Is this exam completely free?

ExamCademy offers a free preview for every exam, covering around 20% of the total questions. Full access to all questions is available for free by signing up for an account. Optional supporters unlock AstroTutor (AI tutor) and advanced study modes.

Can I practice IT certification exams from Microsoft, AWS, or CompTIA?

Yes! ExamCademy supports a wide range of IT certification exams including Microsoft Azure, AWS Cloud Practitioner, and CompTIA A+ and Security+.

How accurate are the mock exams?

Our practice questions are community-created and moderator-reviewed to align with realistic exam objectives, style, and difficulty.

156-11577 by Checkpoint - Page 1 | ExamCademy

Mode Selection

Sort:

Question 1

Question 2

Question 3

Question 4

Question 5

Question 6

Question 7

Question 8

Question 9

That's the end of the Preview

Create a free account to unlock all questions for this exam.

Log In / Sign Up

Page 1 of 2 • Questions 1-25 of 42

1 2

→

Know a question that should be here? Contribute to this exam

Henry is attempting to verify VPN connectivity between two hosts, x and y. Of the following commands, which could be BEST used to verify connectivity of this
VPN?

A [Expert@HostName]# fw monitor -e "((src=x.x.x.x , dst=y.y.y.y) or (src=y.y.y.y, dst=x.x.x.x)), accept;" x-o /var/log/fw_mon.cap
B [Expert@HostName]# fw monitor -e "host(x.x.x.x) and host(y.y.y.y), accept;" -o /var/log/fw_mon.capw monitor -e "accept;" -o /var/log/fw_mon.cap
C [Expert@HostName]# fw monitor -e "(ip_p=X) or (ip_p=Y, port(Z)), accept;" -o /var/log/fw_mon.cap
D [Expert@HostName]# fw monitor -e "ip_p=X, accept;" -o /var/log/fw_mon.cap

Which technology is not supported with route-based VPNs?

A Unnumbered VTI
B Numbered VTI
C IKEv2
D OSPF

Which feature is not supported with unnumbered VTI?

A Proxy interfaces
B High availability
C Policy based routing
D Anti-spoofing

In the gateway object, under topology you select the "Get All Members Interfaces with Topology" option and your newly configured unnumbered VTIs are not populated. Why is this information missing?

A VTI information on unnumbered interfaces should appear, so there is an issue with your configuration.
B VTI information on unnumbered interfaces is not required information for the VPN to work.
C VTI information on unnumbered interfaces needs to be entered manually.
D In order to fetch VTI information on unnumbered interfaces you must add an explicit rule to the policy.

What operating systems support unnumbered VTIs?

A GAIA and Secure Platform
B Solaris and IPSO
C GAIA and IPSO
D Secure Platform and IPSO

You would like to configure unnumbered VTIs and your environment uses load sharing clustering. Would this clustering technology be supported by your unnumbered VTIs?

A No, unnumbered VTIs only support VRRP HA active-passive mode.
B Yes, unnumbered VTIs only support clustering load sharing.
C Yes, all HA modes are supported.
D No, unnumbered VTIs do not support any HA modes.

You are configuring dynamic routing on Secure Platform, as the administrator you run the command pro enable and reboot. You are confident that your configuration has been done correctly. When you check, you find the dynamic routing daemon has not started. What is the likely cause of this issue?

A Secure Platform does not support dynamic routing.
B You need to apply the license and push the policy.
C Dynamic routing needs to be enabled in cpconfig.
D You must push the policy after your reboot.

What is the prefix name for the interface when creating an unnumbered VTI in GAIA?

A VTii
B tun
C vpnt
D VTI

How can an administrator stay up-to-date on the status of their VPN Tunnels?

A Tracking settings can be configured on the Tunnel Management screen of the Community Properties screen for all VPN tunnels.
B Make a change in /proc/net/tun.
C Run vpn tu and select the option Live Monitoring.
D In Smartview Tracker.