156-215.77 Check Point Security Featuring GAiA R77 Exam

Sample Questions:

Q) When restoring R77 using the command upgrade_ import, which of the following items are NOT restored?

A. SIC Certificates

B. Licenses

C. Route tables

D. Global properties

Q) Which Check Point address translation method allows an administrator to use fewer ISP- assigned IP addresses than the number of internal hosts requiring Internet connectivity?

A. Hide

B. Static Destination

C. Static Source

D. Dynamic Destination

Q) NAT can NOT be configured on which of the following objects?

A. HTTP Logical Server

B. Gateway

C. Address Range

D. Host

Q) Which Check Point address translation method is necessary if you want to connect from a host on the Internet via HTTP to a server with a reserved (RFC 1918) IP address on your DMZ?

A. Dynamic Source Address Translation

B. Hide Address Translation

C. Port Address Translation

D. Static Destination Address Translation

Q) Which NAT option applicable for Automatic NAT applies to Manual NAT as well?

A. Allow bi-directional NAT

B. Automatic ARP configuration

C. Translate destination on client-side

D. Enable IP Pool NAT

Q) When translation occurs using automatic Hide NAT, what also happens?

A. Nothing happens.

B. The destination is modified.

C. The destination port is modified.

D. The source port is modified.

Q) The fw monitor utility is used to troubleshoot which of the following problems?

A. Phase two key negotiation

B. Address translation

C. Log Consolidation Engine

D. User data base corruption