← Back to exam page

156-315.77 – Check Point Certified Security Expert

Loading demo links...

Showing 16–18 of 20 questions

Question 16 (Configuring VPN tunnels)

Which of the following statements is TRUE concerning MEP VPN’s?

Select an option, then click Submit answer.

  • ○

    State synchronization between Security Gateways is NOT required.
  • ○

    The VPN Client is assigned a Security Gateway to connect to based on a priority list, should the first connection fail.
  • ○

    MEP Security Gateways cannot be managed by separate Management Servers.
  • ○

    MEP VPN’s are restricted to the location of the gateways.
Question 17 (User Management and Authentication)

When configuring an LDAP Group object, select option if you want the gateway to reference a specific group defined on the LDAP server for authentication purposes.

Select an option, then click Submit answer.

  • ○

    Group Agnostic
  • ○

    All Account-Unit's Users
  • ○

    Only Sub Tree
  • ○

    Only Group in Branch
Question 18 (Mixed Questions Set C)

Your R76 enterprise Security Management Server is running abnormally on Windows 2008 Server. You decide to try reinstalling the Security Management Server, but you want to try keeping the critical Security Management Server configuration settings intact (i.e., all Security Policies, databases, SIC, licensing etc.)

What is the BEST method to reinstall the Server and keep its critical configuration?

Select an option, then click Submit answer.

  • ○

    1. Create a database revision control backup using the Smart Dashboard2. Create a compressed archive of the *FWDlR*\ conf and >FWDiR8\lib directories and copy them to another networked machine.3. Uninstall all R70 packages via Add/Remove Programs and reboot.4. Install again as a primary Security Management Server using the R70 CD.5. Reboot and restore the two archived directories over the top of the new installation, choosing to overwrite existing files.
  • ○

    1. Download the latest upgrade_export utility and run it from a c; \temp directory to export the configuration into a .tgz file2. Skip any upgrade_verification warnings since you are not upgrading3. Transfer the .tgz file to another networked machine4. Download and run the cpclean utility and reboot5. Use the R70 CD-ROM to select the upgrade_import option to import the configuration
  • ○

    1. Download the latest upgrade_export utility and run it from a \temp directory to export the configuration into a .tgz file2. Perform any requested upgrade_version suggested steps3. Uninstall all R70 packages via Add/Remove Programs and reboot4. Use SmartUpdate to reinstall the Security Management Server and reboot5. Transfer the tgz file back to the local \temp6. Run upgrade_import to import the configuration
  • ○

    1. Insert the F70 CD-ROM, and select the option to export the configuration using the latest upgrade utilities2. Perform any requested upgrade_verification suggested steps and re-export the configuration if needed3. Save the export " tgz file to a local c: \temp directory4. Uninstall all R70 packages via Add/Remove Programs and reboot5. Install again using the R70 CD-ROM as a primary Security Management Server and reboot6. Run upgrade_import to import the configuration