Online Access Free 156-215.77 Practice Test

You have a diskless appliance platform. How do you keep swap file wear to a minimum?

• A.A RAM drive reduces the swap file thrashing which causes fast wear on the device.
• B.Issue FW-1 bases its package structure on the Security Management Server, dynamically loading when the firewall is booted.
• C.Use PRAM flash devices, eliminating the longevity.
• D.The external PCMCIA-based flash extension has the swap file mapped to it, allowing easy replacement.

You are the Security Administrator for ABC-Corp. A Check Point Firewall is installed and in use on GAiA. You are concerned that the system might not be retaining your entries for the interfaces and routing configuration. You would like to verify your entries in the corresponding file(s) on GAiA. Where can you view them? Give the BEST answer.

• A./etc/sysconfig/network
• B./etc/conf/route.C
• C./etc/sysconfig/netconf.C
• D./etc/sysconfig/network-scripts/ifcfg-ethx

You enable Automatic Static NAT on an internal host node object with a private IP address of 10.10.10.5, which is NATed into 216.216.216.5. (You use the default settings in Global Properties / NAT.) When you run fw monitor on the R77 Security Gateway and then start a new HTTP connection from host 10.10.10.5 to browse the Internet, at what point in the monitor output will you observe the HTTP SYN-ACK packet translated from 216.216.216.5 back into
10.10.10.5?

• A.O=outbound kernel, after the virtual machine
• B.i=inbound kernel, before the virtual machine
• C.I=inbound kernel, after the virtual machine
• D.o=outbound kernel, before the virtual machine

Is it possible to see user activity in SmartView Tracker?

• A.No, a Check Point Gateway can only see IP addresses.
• B.Yes, but you have to enable the option: See user information in SmartView Tracker.
• C.Yes, but you need to use the SPLAT operating system.
• D.Yes, seeing user activity is enabled when using the Identity Awareness blade.

John Adams is an HR partner in the ACME organization. ACME IT wants to limit access to HR servers to designated IP addresses to minimize malware infection and unauthorized access risks. Thus, the gateway policy permits access only from John's desktop which is assigned a static IP address 10.0.0.19.
John received a laptop and wants to access the HR Web Server from anywhere in the organization. The IT department gave the laptop a static IP address, but that limits him to operating it only from his desk. The current Rule Base contains a rule that lets John Adams access the HR Web Server from his laptop with a static IP (10.0.0.19). He wants to move around the organization and continue to have access to the HR Web Server.
To make this scenario work, the IT administrator:
1) Enables Identity Awareness on a gateway, selects AD Query as one of the Identity Sources installs the policy.
2) Adds an access role object to the Firewall Rule Base that lets John Adams PC access the HR Web Server from any machine and from any location.
3) Changes from static IP address to DHCP for the client PC.
What should John do when he cannot access the web server from a different personal computer?

• A.The access should be changed to authenticate the user instead of the PC
• B.John should install the Identity Awareness Agent
• C.Investigate this as a network connectivity issue
• D.John should lock and unlock his computer