156-11577 Practice Exam — 45 Free Checkpoint Questions

Join Us Among the Stars

Sign Up & unlock 100% of Exam Questions

Log in / Sign up

No Strings Attached!

45Practice Questions

3Study Modes

Free

TopicSort

Question 1

VPN Troubleshooting

Henry is attempting to verify VPN connectivity between two hosts, x and y. Of the following commands, which could be BEST used to verify connectivity of this
VPN?

A [Expert@HostName]# fw monitor -e "((src=x.x.x.x , dst=y.y.y.y) or (src=y.y.y.y, dst=x.x.x.x)), accept;" x-o /var/log/fw_mon.cap
B [Expert@HostName]# fw monitor -e "host(x.x.x.x) and host(y.y.y.y), accept;" -o /var/log/fw_mon.capw monitor -e "accept;" -o /var/log/fw_mon.cap
C [Expert@HostName]# fw monitor -e "(ip_p=X) or (ip_p=Y, port(Z)), accept;" -o /var/log/fw_mon.cap
D [Expert@HostName]# fw monitor -e "ip_p=X, accept;" -o /var/log/fw_mon.cap

Question 2

Advanced VPN

Question 3

Advanced VPN

Question 4

VPN Troubleshooting

Question 5

Advanced VPN

Question 6

Advanced VPN

Question 7

Dynamic Routing

Question 8

Advanced VPN

Question 9

VPN Troubleshooting

Question 10

VPN Troubleshooting

Question 11

Dynamic Routing

Question 12

Advanced VPN

Question 13

Advanced VPN

Question 14

Advanced VPN

Question 15

Advanced VPN

Question 16

Advanced VPN

Question 17

Advanced VPN

Question 18

ClusterXL

That's the end of the Preview

This exam has 45 community-verified practice questions. Create a free account to access all questions, comments, and explanations.

Topics covered:

Troubleshoot security problemsChain ModulesNetwork Address TranslationClusterXLVPN TroubleshootingSecureXL Acceleration debuggingHardware OptimizationSoftware TuningEnable CoreXLIPSIPV6Advanced VPNDynamic Routing

Log In / Sign Up

Page 1 of 2 • Questions 1-25 of 45

1 2

→

Know a question that should be here? Contribute to this exam

Which technology is not supported with route-based VPNs?

A Unnumbered VTI
B Numbered VTI
C IKEv2
D OSPF

Which feature is not supported with unnumbered VTI?

A Proxy interfaces
B High availability
C Policy based routing
D Anti-spoofing

In the gateway object, under topology you select the "Get All Members Interfaces with Topology" option and your newly configured unnumbered VTIs are not populated. Why is this information missing?

A VTI information on unnumbered interfaces should appear, so there is an issue with your configuration.
B VTI information on unnumbered interfaces is not required information for the VPN to work.
C VTI information on unnumbered interfaces needs to be entered manually.
D In order to fetch VTI information on unnumbered interfaces you must add an explicit rule to the policy.

What operating systems support unnumbered VTIs?

A GAIA and Secure Platform
B Solaris and IPSO
C GAIA and IPSO
D Secure Platform and IPSO

Question 6

Advanced VPN

Question 7

Dynamic Routing

Question 8

Advanced VPN

Question 9

VPN Troubleshooting

Question 10

VPN Troubleshooting

Question 11

Dynamic Routing

Question 12

Advanced VPN

Question 13

Advanced VPN

Question 14

Advanced VPN

Question 15

Advanced VPN

Question 16

Advanced VPN

Question 17

Advanced VPN

Question 18

ClusterXL

You would like to configure unnumbered VTIs and your environment uses load sharing clustering. Would this clustering technology be supported by your unnumbered VTIs?

A No, unnumbered VTIs only support VRRP HA active-passive mode.
B Yes, unnumbered VTIs only support clustering load sharing.
C Yes, all HA modes are supported.
D No, unnumbered VTIs do not support any HA modes.

You are configuring dynamic routing on Secure Platform, as the administrator you run the command pro enable and reboot. You are confident that your configuration has been done correctly. When you check, you find the dynamic routing daemon has not started. What is the likely cause of this issue?

