Top Tips Of 156-115.77 preparation exams

It is impossible to pass Check Point 156-115.77 exam without any help in the short term. Come to Examcollection soon and find the most advanced, correct and guaranteed Check Point 156-115.77 practice questions. You will get a surprising result by our Refresh Check Point Certified Security Master practice guides.

Q31. - (Topic 11) 

What operating systems support unnumbered VTIs? 

A. GAIA and Secure Platform 

B. Solaris and IPSO 

C. GAIA and IPSO 

D. Secure Platform and IPSO 

Answer:


Q32. - (Topic 11) 

What considerations are required when configuring IPV6 with Wire mode? 

A. IPv6 in Wire mode is only supported in R77. 

B. IPV6 must be configured on both end points. 

C. IPV6 is not supported in Wire mode. 

D. You must use internal IPv6 addressing space to use Wire mode. 

Answer:


Q33. - (Topic 8) 

You are at a customer site, and when you run cphaprob stat you are not seeing a normal ClusterXL Health. What command could you run verify the number of cores are not matched on both cluster members? 

A. cpconfig 

B. cphaprob -a if 

C. fw ctl multik stat 

D. cphaprob stat 

Answer:

Topic 9, IPS 


Q34. - (Topic 3) 

Of the following answer choices, which best describes a possible effect of expanding the connections table? 

A. Increased memory consumption 

B. Decreased memory consumption 

C. Increased connection duration 

D. Decreased connection duration 

Answer:


Q35. - (Topic 3) 

Which of the following is NOT a cphaprob status? 

A. “Standby” 

B. “Active” 

C. “Backup” D. “Down Attention” (or “Down!” in VSX mode) 

Answer:


Q36. - (Topic 1) 

The command fw monitor -p all displays what type of information? 

A. It captures all points of the chain as the packet goes through the firewall kernel. 

B. This is not a valid command. 

C. The -p is used to resolve MAC address in the firewall capture. 

D. It does a firewall monitor capture on all interfaces. 

Answer:


Q37. - (Topic 3) 

What would be a reason for changing the “Magic MAC”? 

A. To allow for automatic upgrades. 

B. To allow two or more cluster members to exist on the same network. 

C. To allow two or more clusters to exist on the same network. 

D. To allow the two cluster members to use the same virtual IP address. 

Answer:


Q38. - (Topic 11) 

You are configuring dynamic routing on Secure Platform, as the administrator you run the command pro enable and reboot. You are confident that your configuration has been done correctly. When you check, you find the dynamic routing daemon has not started. What is the likely cause of this issue? 

A. Secure Platform does not support dynamic routing. 

B. You need to apply the license and push the policy. 

C. Dynamic routing needs to be enabled in cpconfig. 

D. You must push the policy after your reboot. 

Answer:


Q39. - (Topic 10) 

Which of the following is true about Node / Host objects? 

A. A Node / Host object can either have IPv4 or IPv6 IP address or have both. 

B. A Node / Host object can either have IPv4 or IPv6 IP address but not have both. Separate objects need to be created for hosts that use dual stack. 

C. A Node / Host object can only have IPv4 IP address. For IPv6, a Node / Host6 object must be used. 

D. Node / Host object does not support IPv6, hence a Network object must be created for IPv6. 

Answer:


Q40. - (Topic 6) 

PXL is considered to be what type of acceleration? 

A. Fast Path 

B. Slow Path 

C. Medium Path 

D. PXL is not related to acceleration 

Answer: