following, which is NOT a kernel parameter relating to the IPS “Bypass Under Load” settings:
A. ids_timeout
B. ids_tolerance_no_stress
C. ids_assume_stress
D. ids_limit_stress
Answer: D
Q17. - (Topic 4)
The file ike.elg is a log file used to log IKE negotiations during VPN tunnel establishment. Where is this file located?
A. /opt/CPshrd-R77/log
B. /opt/CPsuite-R77/fw1/log
C. /var/log/opt/CPsuite-R77/fg1/log
D. /opt/CPsuite-R77/fg1/log
Answer: B
Q18. - (Topic 11)
Which routing protocols are not supported with GAIA OS running VTIs?
A. RIPv1; RIPv2
B. BGP
C. Static routes
D. OSPF
Answer: A
Q19. - (Topic 5)
When are rules that include identity awareness access roles accelerated through SecureXL?
A. Rules using Identity Awareness are always accelerated.
B. Only when ‘Unauthenticated Guests’ is included in the access role.
C. They have no bearing on whether the connection for the rule is accelerated.
D. Rules using Identity Awareness are never accelerated.
Answer: C
Q20. - (Topic 3)
Which of the following is NOT a cphaprob status?
A. “Standby”
B. “Active”
C. “Backup” D. “Down Attention” (or “Down!” in VSX mode)
Answer: D