http://https://www.newpassleader.com/CheckPoint/156-315.77-exam-preparation-materials.html (755 Q&As Dumps, 30%OFF Special Discount: 30free )

NEW QUESTION NO: 6

Your VPN Community includes three Security Gateways. Each Gateway has its own internal network defined as a VPN Domain. You must test the VPN-1 NGX route-based VPN feature, without stopping the VPN. What is the correct order of steps?
A. 1. Add a new interface on each Gateway.
2. Add the newly added network into the existing VPN Domain for each Gateway.
3. Create VTIs on each gateway object, to point to the other two peers.
4. Enable advanced routing on all three Gateways.
B. 1. Add a new interface on each Gateway.
2. Remove the newly added network from the current VPN Domain in each gateway object.
3. Create VPN Tunnel Interfaces (VTI) on each gateway object, to point to the other two peers.
4. Add static routes on three Gateways, to route the new network to each peer's VTI interface.
C. 1. Add a new interface on each Gateway.
2. Remove the newly added network from the current VPN Domain for each Gateway.
3. Create VTIs on each Gateway, to point to the other two peers
4. Enable advanced routing on all three Gateways.
D. 1. Add a new interface on each Gateway.
2. Add the newly added network into the existing VPN Domain for each gateway object.
3. Create VTIs on each gateway object, to point to the other two peers.
4. Add static routes on three Gateways, to route the new networks to each peer's VTI interface.
Answer: B

NEW QUESTION NO: 7
A tracked SmartEvent Candidate in a Candidate Pool becomes an Event. What does NOT happen in the Analyzer Server?
A. SmartEvent stops tracking logs related to the Candidate.
B. SmartEvent provides the beginning and end time of the Event.
C. The Correlation Unit keeps adding matching logs to the Event.
D. The Event is kept open, but condenses many instances into one Event.
Answer: A

NEW QUESTION NO: 8
The process _____ is responsible for GUIClient communication with the SmartCenter.
A. CPD
B. FWM
C. CPGUI
D. FWD
Answer: B

NEW QUESTION NO: 9
Which of the following does NOT happen when using Pivot Mode in ClusterXL?
A. The Pivot's Load Sharing decision function decides which cluster member should handle the packet.
B. The Security Gateway analyzes the packet and forwards it to the Pivot.
C. The Pivot forwards the packet to the appropriate cluster member.
D. The packet is forwarded through the same physical interface from which it originally came, not on the sync interface.
Answer: B

NEW QUESTION NO: 10
Which of the following files is used to allow only specific IPs or networks to access the Management Portal?
A. allowedips.portal
B. cpportal_allowips
C. portal.ips
D. hosts. Allow
Answer: D

NEW QUESTION NO: 11
Refer to the to the network topology below.

You have IPS software Blades active on security Gateways sglondon, sgla, and sgny, but still experience attacks on the Web server in the New York DMZ. How is this possible?
A. Since other Gateways do not have IPS activated, attacks may originate from their networks without any noticing.
B. An IPS may combine different detection technologies, but is dependent on regular signature updates and well-tuned anomaly algorithms. Even if this is accomplished, no technology can offer 100% protection.
C. The attacker may have used a bunch of evasion techniques like using escape sequences instead of clear text commands. It is also possible that there are entry points not shown in the network layout, like rouge access points.
D. All of these options are possible.
Answer: D

NEW QUESTION NO: 12
Damon enables an SMTP resource for content protection.
He notices that mail seems to slow down on occasion, sometimes being delivered late.
Which of the following might improve throughput performance?
A. Increasing the Maximum number of mail messages in the Gateway's spool directory
B. Configuring the CVP resource to return the mail to the Gateway
C. Configuring the SMTP resource to only allow mail with Damon's company's domain name in the header
D. Configuring the SMTP resource to bypass the CVP resource
E. Configuring the Content Vector Protocol (CVP) resource to forward the mail to the internal SMTP server, without waiting for a response from the Security Gateway
Answer: E

NEW QUESTION NO: 13
Which of the following statements is TRUE concerning MEP VPN's?
A. MEP VPN's are restricted to the location of the gateways.
B. MEP Security Gateways can be managed by separate Management Servers.
C. The VPN Client is assigned a Security Gateway to connect to based on a priority list, should the first connection fail.
D. State synchronization between Security Gateways is required.
Answer: B

NEW QUESTION NO: 14
When defining SmartDirectory for High Availability (HA), which of the following should you do?
A. Configure a SmartDirectory Cluster object.
B. Configure the SmartDirectory as a single object using the LDAP cluster IP. Actual HA functionality is configured on the servers.
C. Configure Secure Internal Communications with each server and fetch branches from each.
D. Replicate the same information on multiple Active Directory servers.
Answer: D

NEW QUESTION NO: 15
_____ generates a SmartEvent Report from its SQL database.
A. SmartEvent Client
B. SmartDashboard Log Consolidator
C. Security Management Server
D. SmartReporter
Answer: D

NEW QUESTION NO: 16
Yoav is a Security Administrator preparing to implement a VPN solution for his multi-site organization.
To comply with industry regulations, Yoav's VPN solution must meet the following requirements:
Portability: Standard
Key management: Automatic, external PKI
Session keys: Changed at configured times during a connection's lifetime Key length: No less than 128-bit Data integrity: Secure against inversion and brute force attacks What is the most appropriate setting Yoav should choose?
A. IKE VPNs: SHA1 encryption for IKE Phase 1, and MD5 encryption for Phase 2; AES hash
B. IKE VPNs: DES encryption for IKE Phase 1, and 3DES encryption for Phase 2; MD5 hash
C. IKE VPNs: AES encryption for IKE Phase 1, and DES encryption for Phase 2; SHA1 hash
D. IKE VPNs: AES encryption for IKE Phase 1, and AES encryption for Phase 2; SHA1 hash
E. IKE VPNs: CAST encryption for IKE Phase 1, and SHA1 encryption for Phase 2; DES hash
Answer: D