← Back to exam page

156-115.77 – Check Point Certified Security Master

Loading demo links...

Showing 1–3 of 15 questions

Question 1 (Chain Modules)

Which of the following BEST describes the command fw ctl chain function?

Select an option, then click Submit answer.

  • ○

    View how CoreXL is distributing traffic among the firewall kernel instances.

  • ○

    View established connections in the connections table.

  • ○

    View the inbound and outbound kernel modules and the order in which they are applied.

  • ○

    Determine if VPN Security Associations are being established.


Question 2 (Advanced VPN)

How do you add the route entry for the “Enforcement Point Gateway” on the Management

Server?

Select an option, then click Submit answer.

  • ○

    Designate this gateway in the VPN community properties.

  • ○

    Update file $FWDIR/conf/user.def on each peer with a route entry to the enforcement point gateway.

  • ○

    Edit file $FWDIR/conf/vpn_route.conf with a new route entry.

  • ○

    Edit peers’ WebUI to add a static route to the “designated enforcement point”.


Question 3 (Chain Modules)

What command would you use for a packet capture on an absolute position for TCP streaming (out) 1ffffe0

Select an option, then click Submit answer.

  • ○

    fw ctl chain -po 1ffffe0 -o monitor.out

  • ○

    fw monitor -po -0x1ffffe0 -o monitor.out

  • ○

    fw monitor -e 0x1ffffe0 -o monitor.out

  • ○

    fw monitor -pr 1ffffe0 -o monitor.out