Online Access Free 156-115.77 Practice Test

In the process of troubleshooting traffic issues across a VPN tunnel, you notice on the output of fw monitor -e host(172.21.1.10), accept; that packets are going through the inbound chain (i > I) and then disappearing after the outbound chain (o > __), while you were expecting to see the packet leave on O.
What could be causing this issue?

• A.The gateway never completed the IKE and IPSec key exchange, and the tunnel does not exist yet.
• B.When packets are destined to leave through a VPN tunnel, it is encrypted and encapsulated in an ESP packet, and thus will not show up on a fw monitor.
• C.The packet is getting silently dropped because there is no route for the packet.
• D.It's not showing up on the fw monitor because it is exiting the wrong interface

A fwm debug provides the following output. What prevents the customer from logging into SmartDashboard?

• A.There are not any policy to login in SmartDashboard
• B.IP not defined in $FWDIR/conf/gui-clients
• C.User and password are incorrect
• D.FWM process is crashed and returned null to access

A Security Administrator wants to increase the amount of processing cores on a Check Point Security Gateway. He starts by increasing the number of cores, however the number of kernel instances remain the same way. What is the correct process to increase the number of kernel instances?

• A.Cpconfig- Enable Check Point CoreXL- Change the number of firewall instances-define how many firewall instances to enable-cprestart
• B.Cpconfig- Check Point CoreXL- Change the number of firewall instances-define how many firewall instances to enable-reboot
• C.Cpconfig- Check Point CoreXL- Change the number of firewall instances-define how many firewall instances to enable-cpstop,cpstart
• D.Cpconfig- Enable Check Point ClusterXL- Change the number of firewall instances-define how many firewall instances to enable-reboot

Henry is attempting to verify VPN connectivity between two hosts, x and y. Of the following commands, which could be BEST used to verify connectivity of this VPN?

• A.[Expert@HostName]# fw monitor -e "ip_p=X, accept;" -o /var/log/fw_mon.cap
• B.[Expert@HostName]# fw monitor -e "host(x.x.x.x) and host(y.y.y.y), accept;" -o /var/log/fw_mon.capw monitor -e "accept;" -o /var/log/fw_mon.cap
• C.[Expert@HostName]# fw monitor -e "(ip_p=X) or (ip_p=Y, port(Z)), accept;" -o /var/log/fw_mon.cap
• D.[Expert@HostName]# fw monitor -e "((src=x.x.x.x , dst=y.y.y.y) or (src=y.y.y.y, dst=x.x.x.x)), accept;" x-o /var/log/fw_mon.cap

Extended Cluster Anti-Spoofing checks what value to determine if a packet with the source IP of a gateway in the cluster is being spoofed?

• A.The packet has a TTL value of less than 255.
• B.The source MAC address of the packet.
• C.The destination IP of the packet.
• D.The source IP of the packet.