156-315.77 Online Practice Questions and Answers

What is the most common cause for a Quick mode packet 1 failing with the error "No Proposal Chosen" error?

A. The OS and patch level of one gateway does not match the other.

B. The previously established Permanent Tunnel has failed.

C. There is a network connectivity issue.

D. The encryption strength and hash settings of one peer does not match the other.

______________ is NOT anSmart Eventevent-triggered Automatic Reaction.

A. SNMP Trap

B. Mail

C. Block Access

D. External Script

There are times when you want to use Link Selection to manage high-traffic VPN connections. With Link Selection you can:

A. Use links based on Day/Time.

B. Set up links for Remote Access.

C. Assign links to specific VPN communities.

D. Assign links to use Dynamic DNS.

If Jack was concerned about the number of log entries he would receive in the SmartReporter system, which policy would he need to modify?

A. Consolidation Policy

B. Log Consolidator Policy

C. Log Sequence Policy

D. Report Policy

What is the bit size of DES?

A. 56

B. 112

C. 168

D. 128

E. 32

F. 64

Which of the following can NOT approve a change in aSmart Workflowsession?

A. FirewallAdministrators

B. FirewallManagers

C. Provider-1Super users

D. CustomerSuper users

The relay mail server configured under Email Notifications is used by the DLP Gateway to: (Choose the BEST answer.)

A. IfUser Checkis configured, there is no need to configure this relay server if there are no Ask User rules and there is no need to notify any Data Owners.

B. Send e-mail notifications to users and Data Owners.

C. Define My Organization / DLP Gateway and scan only e-mails that originate from this relay server.

D. Synchronize with other mail servers in the network.

Does Check Point recommend generating an upgrade_export on standby SmartCenters?

A. Yes. This is the only way to get the upgrade_export

B. No. All Check Point processes are stopped.

C. No. There is no way to verify the actual configuration.

D. Yes. All information is available at both SmartCenters.

To provide full connectivity upgrade status, use command

A. cphaprob fcustat

B.

C.

D.

Fill in the blank. To remove site-to-site IKE and IPSEC keys you would enter command ____ ___ and select the option to delete all IKE and IPSec SA's.

A. vpn tu

B.

C.

D.