What Does 156-115.77 training Mean?
Your success in Check Point 156-115.77 is our sole target and we develop all our 156-115.77 braindumps in a way that facilitates the attainment of this target. Not only is our 156-115.77 study material the best you can find, it is also the most detailed and the most updated. 156-115.77 Practice Exams for Check Point 156-115.77 are written to the highest standards of technical accuracy.
Q61. - (Topic 11)
Which Dynamic Routing Protocols are supported in GAiA in a Route-based VPN configuration?
Q62. - (Topic 3)
What are the kernel parameters that control “Magic MACs”?
A. fwha_magic_mac and fw_forward_magic_mac
B. fwha_mac_magic and fw_mac_forward_magic
C. cpha_mac_magic and cp_mac_forward_magic
D. cpha_magic_mac and cpha_mac_forward_magic
Q63. - (Topic 5)
In the policy below, which rule disables SecureXL?
Q64. - (Topic 7)
How would you determine the value of 'Maximum concurrent connections' of the NAT Table?
Q65. - (Topic 5)
What command would you use to determine if a particular connection is being accelerated by SecureXL?
A. fw tab –t connections –u
B. fw ctl kdebug
C. fwaccel stat
D. fwaccel conns
Q66. - (Topic 2)
In a production environment, your gateway is configured to apply a Hide NAT for all internal traffic destined to the Internet. However, you are setting up a VPN tunnel with a remote gateway, and you are concerned about the encryption domain that you need to define on the remote gateway. Does the remote gateway need to include your production gateway’s external IP in its encryption domain?
A. No – all packets destined through a VPN will leave with original source and destination packets without translation.
B. No – all packets destined to go through the VPN tunnel will have the payload encapsulated in an ESP packet and after decryption at the remote site, will have the same internal source and destination IP addresses.
C. Yes – all packets destined to go through the VPN tunnel will have the payload encapsulated in an ESP packet and after decryption at the remote site, the packet will contain the source IP of the Gateway because of Hide NAT.
D. Yes – The gateway will apply the Hide NAT for this VPN traffic.
Q67. - (Topic 1)
You are running a debugging session and you have set the debug environment to TDERROR_ALL_ALL=5 using the command export TDERROR_ALL_ALL=5. How do you return the debug value to defaults?
A. fw ctl debug 0x1ffffe0
B. fw debug 0x1ffffe0
C. export TDERROR_ALL_ALL
D. unset TDERROR_ALL_ALL
Q68. - (Topic 6)
Your company has grown significantly over the past few months. You are seeing that new connections are being dropped but note that the connections table is not full. You suspect that the kernel memory allocated to the firewall has reached its full capacity. To check the “Machine Capacity Summary” statistics, you use command:
A. ps -aux
C. cat /proc/net/capacity
D. fw ctl pstat
C6O4 - Hardware Optimization
Q69. - (Topic 3)
Which command should you run to debug the VPN-1 kernel module?
A. fw debug vpn on
B. vpn debug on TDERROR_ALL_ALL=5
C. fw ctl zdebug crypt kbuf
D. fw ctl debug -m VPN all
Q70. - (Topic 11)
What is the prefix name for the interface when creating an unnumbered VTI in GAIA?