156-915.77 Free Practice Test

- (Topic 7)
Which of the following allows administrators to allow or deny traffic to or from a specific network based on the user’s credentials?

1. A. Access Policy
2. B. Access Role
3. C. Access Rule
4. D. Access Certificate

Correct Answer: B

- (Topic 4)
You just installed a new Web server in the DMZ that must be reachable from the Internet. You create a manual Static NAT rule as follows:
Source: Any || Destination: web_public_IP || Service: Any || Translated Source: original ||
Translated Destination: web_private_IP || Service: Original
“web_public_IP” is the node object that represents the new Web server’s public IP address. “web_private_IP” is the node object that represents the new Web site’s private IP address. You enable all settings from Global Properties > NAT.
When you try to browse the Web server from the Internet you see the error “page cannot be displayed”. Which of the following is NOT a possible reason?

1. A. There is no Security Policy defined that allows HTTP traffic to the protected Web server.
2. B. There is no ARP table entry for the protected Web server’s public IP address.
3. C. There is no route defined on the Security Gateway for the public IP address to the Web server’s private IP address.
4. D. There is no NAT rule translating the source IP address of packets coming from the protected Web server.

Correct Answer: D

- (Topic 4)
Your main internal network 10.10.10.0/24 allows all traffic to the Internet using Hide NAT. You also have a small network 10.10.20.0/24 behind the internal router. You want to configure the kernel to translate the source address only when network 10.10.20.0 tries to access the Internet for HTTP, SMTP, and FTP services. Which of the following configurations will allow this network to access the Internet?

1. A. Configure three Manual Static NAT rules for network 10.10.20.0/24, one for each service.
2. B. Configure Automatic Static NAT on network 10.10.20.0/24.
3. C. Configure one Manual Hide NAT rule for HTTP, FTP, and SMTP services for network 10.10.20.0/24.
4. D. Configure Automatic Hide NAT on network 10.10.20.0/24 and then edit the Service column in the NAT Rule Base on the automatic rule.

Correct Answer: C

- (Topic 14)
Your expanding network currently includes ClusterXL running Multicast mode on two members, as shown in this topology:
Exhibit:

You need to add interfaces: 10.10.10.1/24 on Member A, and 10.10.10.2/24 on Member B. The virtual IP address for these interfaces is 10.10.10.3/24. Both cluster gateways have a Quad card with an available eth3 interface. What is the correct procedure to add these interfaces?
Solution:


Does this meet the goal?

1. A. Yes
2. B. No

Correct Answer: A

- (Topic 12)
MultiCorp is running Smartcenter R71 on an IPSO platform and wants to upgrade to a new Appliance with R77. Which migration tool is recommended?

1. A. Download Migration Tool R77 for IPSO and Splat/Linux from Check Point website.
2. B. Use already installed Migration Tool.
3. C. Use Migration Tool from CD/ISO
4. D. Fetch Migration Tool R71 for IPSO and Migration Tool R77 for Splat/Linux from CheckPoint website

Correct Answer: A