We provide real 156-315.77 exam questions and answers braindumps in two formats. Download PDF & Practice Tests. Pass Check Point 156-315.77 Exam quickly & easily. The 156-315.77 PDF type is available for reading and printing. You can print more and practice many times. With the help of our Check Point 156-315.77 dumps pdf and vce product and material, you can easily pass the 156-315.77 exam.
Q393. - (Topic 2)
The process that performs the authentication for SSL VPN Users is:
A. cvpnd
B. cpd
C. fwm
D. vpnd
Answer: A
Q394. - (Topic 6)
Can end users be forced to authenticate by using client certificates and username/password credentials?
A. Yes, but by manually changing the parameter :IsPasswordWarning to true in the $FWDIR/conf/objects_5_0.C file, to allow for LDAP password remediation; and through the use of multiple-challenge login pages.
B. No, R71 only supports authentication by client certificates.
C. Yes, by editing the protection-level settings.
D. SSL VPN only supports server certificates.
Answer: C
Q395. - (Topic 4)
You are preparing to deploy a VPN-1 Pro Gateway for VPN-1 NGX. You have five systems to choose from for the new Gateway, and you must conform to the following requirements:
Operating-system vendor's license agreement
Check Point's license agreement
Minimum operating-system hardware specification
Minimum Gateway hardware specification
Gateway installed on a supported operating system (OS)
Which machine meets ALL of the following requirements?
A. Processor: 1.1 GHz RAM: 512MB Hard disk: 10 GB OS: Windows 2000 Workstation
B. Processor: 2.0 GHz RAM: 512MB Hard disk: 10 GB OS: Windows ME
C. Processor: 1.5 GHz RAM: 256 MB Hard disk: 20 GB OS: Red Hat Linux 8.0
D. Processor: 1.67 GHz RAM: 128 MB Hard disk: 5 GB OS: FreeBSD
E. Processor: 2.2 GHz RAM: 256 MB Hard disk: 20 GB OS: Windows 2000 Server
Answer: E
Q396. - (Topic 6)
Network applications accessed using SSL Network Extender have been found to fail after one of their TCP connections has been left idle for more than one hour. You determine that you must enable sending reset (RST) packets upon TCP time-out expiration. Where is it necessary to change the setting?
A. $FWDIR/conf/objects_5_0.C
B. $FWDIR/conf/objects.C
C. $WEBISDIR/conf/cpadmin.elg
D. $CVPNDIR/conf/cvpnd.C
Answer: A
Q397. - (Topic 2)
In Load Sharing Unicast mode, the internal cluster IP address is 10.4.8.3. The internal interfaces on two members are 10.4.8.1 and 10.4.8.2. Internal host 10.4.8.108 Pings 10.4.8.3, and receives replies. The following is the ARP table from the internal Windows host 10.4.8.108.
Review the exhibit and identify the member serving as the pivot machine.
A. 10.4.8.3
B. 10.4.8.2
C. The pivot machine cannot be determined by this test.
D. 10.4.8.1
Answer: B
Q398. - (Topic 3)
______________ is NOT anSmart Eventevent-triggered Automatic Reaction.
A. SNMP Trap
B. Mail
C. Block Access
D. External Script
Answer: C
Q399. - (Topic 7)
What is a task of the SmartEvent Client?
A. Add events to the events database.
B. Display the received events.
C. Assign a severity level to an event.
D. Analyze each IPS log entry as it enters the Log server.
Answer: B
Q400. CORRECT TEXT - (Topic 7)
Type the command and syntax to view critical devices on a cluster member in a ClusterXL environment.
Answer: cphaprob -ia list