Act now and download your Check Point 156-315.77 test today! Do not waste time for the worthless Check Point 156-315.77 tutorials. Download Improve Check Point Check Point Security Expert R77 exam with real questions and answers and begin to learn Check Point 156-315.77 with a classic professional.
2021 Aug 156-315.77 exam
Q261. - (Topic 6)
You enable Sweep Scan Protection and Host port scan in IPS to determine if a large amount of traffic from a specific internal IP address is a network attack, or a user's system is infected with a worm. Will you get all the information you need from these actions?
A. Yes. IPS will limit the traffic impact from the scans, and identify if the pattern of the traffic matches any known worms.
B. No. These IPS protections will only block the traffic, but it will not provide a detailed analysis of the traffic.
C. No. To verify if this is a worm or an active attack, you must also enable TCP attack defenses.
D. No. The logs and alert can provide some level of information, but determining whether the attack is intentional or a worm, requires further research.
Answer: D
Q262. - (Topic 3)
When configuring a Permanent Tunnel between two gateways in a Meshed VPN
community, in what object is the tunnel managed?
A. VPN Community object
B. Each participating Security Gateway object
C. Security Management Server
D. Only the local Security Gateway object
Answer: A
Q263. - (Topic 2)
To configure the Cluster Control Protocol (CCP) to use Broadcast, the following command is run:
A. set_ccp cpcluster broadcast
B. ccp broadcast
C. clusterconfig set_ccp broadcast
D. cphaconf set_ccp broadcast
Answer: D
Q264. - (Topic 6)
In the following command,
LSMcli [-d] <server><user><pswd><action> "server"
should be replaced with:
A. Hostname of ROBO gateway
B. Hostname DAIP device
C. IP address of the Security Management server
D. GUIclient
Answer: C
Q265. - (Topic 2)
Check Point Clustering protocol, works on:
A. UDP 500
B. UDP 8116
C. TCP 8116
D. TCP 19864
Answer: B
Improved 156-315.77 practice exam:
Q266. - (Topic 6)
InSmart Workflow, what is NOT a valid possibility?
A. Task Flow without Session and without Role Segregation
B. Task Flow without Session but with Role Segregation
C. Task Flow with Session but without Role Segregation
D. Task Flow with Session and with Role Segregation
Answer: B
Q267. - (Topic 2)
In ClusterXL, _______ is defined by default as a critical device.
A. fwd
B. fwm
C. assld
D. cpp
Answer: A
Q268. - (Topic 5)
VPN-1 NGX supports VoIP traffic in all of the following environments, EXCEPT which environment?
A. H.323
B. SIP
C. MEGACO
D. SCCP
E. MGCP
Answer: C
Q269. - (Topic 4)
What is the advantage for deploying SSL VPN in a DMZ, versus a LAN?
A. SSL VPN adds another layer of access security to internal resources, when it resides in a DMZ.
B. SSL Network Extender is ineffective in a LAN deployment.
C. Traffic is in clear text when forwarded to internal servers, but the back connection is encrypted for remote users
D. Traffic is authenticated without hiding behind Connectra's IP address
Answer: A
Q270. - (Topic 6)
When usingSmart Workflow, how many sessions can be in progress at the same time?
A. 2
B. As many as you want
C. 1
D. 3
Answer: C