Want to know Ucertify 156-115.77 Exam practice test features? Want to lear more about Check Point Check Point Certified Security Master certification experience? Study Tested Check Point 156-115.77 answers to Up to the minute 156-115.77 questions at Ucertify. Gat a success with an absolute guarantee to pass Check Point 156-115.77 (Check Point Certified Security Master) test on your first attempt.
Q9. - (Topic 11)
You are configuring OSPF on your Secure Platform firewall. You are in expert mode and run the commands: interface vt-Gateway_C IP ospf 1 area 0.0.0.0 exit When you run show running-config you do not see your OSPF configuration listed Why?
A. You did not run command save running config before you exited.
B. You should not have moved to expert mode to make these configurations.
C. You did not run command save configuration before you exited.
D. You did not run command enable before you exited.
Answer: D
Q10. - (Topic 11)
Why would you choose to combine dynamic routing protocols and VPNs?
A. All options listed.
B. In the case of one tunnel failure, other tunnels may be used to route the traffic.
C. Dynamic-routing information can propagate over the VPN, utilizing the VPN as just another point-to-point link in the network.
D. The VPN device can be automatically updated with network changes on any VPN peer Gateway without the need to update the VPN Domain's configuration.
Answer: A
Q11. - (Topic 10)
Which of the following is true when IPv6 is enabled on a Security Gateway?
A. An interface on the Gateway can either have IPv4 or IPv6 IP address or have both.
B. As of version R77, IPv6 is only supported on Security Management Server.
C. IPv4 will be completely disabled when IPv6 has been enabled.
D. An interface on the Gateway can either have IPv4 or IPv6 IP address but cannot have both.
Answer: A
240. - (Topic 10)
What VSX components do not support IPv6 in R77 VSX mode?
A. VSX mode does not support IPv6
B. All devices support IPv6
C. Virtual Systems
D. Virtual Routers
Answer: D
Q12. - (Topic 11)
What operating systems support unnumbered VTIs?
A. GAIA and Secure Platform
B. Solaris and IPSO
C. GAIA and IPSO
D. Secure Platform and IPSO
Answer: C
Q13. - (Topic 5)
What command show the same information as fwaccel stats –l?
A. cat /proc/ppk/cpls
B. cat /proc/ppk/statistics
C. cphaprob –a hconf
D. fwaccell stats –s –u -k
Answer: B
Q14. - (Topic 2)
When viewing a NAT Table, What represents the second hexadecimal number of the 6-tuple:
A. Source port
B. Protocol
C. Source IP
D. Destination port
Answer: C
Q15. - (Topic 8)
The CoreXL software architecture includes the Secure Network Dispatcher (SND). One of the responsibilities of SND is to:
A. Distribute non-accelerated packets among kernel instances
B. Dispatch the packet securely through the VPN link
C. Processing outgoing traffic from the network interfaces
D. Dispatch the packet securely through the physical link
Answer: A
Q16. - (Topic 11)
Which routing protocols are not supported with GAIA OS running VTIs?
A. RIPv1; RIPv2
B. BGP
C. Static routes
D. OSPF
Answer: A