← Back to exam page

156-115.77 – Check Point Certified Security Master

Loading demo links...

Showing 7–9 of 15 questions

Question 7 (VPN Troubleshooting)

In IKEView while troubleshooting a VPN issue between your gateway and a partner site you see an entry that states “Invalid ID”. Which of the following is the most likely cause?

Select an option, then click Submit answer.

  • ○

    IKEv1 is not supported by the peer.

  • ○

    Time is not matching between two members.

  • ○

    The encryption parameters (hash, encryption type, etc.) do not match.

  • ○

    Wrong subnets are being negotiated.


Question 8 (IPS)

Which of the following IPS Layers is a set of signatures and/or handlers, where:

?Signature is a malicious pattern that is searched for.

?Handler is the INSPECT code that performs more complex inspection.

Select an option, then click Submit answer.

  • ○

    Passive Streaming Library (PSL)

  • ○

    Protections

  • ○

    Context Management Interface layer (CMI)

  • ○

    Protocol Parsers


Question 9 (IPS)

In R77, Under what circumstances would IPS bypass be enforced?

Select an option, then click Submit answer.

  • ○

    Single CoreXL fw instance usage over ‘High’ threshold, Average Memory over ‘High’ threshold

  • ○

    Single CoreXL fw instance usage over ‘Low’ threshold, Average Memory over ‘High’ threshold

  • ○

    Average CPU over ‘High’ threshold, Average Memory over ‘Low’ threshold

  • ○

    Average CPU over ‘High’ threshold, Average Memory over ‘High’ threshold