156-215.77 Free Practice Test

During which step in the installation process is it necessary to note the fingerprint for first-
time verification?

1. A. When configuring the Gateway in the WebUI
2. B. When configuring the Security Management Server using cpconfig
3. C. When establishing SIC between the Security Management Server and the Gateway
4. D. When configuring the Security Gateway object in SmartDashboard

Correct Answer: B

Which of the following statements accurately describes the command snapshot?

1. A. snapshot creates a full OS-level backup, including network-interface data, Check Point product information, and configuration settings during an upgrade of a GAiA Security Gateway.
2. B. snapshot creates a Security Management Server full system-level backup on any OS.
3. C. snapshot stores only the system-configuration settings on the Gateway.
4. D. A Gateway snapshot includes configuration settings and Check Point product information from the remote Security Management Server.

Correct Answer: A

When configuring anti-spoofing on the Security Gateway object interfaces, which of the following is NOT a valid R77 topology configuration?

1. A. External
2. B. Any
3. C. Specific
4. D. Not Defined

Correct Answer: B

Before upgrading SecurePlatform to GAiA, you should create a backup. To save time, many administrators use the command backup. This creates a backup of the Check Point configuration as well as the system configuration.
An administrator has installed the latest HFA on the system for fixing traffic problem after creating a backup file. There is a mistake in the very complex static routing configuration. The Check Point configuration has not been changed.
Can the administrator use a restore to fix the errors in static routing?

1. A. The restore is not possible because the backup file does not have the same buildnumber (version).
2. B. The restore is done by selecting Snapshot Management from the boot menu of GAiA.
3. C. The restore can be done easily by the command restore and copying netconf.C from the production environment.
4. D. A backup cannot be restored, because the binary files are missing.

Correct Answer: C

You enable Automatic Static NAT on an internal host node object with a private IP address of 10.10.10.5, which is NATed into 216.216.216.5. (You use the default settings in Global Properties / NAT.)
When you run fw monitor on the R77 Security Gateway and then start a new HTTP connection from host 10.10.10.5 to browse the Internet, at what point in the monitor output will you observe the HTTP SYN-ACK packet translated from 216.216.216.5 back into 10.10.10.5?

1. A. o=outbound kernel, before the virtual machine
2. B. I=inbound kernel, after the virtual machine
3. C. O=outbound kernel, after the virtual machine
4. D. i=inbound kernel, before the virtual machine

Correct Answer: B