File Info
| Exam | Check Point Certified Security Expert |
| Number | 156-315.77 |
| File Name | Checkpoint.156-315.77.Train4Sure.2018-12-21.445q.vcex |
| Size | 5 MB |
| Posted | Dec 21, 2018 |
| Download | Checkpoint.156-315.77.Train4Sure.2018-12-21.445q.vcex |
How to open VCEX & EXAM Files?
Files with VCEX & EXAM extensions can be opened by ProfExam Simulator.
Coupon: MASTEREXAM
With discount: 20%
Demo Questions
Question 1
A connection is said to be Sticky when:
- A copy of each packet in the connection sticks in the connection table until a corresponding reply packet is received from the other side.
- A connection is not terminated by either side by FIN or RST packet.
- All the connection packets are handled, in either direction, by a single cluster member.
- The connection information sticks in the connection table even after the connection has ended.
Correct answer: C
Question 2
How does a cluster member take over the VIP after a failover event?
- Gratuitous ARP
- Broadcast storm
- arp -s
- Ping the sync interface
Correct answer: A
Question 3
Check Point Clustering protocol, works on:
- UDP 18184
- TCP 8116
- UDP 8116
- TCP 18184
Correct answer: C
Question 4
A customer called to report one cluster member’s status as Down. What command should you use to identify the possible cause?
- tcpdump/snoop
- cphaprob list
- fw ctl pstat
- fw ctl debug -m cluster + forward
Correct answer: B
Question 5
A customer calls saying that a Load Sharing cluster shows drops with the error First packet is not SYN. Complete the following sentence. You will recommend:
- turning off SDF (Sticky Decision Function).
- switch to Multicast Mode.
- turning on SDF (Sticky Decision Function).
- configuring flush and ack.
Correct answer: C
Question 6
In ClusterXL, _____ is defined by default as a critical device.
- fwm
- assld
- cpp
- fwd
Correct answer: D
Question 7
When synchronizing clusters, which of the following statements is NOT true?
- Client Authentication or Session Authentication connections through a cluster member will be lost if the cluster member fails.
- In the case of a failover, accounting information on the failed member may be lost despite properly working synchronization.
- Only cluster members running on the same OS platform can be synchronized.
- The state of connections using resources is maintained by a Security Server, so these connections cannot be synchronized.
Correct answer: A
Question 8
When synchronizing clusters, which of the following statements is NOT true?
- In the case of a failover, accounting information on the failed member may be lost despite a properly working synchronization.
- An SMTP resource connection using CVP will be maintained by the cluster.
- User Authentication connections will be lost by the cluster.
- Only cluster members running on the same OS platform can be synchronized.
Correct answer: B
Question 9
When a failed cluster member recovers, which of the following actions is NOT taken by the recovering member?
- It will not check for any updated policy and load the last installed policy with a warning message indicating that the Security Policy needs to be installed from the Security Management Server.
- It will try to take the policy from one of the other cluster members.
- It compares its local policy to the one on the Security Management Server.
- If the Security Management Server has a newer policy, it will be retrieved, else the local policy will be loaded.
Correct answer: A
Question 10
Organizations are sometimes faced with the need to locate cluster members in different geographic locations that are distant from each other. A typical example is replicated data centers whose location is widely separated for disaster recovery purposes. What are the restrictions of this solution?
- There are two restrictions:1. The synchronization network must guarantee no more than 100ms latency and no more than 5% packet loss.2. The synchronization network may only include switches and hubs.
- There is one restriction: The synchronization network must guarantee no more than 150 ms latency (ITU Standard G.114).
- There is one restriction: The synchronization network must guarantee no more than 100 ms latency.
- There are no restrictions.
Correct answer: A
