156-115.77 Online Practice Questions and Answers

Which command should you use to stop kernel module debugging (excluding SecureXL)?

A. fw ctl debug 0

B. fw ctl zdebug - all

C. fw debug fwd off; vpn debug off

D. fw debug fwd off

How many sync interfaces are supported on Check Point R77 GAiA?

A. 3

B. 4

C. 2

D. 1

Which program could you use to analyze Phase I and Phase II packet exchanges?

A. vpnView

B. Check PointView

C. IKEView

D. vpndebugView

You are troubleshooting a VPN issue between your gateway and a partner site and you get a drop log on your gateway that states "Clear text packet should be encrypted". Which of the following would be the best troubleshooting step?

A. Use the excluded services in the VPN community to exclude this traffic from the VPN or determine why the traffic is leaving the initiating (partner) gateway as clear text.

B. Use the excluded services in the VPN community to exclude this traffic from the VPN or determine why the traffic is leaving local (your) gateway as clear text.

C. Your phase one algorithms are mismatched between gateways.

D. This is management traffic and we need to enable implied rule to address this issue.

When VPN user-based authentication fails, which of the following debug logs is essential to understanding the issue?

A. VPN-1 kernel debug logs

B. IKE.elg

C. Vpnd.elg

D. fw monitor trace

The command fwaccel stat displays what information?

A. Accelerator status, accept templates, drop templates

B. Accelerated packets, accept templates, dropped packets

C. Accelerator status, accelerated rules, drop templates

D. Accelerator status, CoreXL state, drop templates

What command can be used to get the following output?

A. fw ctl kdebug

B. fw monitor e "accept;"

C. fwaccel conns

D. netstat -ni

In an HA cluster, you modify the number of cores given to CoreXL on only one member using cpconfig and then issue a reboot. What is the expected ClusterXL status of this member when it comes up?

A. Standby

B. Ready

C. Active

D. Down

A system administrator wants to convert an IPv6 gateway from a standard gateway into a gateway running VSX mode. What does he need to consider?

A. It is not possible to convert a gateway with IPv6 enabled to VSX mode.

B. There needs to be proper IPv6 routing setup.

C. At least two interfaces need to be configured with IPv6.

D. Policy needs to be properly applied to the gateway before converting the system to VSX mode.

You are configuring a VTI in a clustered environment. Which of the following must be TRUE?

A. Every interface on each member requires a unique IP address.

B. Each member must have the same source IP address.

C. You do not need to have cluster IP addresses.

D. You cannot set up a VTI in a clustered environment.