CCSM 156-115.77 Updated Exam

Check Point Certified Security Master Questions and Answers

Question 29

Misha is working on a stand-by firewall and deletes the connections table in error. He finds that now the table is out of sync with the Active member. to get them completely synced again, Mish should run the command pair ____________ and __________ .

Options:

fw ctl sync stop, fw ctl sync start

fw ctl setsync off, fw ctl setsync start

fw ctl setsync stop, fw ctl setsync on

fw ctl setsync off, fw ctl setsync on

Question 30

How does the Check Point Security Administrator enable NAT Templates?

Options:

Run commands with syntax fw ctl set int cphwd_nat_templates_support 1 and fw ctl set int cphwd_nat_templates_enabled 1.

Edit file $FWDIR/boot/modules/fwkern.conf with the lines “cphwd_nat_templates_support=1” and “cphwd_nat_templates_enabled=1”.

Set Firewall object > NAT > Advanced

Set Global properties > NAT-Network address translation

Question 31

In a ClusterXL cluster with delayed synchronization, which of the following is not true?

Options:

The length of time for the delay can be edited.

It applies only to TCP services whose Protocol Type is set to HTTP or None.

Delayed Synchronization is disabled if the Track option in the rule is set to Log or Account.

Delayed Synchronization is performed only for connections matching a SecureXL Connection Template.

Question 32

What is one way to check cluster status on two gateways running in HA mode?

Options:

show cluster

cphaprob stat

cp ha prob stat

show cluster ha status

New Year Special 70% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: save70

Check Point Certified Security Master Questions and Answers

Options:

Answer:

Options:

Answer:

Options:

Answer:

Options:

Answer:

CompTIA

Fortinet

Microsoft

Salesforce