A Secure Platform does not support dynamic routing.
B You need to apply the license and push the policy.
C Dynamic routing needs to be enabled in cpconfig.
D You must push the policy after your reboot.

What is the prefix name for the interface when creating an unnumbered VTI in GAIA?

A VTii
B tun
C vpnt
D VTI

How can an administrator stay up-to-date on the status of their VPN Tunnels?

A Tracking settings can be configured on the Tunnel Management screen of the Community Properties screen for all VPN tunnels.
B Make a change in /proc/net/tun.
C Run vpn tu and select the option Live Monitoring.
D In Smartview Tracker.

Where would an administrator set an email alert for a specific permanent VPN tunnel?

A Edit the file vpnconf.
B Run sysconfig.
C In the Tunnel Properties select Mail Alert.
D You can only enable logging or SNMP traps.

Which of the these dynamic route protocols CANNOT be used along with VTI (VPN Tunnel Interface).

A OSPFR
B IGRP
C IPv1
D BGP4

When configuring a Numbered VPN-Tunnel, what parameters are necessary?

A VPN Tunnel ID, Local Address, Remote Address
B Peer, Local Address, Remote Address
C VPN Tunnel ID, Peer, Local Address, Remote Address
D VPN Tunnel ID, Peer, Physical Device

You have to establish a VPN communication between 2 spokes, routed through the Hub gateway. Where do you configure VPN routing?

A Security Gateway Object
B WebUI
C vpn_route.conf
D VPN shell

Where do you enable Route-based VPN?

A WebUI
B VPN shell
C Security Gateway Object
D vpn_route.conf

The current release of Check Point R77, what is a potential performance-related drawback to using Virtual Tunnel Interfaces (VTI) rather than Domain-based
VPNs?

A Use of VTIs will disable CoreXL and therefore will negatively impact hardware platforms running more than one CPU core.
B Dynamic routing protocols will work across a domain-based VPN, but will not work across a VTI.
C Use of VTIs will disable the entire SecureXL mechanism and prevent any traffic acceleration.
D Domain-based VPNs are easier to configure than VTIs and therefore is the preferred implementation.

What type(s) of VTI interfaces do Edge gateways support?

A Both numbered and unnumbered
B Unnumbered interfaces
C Numbered interfaces
D Neither numbered and unnumbered

What does the command vpn shell interface add numbered 192.168.0.1 192.168.0.2 Gateway_A to_B accomplish?

A Between Security Gateways A and B, 192.168.0.1 is assigned as the endpoint IP address to Gateway A. 192.168.0.2 is assigned to Gateway B.
B Between Security Gateways A and B 192.168.0.2 is assigned as the endpoint IP address to Gateway A. 192.168.0.1 is assigned to Gateway B.
C shell is not a valid option for the command vpn.
D This command can be used to create a VPN tunnel from the command line without having any VPN configuration in Smart Dashboard (although "IPSec VPN"

You are configuring a VTI in a clustered environment. Which of the following must be TRUE?

A Every interface on each member requires a unique IP address.
B Each member must have the same source IP address.
C You do not need to have cluster IP addresses.
D You cannot set up a VTI in a clustered environment.

Join Us Among the Stars

156-11577Preview

About the 156-11577 Exam

Question 1

Question 2

Question 3

Question 4

Question 5

Question 6

Question 7

Question 8

Question 9

Question 10

Question 11

Question 12

Question 13

Question 14

Question 15

Question 16

Question 17

Question 18

That's the end of the Preview

Question 6

Question 7

Question 8

Question 9

Question 10

Question 11

Question 12

Question 13

Question 14

Question 15

Question 16

Question 17

Question 18

Join Us Among the Stars

156-11577Preview

About the 156-11577 Exam

Mode Selection

Question 1

Question 2

Question 3

Question 4

Question 5

Question 6

Question 7

Question 8

Question 9

Question 10

Question 11

Question 12

Question 13

Question 14

Question 15

Question 16

Question 17

Question 18

That's the end of the Preview

Question 6

Question 7

Question 8

Question 9

Question 10

Question 11

Question 12

Question 13

Question 14

Question 15

Question 16

Question 17

Question 18