Want to know Actualtests 156-315.77 Exam practice test features? Want to lear more about Check Point Check Point Security Expert R77 certification experience? Study Refined Check Point 156-315.77 answers to Renovate 156-315.77 questions at Actualtests. Gat a success with an absolute guarantee to pass Check Point 156-315.77 (Check Point Security Expert R77) test on your first attempt.
2021 Aug 156-315.77 test question
Q361. - (Topic 1)
An Account Unit is the interface between the __________ and the __________.
A. Users, Domain
B. Gateway, Resources
C. System, Database
D. Clients, Server
Answer: D
Q362. - (Topic 2)
Which process is responsible for kernel table information sharing across all cluster members?
A. fwd daemon using an encrypted TCP connection
B. CPHA using an encrypted TCP connection
C. fw kernel using an encrypted TCP connection
D. cpd using an encrypted TCP connection
Answer: A
Q363. - (Topic 2)
You have a High Availability ClusterXL configuration. Machines are not synchronized. What happens to connections on failover?
A. Connections cannot be established until cluster members are fully synchronized.
B. It is not possible to configure High Availability that is not synchronized.
C. Old connections are lost but can be reestablished.
D. Old connections are lost but are automatically recovered whenever the failed machine recovers.
Answer: C
Q364. - (Topic 4)
You set up a mesh VPN Community, so your internal networks can access your partner's network, and vice versa. Your Security Policy encrypts only FTP and HTTP traffic through a VPN tunnel. All other traffic among your internal and partner networks is sent in clear text. How do you configure the VPN Community?
A. Disable "accept all encrypted traffic", and put FTP and HTTP in the Excluded services in the Community object. Add a rule in the Security Policy for services FTP and http, with the Community object in the VPN field.
B. Disable "accept all encrypted traffic" in the Community, and add FTP and HTTP services to the Security Policy, with that Community object in the VPN field.
C. Enable "accept all encrypted traffic", but put FTP and HTTP in the Excluded services in the Community. Add a rule in the Security Policy, with services FTP and http, and the Community object in the VPN field.
D. Put FTP and HTTP in the Excluded services in the Community object. Then add a rule in the Security Policy to allow Any as the service, with the Community object in the VPN field.
Answer: B
Q365. - (Topic 2)
What configuration change must you make to change an existing ClusterXL cluster object from Multicast to Unicast mode?
A. Reset Secure Internal Communications (SIC) on the cluster-member objects. Reinstall the Security Policy.
B. Run cpstop and cpstart, to re-enable High Availability on both objects. Select Pivot mode in cpconfig.
C. Change the cluster mode to Unicast on the cluster object. Reinstall the Security Policy.
D. Change the cluster mode to Unicast on each of the cluster-member objects.
Answer: C
Improve 156-315.77 download:
Q366. - (Topic 2)
In Load Sharing Unicast mode, the internal cluster IP address is 10.4.8.3. The internal interfaces on two members are 10.4.8.1 and 10.4.8.2. Internal host 10.4.8.108 Pings 10.4.8.3, and receives replies. The following is the ARP table from the internal Windows host 10.4.8.108.
Review the exhibit and identify the member serving as the pivot machine.
A. 10.4.8.3
B. 10.4.8.2
C. The pivot machine cannot be determined by this test.
D. 10.4.8.1
Answer: B
Q367. - (Topic 3)
Which of the following is TRUE concerning unnumbered VPN Tunnel Interfaces (VTIs)?
A. Local IP addresses are not configured, remote IP addresses are configured
B. VTI specific additional local and remote IP addresses are not configured
C. VTIs are only supported onSecure Platform
D. VTIs cannot be assigned a proxy interface
Answer: B
Topic 4, Volume D
Q368. - (Topic 5)
How should Check Point packages be uninstalled?
A. In the same order in which the installation wrapper initially installed from.
B. In the opposite order in which the installation wrapper initially installed them.
C. In any order, CPsuite must be the last package uninstalled
D. In any order as long as all packages are removed
Answer: B
Q369. - (Topic 7)
Which process should you debug if SmartDashboard login fails?
A. sdm
B. cpd
C. fwd
D. fwm
Answer: D
Q370. - (Topic 2)
A connection is said to be Sticky when:
A. The connection information sticks in the connection table even after the connection has ended.
B. A copy of each packet in the connection sticks in the connection table until a corresponding reply packet is received from the other side.
C. A connection is not terminated by either side by FIN or RST packet.
D. All the connection packets are handled, in either direction, by a single cluster member.
Answer: D