156-915.77 | Up To Date Check Point Certified Security Expert Update Blade 156-915.77 Preparation Exams

we provide Realistic CheckPoint 156-915.77 brain dumps which are the best for clearing 156-915.77 test, and to get certified by CheckPoint Check Point Certified Security Expert Update Blade. The 156-915.77 Questions & Answers covers all the knowledge points of the real 156-915.77 exam. Crack your CheckPoint 156-915.77 Exam with latest dumps, guaranteed!

Online CheckPoint 156-915.77 free dumps demo Below:

NEW QUESTION 1

Your R77 primary Security Management Server is installed on GAiA. You plan to schedule the Security Management Server to run fw logswitch automatically every 48 hours. How do you create this schedule?

  • A. On a GAiA Security Management Server, this can only be accomplished by configuring the command fw logswitch via the cron utility.
  • B. Create a time object, and add 48 hours as the interva
  • C. Open the primary Security Management Server object’s Logs and Masters window, enable Schedule log switch, and select the Time object.
  • D. Create a time object, and add 48 hours as the interva
  • E. Open the Security Gateway object's Logs and Masters window, enable Schedule log switch, and select the Time object.
  • F. Create a time object, and add 48 hours as the interva
  • G. Select that time object’s Global Properties > Logs and Masters window, to schedule a logswitch.

Answer: B

NEW QUESTION 2

Which of the following authentication methods can be configured in the Identity Awareness setup wizard?

  • A. Check Point Password
  • B. TACACS
  • C. LDAP
  • D. Windows password

Answer: C

NEW QUESTION 3

After filtering a fw monitor trace by port and IP, a packet is displayed three times; in the i, I, and o inspection points, but not in the O inspection point. Which is the likely source of the issue?

  • A. The packet has been sent out through a VPN tunnel unencrypted.
  • B. An IPSO ACL has blocked the packet’s outbound passage.
  • C. A SmartDefense module has blocked the packet.
  • D. It is due to NAT.

Answer: D

NEW QUESTION 4
CORRECT TEXT
To stop acceleration on a GAiA Security Gateway, enter command:


Solution:
fwaccel off

Does this meet the goal?
  • A. Yes
  • B. Not Mastered

Answer: A

NEW QUESTION 5
Update the topology in the cluster object.


Solution:


Does this meet the goal?
  • A. Yes
  • B. Not Mastered

Answer: A

NEW QUESTION 6
Re-enable "Cluster membership" on the Gateway.


Solution:


Does this meet the goal?
  • A. Yes
  • B. Not Mastered

Answer: A

NEW QUESTION 7
CORRECT TEXT
The command useful for debugging by capturing packet information, including verifying LDAP authentication on all Check Point platforms is


Solution:
fw monitor

Does this meet the goal?
  • A. Yes
  • B. Not Mastered

Answer: A

NEW QUESTION 8

Where do you verify that UserDirectory is enabled?

  • A. Verify that Security Gateway > General Properties > Authentication > Use UserDirectory (LDAP) for Security Gateways is checked
  • B. Verify that Global Properties > Authentication > Use UserDirectory (LDAP) for Security Gateways is checked
  • C. Verify that Security Gateway > General Properties > UserDirectory (LDAP) > Use UserDirectory (LDAP) for Security Gateways is checked
  • D. Verify that Global Properties > UserDirectory (LDAP) > Use UserDirectory (LDAP) for Security Gateways is checked

Answer: D

NEW QUESTION 9

Your primary Security Gateway runs on GAiA. What is the easiest way to back up your
Security Gateway R77 configuration, including routing and network configuration files?

  • A. Copying the directories $FWDIR/conf and $FWDIR/lib to another location.
  • B. Using the native GAiA backup utility from command line or in the Web based user interface.
  • C. Using the command upgrade_export.
  • D. Run the pre_upgrade_verifier and save the .tgz file to the directory /temp.

Answer: B

NEW QUESTION 10

To qualify as an Identity Awareness enabled rule, which column MAY include an Access Role?

  • A. Source
  • B. Track
  • C. User
  • D. Action

Answer: A

NEW QUESTION 11

A ClusterXL configuration is limited to members.

  • A. There is no limit.
  • B. 16
  • C. 6
  • D. 2

Answer: C

NEW QUESTION 12

You are the Security Administrator for MegaCorp. A Check Point firewall is installed and in use on a platform using GAiA. You have trouble configuring the speed and duplex settings of your Ethernet interfaces. Which of the following commands can be used in CLISH to configure the speed and duplex settings of an Ethernet interface and will survive a reboot? Give the BEST answer.

  • A. ethtool
  • B. set interface <options>
  • C. mii_tool
  • D. ifconfig -a

Answer: B

NEW QUESTION 13
CORRECT TEXT
Fill in the blanks. To view the number of concurrent connections going through core 0 on the firewall, you would use the command and syntax _____.


Solution:
fw –i 0 tab –t connections –s

Does this meet the goal?
  • A. Yes
  • B. Not Mastered

Answer: A

NEW QUESTION 14

If your firewall is performing a lot of IPS inspection and the CPUs assigned to fw_worker_thread are at or near 100%, which of the following could you do to improve performance?

  • A. Add more RAM to the system.
  • B. Add more Disk Drives.
  • C. Assign more CPU cores to CoreXL
  • D. Assign more CPU cores to SecureXL.

Answer: C

NEW QUESTION 15

How do you recover communications between your Security Management Server and Security Gateway if you lock yourself out through a rule or policy mis-configuration?

  • A. fw unload policy
  • B. fw unloadlocal
  • C. fw delete all.all@localhost
  • D. fwm unloadlocal

Answer: B

NEW QUESTION 16

Which of the following is NOT defined by an Access Role object?

  • A. Source Network
  • B. Source Machine
  • C. Source User
  • D. Source Server

Answer: D

NEW QUESTION 17
......

Thanks for reading the newest 156-915.77 exam dumps! We recommend you to try the PREMIUM Dumpscollection.com 156-915.77 dumps in VCE and PDF here: https://www.dumpscollection.net/dumps/156-915.77/ (203 Q&As Dumps)